Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235342e302f32342d3234203d3e20323637393334.roa
File:                     34352e3136352e3235342e302f32342d3234203d3e20323637393334.roa (raw, json)
Hash identifier:          /ZogFpwQ/xgat5LRwk7U+aJdiWeCyxku1OwuD5HkTkY=
Subject key identifier:   E1:00:9F:5A:87:13:6D:98:94:A6:26:02:D7:BE:36:2F:5C:16:3A:D6
Certificate issuer:       /CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Certificate serial:       31D1534D8CE64FE33396CEE0556C6ECE8ECF64E6
Authority key identifier: 3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235342e302f32342d3234203d3e20323637393334.roa
Signing time:             Tue 09 Jul 2024 22:54:35 +0000
ROA not before:           Tue 09 Jul 2024 22:49:35 +0000
ROA not after:            Tue 08 Jul 2025 22:54:35 +0000
asID:                     267934
IP address blocks:        45.165.254.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d1:53:4d:8c:e6:4f:e3:33:96:ce:e0:55:6c:6e:ce:8e:cf:64:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
        Validity
            Not Before: Jul  9 22:49:35 2024 GMT
            Not After : Jul  8 22:54:35 2025 GMT
        Subject: CN=E1009F5A87136D9894A62602D7BE362F5C163AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:27:34:0e:62:4b:64:7c:b7:fd:23:14:2f:
                    cb:e5:20:14:f0:21:9e:ee:d1:e9:4c:b8:18:d7:38:
                    cf:22:33:73:56:57:61:35:f4:25:bb:b8:5a:d6:6e:
                    57:2a:87:e0:8f:d0:89:0a:cb:8e:79:62:11:75:9d:
                    b6:04:d1:c8:59:2f:30:81:50:b2:f4:cc:d0:c6:80:
                    64:11:a1:b5:46:eb:d6:fd:78:2c:21:1b:e6:09:fb:
                    6c:a1:8c:6a:4f:f5:3b:10:32:98:97:9a:5e:6b:74:
                    f2:67:bc:92:33:1d:13:b5:95:f3:9b:70:0d:44:5c:
                    d0:d3:5f:dc:07:9f:b0:7f:94:f9:a4:43:d9:c9:37:
                    e7:e2:48:d9:d4:05:17:2d:12:47:a5:0c:2d:4f:81:
                    e8:85:06:3b:e0:69:e1:44:f3:31:5f:82:c0:87:8c:
                    db:a4:d4:21:e8:b6:ac:63:ad:52:0d:67:a5:ff:9f:
                    0d:26:47:a6:94:a9:08:95:88:5d:5d:4f:c1:12:e6:
                    ff:df:99:e3:75:62:07:d9:34:ab:e1:2f:53:89:c8:
                    9e:0e:16:a6:79:68:b7:cd:17:48:3f:84:ab:89:71:
                    20:54:1a:77:12:e8:9a:a2:d6:b3:f3:00:89:12:8c:
                    d8:d5:85:c5:94:d0:dc:5a:33:c4:1d:e7:42:aa:4e:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:00:9F:5A:87:13:6D:98:94:A6:26:02:D7:BE:36:2F:5C:16:3A:D6
            X509v3 Authority Key Identifier:
                keyid:3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235342e302f32342d3234203d3e20323637393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:70:3d:f1:8b:23:23:03:b0:27:59:ca:b8:b7:44:bf:8b:69:
         65:cd:7b:19:5a:6d:1f:1a:30:80:17:4a:b3:f7:66:15:d3:d9:
         43:6d:39:21:b4:22:a2:1d:22:47:e5:26:dc:12:4a:8e:bf:d3:
         5b:51:ea:c7:58:73:b4:fd:02:f2:14:95:b3:ac:16:ea:d9:8c:
         32:fe:66:5d:23:db:da:13:8f:3b:75:12:22:2f:cd:f5:d7:85:
         b0:b7:2f:79:08:15:4d:80:c2:68:8d:c4:11:9b:d1:84:e9:0a:
         89:64:65:16:69:59:21:f0:60:14:c9:3f:e5:67:be:eb:f3:33:
         d4:fb:6d:b4:0d:a1:83:ce:39:27:5f:79:48:bb:66:dd:08:d7:
         8d:d8:96:c0:58:19:cb:57:1b:02:61:99:33:27:de:0b:be:1a:
         0c:ca:1d:eb:53:c1:1f:c3:11:0d:19:29:05:a4:ed:2b:9f:1c:
         17:85:3a:e8:7e:c8:05:f1:af:2e:12:0f:69:e1:25:de:ef:6e:
         aa:f0:de:68:4b:c3:55:62:f5:54:bb:5b:1b:65:57:89:4d:f2:
         0d:f0:9a:fc:b5:4e:75:ad:a4:23:fa:86:90:ba:2d:a3:b0:bb:
         1a:96:c3:87:b5:ec:69:14:4d:4b:cb:cc:9b:de:35:f8:24:66:
         96:7f:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 13:09:04 2024 by rpki-client on console-fra.rpki-client.org