Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33382e302f32342d3234203d3e20323636393231.roa
File:                     34352e3232352e33382e302f32342d3234203d3e20323636393231.roa (raw, json)
Hash identifier:          8OQI5cPrDY9EK+ax6WxsAzAGo+cTMq9r0+1h7TdRRY4=
Subject key identifier:   DF:6D:8B:3E:0E:11:6A:EF:BE:BA:78:23:FC:59:81:9E:AD:3B:52:1B
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       778501226239CBAEA9C3C52BBB92B9D787A10226
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33382e302f32342d3234203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:28 +0000
ROA not before:           Tue 09 Jul 2024 14:10:28 +0000
ROA not after:            Tue 08 Jul 2025 14:15:28 +0000
asID:                     266921
IP address blocks:        45.225.38.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:85:01:22:62:39:cb:ae:a9:c3:c5:2b:bb:92:b9:d7:87:a1:02:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:28 2024 GMT
            Not After : Jul  8 14:15:28 2025 GMT
        Subject: CN=DF6D8B3E0E116AEFBEBA7823FC59819EAD3B521B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:29:f3:80:43:3a:d7:40:3e:85:6a:9f:d1:
                    87:4e:b0:65:ab:ff:74:a6:55:82:39:77:3c:fb:8e:
                    a0:1a:f7:cf:e2:ae:08:0a:ed:a6:25:12:e6:2d:bf:
                    df:07:cd:91:16:81:51:1d:08:ed:78:7f:98:ae:b6:
                    11:f3:17:cf:8b:cb:83:c2:c3:e2:aa:57:7d:25:6a:
                    4b:ab:35:e1:7a:ed:5b:50:be:5f:d1:7d:4f:10:e5:
                    cf:8e:e2:2a:4e:a2:fc:46:f2:c4:7f:c6:49:f8:5d:
                    67:1e:a0:75:1c:03:67:26:3e:8c:4e:f8:7e:e4:0f:
                    12:df:09:d7:2d:1a:5e:ee:15:04:60:8b:4a:52:8d:
                    1a:be:9a:a4:8f:39:5f:17:25:04:3d:e7:72:30:6d:
                    ff:54:76:81:4b:1a:f9:35:53:15:67:cb:03:e1:02:
                    28:a2:b3:19:c4:f3:6a:4c:a2:af:cd:74:39:92:36:
                    54:91:7a:0d:a2:bb:17:29:af:bd:b5:2e:6a:f8:f1:
                    ea:d1:d9:89:4c:8c:33:ea:e3:7c:69:99:d9:66:9f:
                    1f:c2:f3:74:a3:1d:0c:68:0f:ff:cb:0d:82:50:64:
                    7d:5c:1b:fb:03:6b:f4:83:65:fd:ae:3b:db:27:fc:
                    85:0f:24:a9:8d:fe:27:8b:8d:01:fe:f0:9b:1e:1c:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6D:8B:3E:0E:11:6A:EF:BE:BA:78:23:FC:59:81:9E:AD:3B:52:1B
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33382e302f32342d3234203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:58:c3:0e:0e:b1:01:c0:69:bd:e6:e2:3a:d2:db:ea:12:b8:
         dc:3d:de:0b:39:ab:82:65:3a:ba:33:3f:e0:1c:25:f2:dd:7e:
         fe:5d:a1:bf:80:58:4c:5e:2e:55:0b:ed:67:e7:23:e2:ff:68:
         30:88:dd:dd:ff:53:c1:49:cf:6f:c4:8b:ac:1b:5c:fb:3d:3b:
         ec:48:c1:23:53:2b:1b:a1:92:53:b1:53:c0:29:a5:52:2f:a2:
         06:0d:c1:ba:b2:c6:1e:c3:d6:da:24:20:f9:c2:f6:99:e1:38:
         02:70:3a:f0:ee:c7:b2:63:64:a8:1c:15:b8:a3:38:4a:87:58:
         8b:1e:f0:ed:69:cc:45:09:cc:71:4a:95:f3:e1:92:b5:e0:81:
         31:02:28:a5:44:78:9f:51:9c:ad:1c:df:46:a9:ba:df:f2:bd:
         fa:31:6d:04:68:be:37:b2:90:84:bf:e4:b0:a8:96:52:51:13:
         72:e4:db:86:e3:af:85:38:80:37:41:bb:46:b2:7a:19:bd:f9:
         53:75:60:5c:96:bd:e3:c7:e6:37:85:59:74:0b:de:2a:47:ab:
         88:0d:f1:6f:eb:1c:24:41:ab:42:df:91:a7:5f:78:42:62:b8:
         81:fc:29:b5:99:f6:eb:cc:bc:04:ff:2a:7d:82:47:3c:28:10:
         f2:33:0f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 17:08:19 2024 by rpki-client on console-fra.rpki-client.org