Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/34352e3138342e38382e302f32322d3234203d3e20323730323535.roa
File:                     34352e3138342e38382e302f32322d3234203d3e20323730323535.roa (raw, json)
Hash identifier:          FSgORGPIJQF8N2ZNL4716gMDI3WDON8Lb4EadfBVHuE=
Subject key identifier:   96:58:CF:B8:EE:EF:48:09:B0:6E:9B:A5:C0:7D:73:DD:D6:B7:A3:BC
Certificate issuer:       /CN=51C2EC2E8985040FA85C26651E67991D969C7E20
Certificate serial:       2F0F6991315BA7A9EBCB5172011D56B910EFD9BC
Authority key identifier: 51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/34352e3138342e38382e302f32322d3234203d3e20323730323535.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     270255
IP address blocks:        45.184.88.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:69:91:31:5b:a7:a9:eb:cb:51:72:01:1d:56:b9:10:ef:d9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C2EC2E8985040FA85C26651E67991D969C7E20
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=9658CFB8EEEF4809B06E9BA5C07D73DDD6B7A3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:35:04:2e:b1:ff:5e:9f:b5:49:4f:b5:07:
                    44:ef:3d:d9:09:53:d9:57:a8:ce:80:00:38:a3:26:
                    f5:88:a4:f5:d0:1d:2d:8e:22:92:b1:90:3d:a4:cc:
                    c0:e0:53:c1:52:9b:2c:cf:aa:1c:83:bd:47:50:df:
                    47:d0:da:a7:d7:c7:69:69:71:cc:4f:b3:9b:54:9d:
                    35:27:cb:34:24:a8:8e:84:87:99:16:8b:56:ad:ae:
                    d6:af:12:c5:4e:0c:fa:1d:84:78:61:c7:4f:d2:0f:
                    62:e7:62:4a:d4:a2:e5:25:a7:02:97:88:a4:22:a4:
                    8a:a8:c0:33:75:18:59:92:c8:ec:26:96:45:e3:5e:
                    a2:d7:d2:ba:e4:30:3d:af:7e:dd:f0:20:37:3e:89:
                    c7:41:98:c3:e4:c8:20:50:e6:c9:3b:32:53:19:48:
                    09:39:3a:91:d9:35:90:be:21:d9:43:23:05:c7:99:
                    8d:df:14:1b:d0:e0:68:ce:c6:d7:8a:82:65:e7:27:
                    38:0d:cb:44:6a:df:be:28:9e:99:6d:24:75:d9:d6:
                    6c:8b:70:9e:60:24:70:a6:80:34:73:15:de:1d:83:
                    2c:fc:d3:4f:77:f6:ae:8d:2a:4b:4b:de:d2:cd:e8:
                    b8:f9:ee:57:e5:ac:4c:93:e9:14:6a:63:48:b9:69:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:58:CF:B8:EE:EF:48:09:B0:6E:9B:A5:C0:7D:73:DD:D6:B7:A3:BC
            X509v3 Authority Key Identifier:
                keyid:51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/51C2EC2E8985040FA85C26651E67991D969C7E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/34352e3138342e38382e302f32322d3234203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:04:44:af:7c:47:6c:53:f0:90:ca:bc:41:3a:7a:49:b2:44:
         f3:44:aa:d0:cd:9b:bd:49:00:0f:a3:8e:33:d8:8d:5f:4a:ff:
         26:d3:e6:e7:46:12:cc:e3:28:a3:dc:35:0a:db:28:c6:a1:e9:
         f2:56:a0:2c:39:aa:b0:2d:a6:57:f4:87:b9:94:07:45:74:49:
         6d:2f:34:c6:e3:e0:6f:85:69:bd:e6:3a:26:f9:07:5a:a3:c2:
         9e:42:b1:d7:8f:16:b1:0e:1c:f5:eb:13:80:6b:38:8d:ca:fb:
         c9:14:4a:e2:1d:c6:40:0a:ba:e6:4c:1d:44:56:09:b6:b3:01:
         bd:2b:63:57:34:d6:29:7c:9f:c0:81:dc:4a:8e:81:ec:b3:e1:
         45:92:4a:58:0b:71:71:fb:dd:0f:cd:c5:88:53:90:e8:a8:f0:
         af:07:c0:af:ef:72:b6:67:39:61:c9:7e:3e:6c:f5:15:33:96:
         68:9d:19:cd:f4:ab:80:63:55:67:a6:d4:25:31:22:f1:77:58:
         23:84:0b:79:d3:e5:7f:9a:8c:f8:cf:88:91:76:a8:b3:d1:3f:
         9f:d5:bb:7f:b2:aa:95:99:39:2e:e4:71:80:5e:8f:6f:cf:5e:
         44:60:fb:65:f8:cf:b9:42:13:85:e9:07:65:b7:f2:68:e4:7e:
         0f:d0:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 10:58:44 2024 by rpki-client on console-fra.rpki-client.org