Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa
File:                     34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa (raw, json)
Hash identifier:          CQGw41vHPKy02/d7HhnmlzdOFUs8NPsD+HyvdyF3J3M=
Subject key identifier:   7B:99:FC:3C:F3:77:B4:96:BA:1F:0D:55:D1:0B:1D:01:E1:4A:32:E1
Certificate issuer:       /CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
Certificate serial:       3557E3BBF8EC406CFA158E6E417CFB23F3C5B9D0
Authority key identifier: 1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa
Signing time:             Thu 04 Apr 2024 00:14:55 +0000
ROA not before:           Thu 04 Apr 2024 00:09:55 +0000
ROA not after:            Thu 03 Apr 2025 00:14:55 +0000
asID:                     268291
IP address blocks:        45.237.224.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:e3:bb:f8:ec:40:6c:fa:15:8e:6e:41:7c:fb:23:f3:c5:b9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
        Validity
            Not Before: Apr  4 00:09:55 2024 GMT
            Not After : Apr  3 00:14:55 2025 GMT
        Subject: CN=7B99FC3CF377B496BA1F0D55D10B1D01E14A32E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:e2:05:dc:c7:b7:76:82:fb:7b:fa:ba:92:
                    6b:ee:a1:4e:c8:14:ec:16:98:e5:2e:0a:ba:00:b3:
                    6d:e7:a2:a3:8a:b4:c4:fb:31:56:44:ba:41:31:47:
                    7f:1e:6f:78:14:a5:ad:24:a9:59:0f:91:1a:e2:03:
                    e4:e2:0a:fd:6e:9a:49:94:ce:b9:5a:4e:06:45:63:
                    29:03:8d:9b:84:91:77:88:e4:a2:77:ce:65:49:4e:
                    cd:b8:46:d3:40:fb:00:7a:d7:90:ed:e3:27:b0:88:
                    16:20:e9:9f:23:a9:b5:44:c6:91:58:73:14:60:eb:
                    01:9d:97:03:a6:aa:5d:9b:f5:b8:74:9c:2e:9c:99:
                    02:0e:f1:4a:3b:e7:70:ee:06:cc:e9:cc:d0:6c:11:
                    43:3e:f6:02:fd:78:da:7d:6a:cd:8e:46:d4:b0:8e:
                    a3:c5:66:d3:e6:fd:4f:87:d6:91:b5:b5:f4:2e:bb:
                    b6:5d:29:1a:b9:10:ba:0e:74:ba:c2:d5:2f:85:cb:
                    1e:18:23:fb:40:59:27:8c:66:38:af:f0:5d:d5:b7:
                    d1:22:94:d5:24:22:71:2c:fc:96:5a:8e:2e:b7:6b:
                    48:26:d4:0b:85:53:c9:d4:69:95:c3:e6:bf:e0:ca:
                    38:ae:c4:9f:c3:16:65:6a:18:ac:53:70:74:07:09:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:FC:3C:F3:77:B4:96:BA:1F:0D:55:D1:0B:1D:01:E1:4A:32:E1
            X509v3 Authority Key Identifier:
                keyid:1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:58:c3:6f:3e:6f:1d:1d:53:44:c4:b8:55:51:76:fc:b9:55:
         71:c8:67:5a:51:f5:de:5e:9f:c2:5b:af:d3:db:f7:69:7b:4f:
         a7:12:8f:1c:68:7e:a9:e5:f8:c5:7e:49:58:d9:0d:f7:fd:09:
         8b:1d:26:ff:e5:36:36:b7:bf:3c:63:71:1b:a7:91:96:b1:f9:
         8f:c7:65:e1:19:1d:f0:da:06:1c:2a:3a:00:3a:8b:99:cf:60:
         75:b2:5a:4c:cf:44:74:f3:bc:95:f2:db:26:bd:d0:7d:ce:3f:
         35:ac:f3:a7:bc:1c:d5:08:1b:c0:13:9a:11:9c:6d:89:47:16:
         9b:38:3d:d1:b2:ac:58:09:d4:28:e3:3e:48:e8:73:64:c7:ea:
         d4:54:4a:fa:9a:d3:fb:42:ac:7e:5b:1e:99:f2:b1:06:ed:71:
         2e:b1:b7:d0:8d:18:3f:8d:81:5c:50:5e:05:19:b9:aa:47:a3:
         ff:29:27:69:31:2a:23:9b:54:5f:ad:87:1b:b4:1c:bf:f5:fe:
         72:dc:45:dd:30:eb:88:d8:3c:05:fe:6e:c2:46:2c:91:9e:51:
         12:81:1a:6c:11:e8:ad:ef:cf:85:81:2f:d0:a5:30:fa:92:ff:
         ee:79:15:fb:0c:ab:a1:a7:9b:fa:62:9e:5b:3b:86:10:0d:52:
         79:37:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:09 2024 by rpki-client on console-ams.rpki-client.org