Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e36382e302f32342d3234203d3e20323638353539.roa
File:                     34352e3136332e36382e302f32342d3234203d3e20323638353539.roa (raw, json)
Hash identifier:          P2pYtXNqICcWswa0bRhb7w0GVb+31TW/1qoM4hmqQAY=
Subject key identifier:   95:85:A2:02:1C:33:01:3E:8C:1C:03:A1:2E:97:78:69:9E:46:BF:ED
Certificate issuer:       /CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
Certificate serial:       51CDA262344ECA2EA4BE077481DA249DB3EC7867
Authority key identifier: D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e36382e302f32342d3234203d3e20323638353539.roa
Signing time:             Fri 17 May 2024 19:33:23 +0000
ROA not before:           Fri 17 May 2024 19:28:23 +0000
ROA not after:            Fri 16 May 2025 19:33:23 +0000
asID:                     268559
IP address blocks:        45.163.68.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cd:a2:62:34:4e:ca:2e:a4:be:07:74:81:da:24:9d:b3:ec:78:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
        Validity
            Not Before: May 17 19:28:23 2024 GMT
            Not After : May 16 19:33:23 2025 GMT
        Subject: CN=9585A2021C33013E8C1C03A12E9778699E46BFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:bd:31:41:d4:ef:11:3a:a0:9d:96:60:3c:
                    0f:e5:83:25:ff:56:b3:97:99:ed:d6:f8:76:7d:a7:
                    11:f0:5e:bf:7b:e2:5d:a3:96:7f:d5:28:1f:ac:2e:
                    c6:ee:ba:17:62:df:d5:38:d2:33:8a:1f:45:5c:a9:
                    5c:ec:37:c2:d0:cb:dd:23:1b:81:66:62:e9:4b:7f:
                    46:a4:83:1d:f9:c7:1a:f9:e7:58:ac:f7:d0:50:51:
                    94:58:b9:88:71:85:9a:ae:ef:80:55:bd:ae:aa:db:
                    4b:3d:94:12:bb:67:ab:27:8d:3f:43:52:82:8e:7a:
                    34:fb:ef:3d:59:71:5e:31:ea:7f:0e:1f:b3:7b:b6:
                    9f:57:5f:01:c4:34:e0:b2:4f:9e:c7:81:ba:ed:65:
                    50:27:ff:64:e5:da:b0:ea:2f:36:fb:c8:ce:29:07:
                    6a:f6:a7:95:96:86:95:6b:ad:35:09:5f:21:36:ae:
                    d9:60:3c:84:03:8d:54:dc:5f:0c:5f:55:67:9e:84:
                    73:45:ef:49:4e:c2:3e:b4:68:e8:40:68:83:ce:ee:
                    a8:55:c0:98:2d:53:c1:ab:df:fe:42:3a:17:f4:ac:
                    66:a3:18:a7:8e:44:1d:4e:3e:96:e9:66:14:4f:4e:
                    99:c7:fd:78:93:4e:08:8b:f9:1a:c6:e0:c5:c2:c9:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:A2:02:1C:33:01:3E:8C:1C:03:A1:2E:97:78:69:9E:46:BF:ED
            X509v3 Authority Key Identifier:
                keyid:D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/D952D52C9488DCC508F4E6D82D87F98C778EB09B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e36382e302f32342d3234203d3e20323638353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:71:ae:86:3b:7a:86:33:97:44:f6:ef:d5:24:59:43:f6:9a:
         09:e2:69:88:cd:2c:d9:a4:04:65:33:e0:4d:98:7f:6e:02:11:
         e4:8e:9f:65:0b:f0:93:10:15:48:32:47:c0:11:22:91:c2:27:
         3c:b8:25:b4:8f:36:c1:ef:1e:88:66:c3:1a:d8:b5:b4:e3:45:
         02:6a:32:ef:ee:8a:ab:19:b3:a9:86:24:e5:b7:14:4b:ca:cd:
         6c:02:30:68:f8:0e:57:ab:bc:9a:8d:cd:4d:33:71:73:0f:69:
         70:8b:ba:22:c6:b5:dd:70:19:f4:ef:5a:e3:bd:60:4b:f5:c3:
         0f:a8:d9:c1:51:68:c6:6e:ba:8d:e1:66:8f:b1:ea:73:6d:77:
         a9:ba:c5:fc:97:97:68:67:f1:87:c3:40:93:87:80:72:9a:ee:
         bb:05:3a:1d:77:2a:a8:ca:04:ee:6d:3d:da:29:f2:4e:71:81:
         11:7e:cb:9f:91:d9:46:fe:cd:4a:b4:23:7a:e7:95:2a:65:62:
         63:1a:97:16:90:11:b6:c8:9d:a2:98:0e:28:cc:46:ec:df:21:
         8f:07:6e:f2:9e:ed:4d:c5:aa:43:58:23:9d:bc:11:e8:24:11:
         80:f3:1d:aa:95:c0:b5:e6:fe:89:90:fb:08:50:74:ba:b8:ab:
         a7:af:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 16:42:01 2024 by rpki-client on console-ams.rpki-client.org