Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa
File:                     34352e3136342e34312e302f32342d3234203d3e20323638353936.roa (raw, json)
Hash identifier:          /+QXJ/xSEspyPIV6EXJ60lM6Pjp+m/eiViUNC/FrTEU=
Subject key identifier:   2D:59:F7:46:74:12:17:97:40:C4:C9:E1:20:00:28:F7:50:D4:24:39
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       1D2EC232B7D897707E0D08BF7B717FAE3AA2BA63
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:25:06 +0000
ROA not before:           Wed 14 Aug 2024 15:20:06 +0000
ROA not after:            Wed 13 Aug 2025 15:25:06 +0000
asID:                     268596
IP address blocks:        45.164.41.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2e:c2:32:b7:d8:97:70:7e:0d:08:bf:7b:71:7f:ae:3a:a2:ba:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:20:06 2024 GMT
            Not After : Aug 13 15:25:06 2025 GMT
        Subject: CN=2D59F7467412179740C4C9E1200028F750D42439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:44:94:22:d4:74:92:43:ca:c1:18:39:64:
                    5c:52:28:ad:e4:21:1d:00:af:62:9b:f9:38:4e:f8:
                    37:90:c3:dd:b1:0d:4b:a8:c7:be:9a:ac:37:ea:07:
                    9e:6f:84:36:2b:b3:d4:fa:2a:46:11:0c:09:07:32:
                    ba:e4:61:37:95:3b:e8:da:30:9a:0b:9d:7e:be:e8:
                    2d:b7:f6:9f:e6:81:50:8e:f2:f6:43:ab:06:46:f9:
                    38:06:4e:1e:93:3e:12:c7:50:64:1d:86:a1:8e:7b:
                    f7:a4:40:72:65:4b:2f:63:05:7f:e0:90:c1:e6:ed:
                    76:89:d7:e6:ab:93:b8:b4:aa:22:b8:0d:85:e6:9c:
                    78:51:8d:27:94:9f:e5:a4:a7:46:01:d9:d1:62:99:
                    7d:d1:d3:5a:10:92:44:5b:d0:ff:ca:82:84:a5:85:
                    e1:8b:27:1b:49:43:4b:13:bb:f5:59:13:1b:a0:c6:
                    30:7b:29:01:ba:12:9b:a9:21:ac:72:64:e4:cc:67:
                    08:f5:df:74:8f:47:5a:68:81:e5:46:a1:36:90:93:
                    68:39:09:a8:d9:09:0d:99:56:91:d9:e9:d2:17:d4:
                    ae:3c:e7:2c:c0:2e:a6:19:43:1f:dd:58:80:17:40:
                    13:1f:b4:1b:13:72:ea:bf:e2:fe:9d:34:22:b9:b2:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:F7:46:74:12:17:97:40:C4:C9:E1:20:00:28:F7:50:D4:24:39
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:08:00:4d:4d:f3:2b:cb:c2:fa:9b:ec:a6:fd:6f:8c:ab:
         b5:6b:d1:be:33:5e:62:db:96:50:78:45:1c:49:1a:19:59:b4:
         c9:05:19:4a:0e:cd:6a:66:f3:7e:63:66:30:47:fd:7c:c6:00:
         4a:99:f9:6d:8d:a1:2a:74:cd:a7:e8:fa:df:05:5f:a8:a2:47:
         e9:05:73:c8:d8:1d:60:d6:c1:02:f8:78:47:3a:3c:60:ed:69:
         be:cd:e4:43:c3:1f:45:a4:65:80:f3:44:ae:e2:85:a7:04:ee:
         6d:9d:aa:ef:e8:a5:eb:e3:c3:19:de:bb:02:9a:fa:ee:c8:ae:
         d0:38:c5:e6:9b:7c:d4:1a:16:f1:85:72:e0:91:e2:ff:51:4e:
         72:f6:9e:1b:74:7b:9d:71:31:98:63:84:04:b5:a6:b5:76:f0:
         53:4a:e9:21:c6:46:4a:3b:35:5a:51:47:f2:92:99:a4:13:4f:
         2c:26:3c:d3:80:f1:b2:76:ec:7c:77:16:34:96:01:89:2b:6a:
         6a:93:ce:83:48:e2:9b:e6:10:46:2f:47:4c:40:90:cb:66:51:
         30:b1:ab:73:a8:79:33:d1:33:5a:c4:1f:cb:0c:02:6d:02:4c:
         b2:89:2f:ab:ff:c6:9e:38:76:41:7e:30:a6:45:dd:6a:92:14:
         b5:e7:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org