Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32342d3234203d3e20323638353936.roa
File:                     34352e3136342e34322e302f32342d3234203d3e20323638353936.roa (raw, json)
Hash identifier:          RIhCIoRZB5Aib1GvoBw5l0yCmiBenxe1O0SCCw1b92E=
Subject key identifier:   9C:55:DA:74:04:DA:A6:DD:65:D6:E5:0E:AD:37:6A:4F:CF:1D:35:CB
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       51F85B1A126839427A590E0B0BE7837F2EC26CA3
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32342d3234203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:25:11 +0000
ROA not before:           Wed 14 Aug 2024 15:20:11 +0000
ROA not after:            Wed 13 Aug 2025 15:25:11 +0000
asID:                     268596
IP address blocks:        45.164.42.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f8:5b:1a:12:68:39:42:7a:59:0e:0b:0b:e7:83:7f:2e:c2:6c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:20:11 2024 GMT
            Not After : Aug 13 15:25:11 2025 GMT
        Subject: CN=9C55DA7404DAA6DD65D6E50EAD376A4FCF1D35CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:bc:43:0c:79:e2:2d:f8:eb:af:ce:e4:d9:
                    05:10:36:b1:06:12:92:b6:cf:25:41:df:40:58:05:
                    2c:c6:ec:cc:52:b3:68:78:cc:95:af:39:fe:9b:18:
                    d6:ef:91:a8:4d:df:cd:bf:0f:e9:f1:93:b5:82:af:
                    7a:75:0d:90:9a:88:cb:a6:be:8b:a3:22:e5:0a:75:
                    1d:40:05:1d:44:9a:7e:ec:ae:31:3b:03:8c:a3:bd:
                    34:0e:5a:67:dc:85:c8:9f:42:2b:63:2c:a4:ee:99:
                    7f:0c:4f:84:d4:c8:94:09:8d:ef:d0:96:cd:62:a4:
                    1e:d9:8b:e2:39:f4:dd:65:8d:ad:37:2b:5f:e4:5f:
                    f6:f0:b5:5b:5d:a9:5e:31:c7:fd:4e:f2:a4:ae:72:
                    f2:b9:b4:84:5f:ac:94:a7:40:58:a5:ab:ce:5c:cd:
                    32:09:52:f0:a9:10:02:01:3c:ad:d1:03:ca:be:e4:
                    9d:13:68:cc:3c:74:b3:e0:77:6b:94:f9:62:61:68:
                    b4:14:49:8c:1b:2f:b7:b3:96:45:f4:f8:44:ae:b2:
                    3d:29:8d:34:75:be:de:e8:44:23:d7:a0:e1:45:d3:
                    13:e0:34:74:75:ad:c5:8b:d8:01:89:98:cc:2d:6d:
                    8d:75:49:09:70:39:d1:83:d9:78:cf:3f:f0:3f:2b:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:55:DA:74:04:DA:A6:DD:65:D6:E5:0E:AD:37:6A:4F:CF:1D:35:CB
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32342d3234203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:33:d9:d0:25:4b:10:76:55:80:02:15:7d:78:46:8f:f2:
         72:bf:76:b9:c3:de:02:aa:db:8e:7f:9d:c4:42:1c:7e:6b:19:
         03:b4:9f:3f:f3:46:1c:9b:ab:58:1f:5b:01:c3:68:32:a2:bc:
         92:e2:59:81:1c:96:89:1c:d4:c8:50:19:ed:39:54:13:a4:ec:
         68:18:bf:80:1c:ce:5d:80:18:5d:6e:19:39:79:ca:0b:9e:83:
         00:94:ad:82:b9:50:2f:96:46:25:ae:d4:51:9c:a7:ef:33:57:
         93:15:96:9f:ac:b9:43:18:19:b1:cf:bc:2c:c7:84:b8:e5:01:
         c4:1f:e8:5b:c1:93:86:3d:c5:23:c1:c5:5a:c0:55:6a:d1:24:
         68:db:bb:c4:60:6a:09:85:3f:06:3e:14:45:32:1c:79:65:14:
         28:ef:c2:7b:d1:ac:c4:8f:13:56:49:b2:59:f9:cc:85:d8:b5:
         73:74:e6:95:ee:0f:88:f4:2b:b1:76:3b:f0:34:99:dc:e6:2f:
         16:43:45:78:ab:73:27:ac:90:02:50:c0:d9:50:55:4f:55:eb:
         4d:f2:55:dc:b9:62:13:10:4c:2d:e3:f8:f3:8a:e1:58:dd:8b:
         57:f5:bc:e3:a1:cc:13:ad:7d:ef:ce:4a:de:e0:ab:03:10:79:
         a2:65:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:31:57 2024 by rpki-client on console-ams.rpki-client.org