Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33382e302f32332d3233203d3e20323636393231.roa
File:                     34352e3232352e33382e302f32332d3233203d3e20323636393231.roa (raw, json)
Hash identifier:          ZcZTXMXNifwqC/MqsFWqec5L7GTBk1Oz/qcvYWlFPmk=
Subject key identifier:   51:CB:29:02:07:32:BE:95:D6:8B:DD:F6:7E:A8:07:61:23:22:C5:66
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       5295FA9651204BD4E0C53C3B8037066669A4D0FC
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33382e302f32332d3233203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:28 +0000
ROA not before:           Tue 09 Jul 2024 14:10:28 +0000
ROA not after:            Tue 08 Jul 2025 14:15:28 +0000
asID:                     266921
IP address blocks:        45.225.38.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:95:fa:96:51:20:4b:d4:e0:c5:3c:3b:80:37:06:66:69:a4:d0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:28 2024 GMT
            Not After : Jul  8 14:15:28 2025 GMT
        Subject: CN=51CB29020732BE95D68BDDF67EA807612322C566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:59:ba:ef:eb:ee:ea:ec:38:13:4f:07:09:
                    a2:ea:7f:52:03:f9:6e:61:ee:27:7e:fb:b3:db:bf:
                    f6:1b:e3:ad:94:68:85:b6:e7:9d:d3:5d:f6:b7:90:
                    ce:d5:ef:19:d4:f4:59:81:7a:f2:a8:96:13:65:f8:
                    58:cb:de:e9:ef:28:e1:d9:e0:1b:b4:d4:7c:55:18:
                    75:8b:fe:bd:e7:c2:02:25:a4:24:e5:10:ff:db:14:
                    3c:54:76:44:b4:35:c8:90:84:fe:62:89:90:2e:76:
                    1b:1a:19:e8:f5:58:f7:4b:94:bc:15:f4:58:bd:5f:
                    5b:98:2c:08:76:45:1d:89:96:32:25:66:14:bd:39:
                    43:b5:2c:0e:89:8d:9b:f7:e8:3f:bd:ad:82:a6:44:
                    ed:ba:e2:80:1e:6a:96:48:65:1f:d9:5b:3f:15:2b:
                    15:4c:cb:ec:e4:3b:2a:8a:10:a5:09:db:3f:91:b6:
                    43:30:c6:b4:62:c0:de:35:4a:af:85:05:00:96:99:
                    95:bf:98:ef:c7:c9:4c:eb:bb:f4:05:65:18:4d:2f:
                    d2:55:f7:ba:51:6a:5e:fe:9f:89:e6:15:5c:45:fc:
                    5f:0a:31:94:2c:37:e0:6d:d0:a1:ad:d9:eb:b2:a5:
                    73:4c:e3:17:a8:4c:f4:4b:40:b8:52:88:7b:53:0f:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CB:29:02:07:32:BE:95:D6:8B:DD:F6:7E:A8:07:61:23:22:C5:66
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33382e302f32332d3233203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:9e:48:6b:4c:c8:0f:cf:3a:2b:fb:e7:c7:0e:93:b9:b6:83:
         b8:f9:ab:64:48:c6:21:ec:8b:11:01:ff:22:17:af:0d:5e:74:
         d2:64:88:a9:a5:73:d2:0f:f0:9a:5d:d2:4f:0b:47:f3:79:eb:
         a7:ac:81:09:3a:39:ce:e5:77:08:bd:14:2b:83:25:58:92:95:
         cd:20:47:ef:1a:12:de:2b:2c:51:98:1d:ee:92:e0:25:e4:6b:
         31:fe:19:24:fa:bb:e0:27:db:f9:7e:90:1f:61:05:3e:f4:39:
         9d:cd:a1:f9:7a:a4:b7:46:8f:51:f6:22:f9:57:42:b1:2b:5f:
         b9:b0:72:65:51:11:44:93:b0:75:87:12:41:cf:ca:6a:e0:ca:
         66:f9:4f:b8:cb:1f:6c:fa:a6:ce:ad:e6:19:65:47:7a:4c:11:
         01:63:b7:fd:2e:2e:15:56:53:a3:04:4c:37:ed:91:fd:03:a3:
         10:b9:48:78:2b:ae:5a:7d:63:bd:86:4f:5e:86:a1:b6:93:57:
         5e:80:e0:2e:5b:76:06:8a:8b:1e:31:b2:ce:cf:5a:26:12:b4:
         99:8b:c8:54:4e:67:7d:0c:9b:e6:19:3e:a7:f8:25:b9:f1:c4:
         6e:f9:46:05:7d:0f:8f:39:7e:76:b3:82:d2:dc:06:05:ed:a8:
         20:4b:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 17:08:19 2024 by rpki-client on console-fra.rpki-client.org