Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32322d3232203d3e20323636393231.roa
File:                     34352e3232352e33362e302f32322d3232203d3e20323636393231.roa (raw, json)
Hash identifier:          +Si0vqIotZPxFtMYfMd7GSAemlmhxLwAfoPhEzLEHsA=
Subject key identifier:   F8:B6:B7:17:06:6F:A2:68:CC:2D:AC:21:2F:86:4A:DE:1E:CF:E4:27
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       0193ABF5A644F4291A57CE52C7C0D7156C2967B1
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32322d3232203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:28 +0000
ROA not before:           Tue 09 Jul 2024 14:10:28 +0000
ROA not after:            Tue 08 Jul 2025 14:15:28 +0000
asID:                     266921
IP address blocks:        45.225.36.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ab:f5:a6:44:f4:29:1a:57:ce:52:c7:c0:d7:15:6c:29:67:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:28 2024 GMT
            Not After : Jul  8 14:15:28 2025 GMT
        Subject: CN=F8B6B717066FA268CC2DAC212F864ADE1ECFE427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4c:34:b3:95:8b:97:bd:df:2c:2b:59:9d:d1:
                    d7:3e:87:44:a8:81:42:f0:90:f5:c2:02:84:7d:79:
                    db:50:05:20:bf:0e:07:f7:6a:2a:2f:8f:6f:6a:c7:
                    05:fc:4a:11:1c:24:c4:2b:db:f1:0d:38:15:a4:5e:
                    96:23:05:95:29:97:a4:6e:5b:0d:6d:6a:0a:2e:28:
                    5d:52:f6:a8:ed:9b:b5:a4:0a:62:08:6c:bc:f8:1c:
                    da:64:c7:77:fa:ed:5b:57:87:39:1e:d2:27:07:c6:
                    a6:c8:c8:4e:2f:71:0a:ef:02:55:df:4a:9d:e4:4c:
                    e9:37:55:55:30:5f:e2:d5:50:c3:85:ef:69:5b:4b:
                    4b:18:84:48:30:43:e5:3c:8c:13:ff:ab:c8:56:16:
                    f5:fd:b0:82:cc:7c:44:60:e8:4b:f4:de:14:77:24:
                    6f:56:9f:13:4f:a5:e1:7f:e7:4e:7a:ac:cd:76:8d:
                    68:64:3b:88:13:73:8e:03:4d:86:6e:47:ea:05:2e:
                    84:39:d0:43:6e:a4:b2:ce:40:a8:1e:95:ed:ba:c0:
                    37:d0:b8:0d:e0:c1:ed:5e:23:79:2c:d4:ed:bf:e0:
                    37:b0:c6:ba:59:dd:28:c3:5b:8a:e8:18:88:0c:11:
                    2b:55:85:4b:7a:44:52:ff:09:d6:85:7a:34:d7:a6:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:B7:17:06:6F:A2:68:CC:2D:AC:21:2F:86:4A:DE:1E:CF:E4:27
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32322d3232203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:61:c6:df:17:f3:a5:50:85:5b:9a:2a:f3:07:b7:e2:2b:f9:
         fb:da:a5:4e:ab:bc:55:9f:ea:4b:4e:68:b3:7e:e9:da:9e:5e:
         ef:7e:42:db:7a:00:df:28:28:bc:02:af:9b:ef:dc:29:17:fd:
         06:90:c6:4d:ec:bf:2e:e5:ff:14:79:d6:f5:ae:64:0a:03:a2:
         6e:d6:86:d2:b4:78:2d:bc:a5:2a:c4:48:30:d8:2c:1f:1d:d9:
         4d:d7:b5:2f:3c:e8:91:0c:f6:1e:0b:3c:2f:5c:46:92:8d:b2:
         df:de:b3:ac:bd:cd:0d:80:8e:ed:57:79:bd:86:ff:eb:ef:69:
         58:9c:ed:3a:bf:65:c1:6f:39:f7:a1:7e:f2:cb:1b:04:ab:00:
         e6:8d:25:3c:8f:b1:fb:92:f8:89:d0:48:46:3f:a2:ee:f3:d9:
         33:c4:7f:ad:c2:ea:7a:28:60:5b:cf:a4:b9:66:be:d6:4c:9a:
         64:b0:bb:54:56:b6:9a:d1:38:4a:cc:1c:8a:a6:05:b3:98:51:
         8d:3b:d0:bf:4f:06:ff:30:0f:a2:ab:06:c4:c7:52:b2:c8:40:
         cc:f9:a1:36:be:c5:db:7b:cb:94:09:28:33:7d:cc:f9:72:15:
         28:48:b5:81:e9:e2:c4:fa:49:14:b3:f5:42:d4:e2:c5:7a:da:
         d0:58:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 17:08:19 2024 by rpki-client on console-fra.rpki-client.org