Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33392e302f32342d3234203d3e20323636393231.roa
File:                     34352e3232352e33392e302f32342d3234203d3e20323636393231.roa (raw, json)
Hash identifier:          IbCnFsnOG6WMkkyIqn7D86d9rCgHztbeRBkPi5J90lM=
Subject key identifier:   C4:20:E9:FF:E2:17:A6:5F:42:36:E2:52:24:37:68:BC:DA:AE:C4:14
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       12047C5C9D1D745D981C66CA453AB35F3A4681F9
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33392e302f32342d3234203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:27 +0000
ROA not before:           Tue 09 Jul 2024 14:10:27 +0000
ROA not after:            Tue 08 Jul 2025 14:15:27 +0000
asID:                     266921
IP address blocks:        45.225.39.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:04:7c:5c:9d:1d:74:5d:98:1c:66:ca:45:3a:b3:5f:3a:46:81:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:27 2024 GMT
            Not After : Jul  8 14:15:27 2025 GMT
        Subject: CN=C420E9FFE217A65F4236E252243768BCDAAEC414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:99:03:04:01:b9:2e:7d:f5:ca:7c:c8:d1:
                    38:e8:f8:45:4b:8d:f8:36:d4:9e:b3:92:a7:e4:f2:
                    19:1a:f9:25:64:46:e2:b9:88:0c:f8:3f:07:87:2e:
                    72:2a:53:aa:fd:46:86:32:17:9d:0b:08:0e:13:70:
                    1d:4f:8e:9a:5e:9f:7f:27:4b:6c:c9:72:52:f6:e2:
                    fd:59:d8:5e:d8:a3:79:4c:48:77:d5:e2:b5:85:be:
                    ea:4f:51:49:e9:1b:f8:a7:04:a2:0b:4b:4e:ef:f4:
                    58:76:bf:8a:9a:eb:ae:41:39:50:bd:9e:9b:3b:5a:
                    68:46:6e:a4:a7:3e:f7:10:15:33:b5:12:b1:fd:cd:
                    e6:6f:dd:03:b5:10:fa:c9:1e:75:b2:09:f4:1f:03:
                    89:eb:b2:df:ff:f7:b3:92:82:70:7c:39:49:c2:f6:
                    ac:72:36:59:04:e4:ab:ef:68:f0:72:8c:13:fd:27:
                    d1:3c:42:ca:8f:61:09:5f:04:6c:d8:e5:40:c6:d5:
                    0a:ba:c9:d2:2e:e5:47:47:3a:c6:f7:21:6d:d8:28:
                    28:de:b8:10:98:de:ed:27:b1:a4:2a:39:db:c9:89:
                    ff:e9:75:82:ef:62:72:87:17:d8:b7:09:d8:23:1a:
                    18:3f:fd:6f:c4:4b:ba:f4:6b:b1:9c:1e:92:45:f7:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:E9:FF:E2:17:A6:5F:42:36:E2:52:24:37:68:BC:DA:AE:C4:14
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33392e302f32342d3234203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:de:ab:62:4f:46:2d:d3:50:4e:21:58:ad:da:ca:07:09:bf:
         a9:c8:f3:d9:60:62:85:5d:4d:d9:8e:bf:c0:07:10:7c:8c:81:
         f5:00:52:e7:43:e1:8e:ef:aa:74:ff:ba:67:66:c5:91:58:36:
         8e:96:81:c0:a7:23:78:a2:d6:6a:29:e0:9b:c1:1d:ac:68:38:
         86:53:84:32:2e:e3:66:15:a3:1d:e0:a6:cf:be:4e:fe:33:c6:
         12:77:af:55:ec:c0:10:e5:1c:62:82:36:c7:7a:41:bf:79:8e:
         0b:cb:89:b7:0c:26:48:7c:03:1a:7f:e9:6f:ce:d1:63:28:49:
         fd:5e:a9:7b:42:f5:9f:72:8e:34:c0:90:85:66:73:c1:2b:6c:
         f8:f0:7b:7c:ab:ca:23:ed:8b:38:40:49:e2:90:48:93:79:f3:
         4e:f3:e3:57:de:4b:38:30:82:72:d7:7a:b1:29:bb:cd:38:d2:
         91:6e:35:db:96:1e:04:86:73:79:3f:28:a4:f6:de:89:f8:cb:
         af:b9:ef:46:67:fa:67:34:d7:33:f4:45:1a:1f:51:4b:66:ff:
         ee:67:6c:21:fc:27:d4:fd:70:2b:2c:28:61:eb:e8:00:5b:9b:
         82:f1:7c:aa:7d:39:e6:eb:6c:9a:77:de:88:98:99:c2:2b:b3:
         96:d3:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 17:08:19 2024 by rpki-client on console-fra.rpki-client.org