Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233352e35392e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          PqiBGcKYJ3Z/NZRyTDYFHnQlEFqFzeT4s8RUT3UtRKg=
Subject key identifier:   B5:CB:4D:5F:3B:D5:38:82:0C:EB:AD:F0:BD:E0:46:AE:25:24:C4:EE
Certificate issuer:       /CN=A700B738441CDD3978A0EECBB6A84022929D91AC
Certificate serial:       1B4041F6A679639D4A9A841C1EC44873163008AF
Authority key identifier: A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 29 May 2024 19:43:29 +0000
ROA not before:           Wed 29 May 2024 19:38:29 +0000
ROA not after:            Wed 28 May 2025 19:43:29 +0000
asID:                     273683
IP address blocks:        45.235.59.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:40:41:f6:a6:79:63:9d:4a:9a:84:1c:1e:c4:48:73:16:30:08:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A700B738441CDD3978A0EECBB6A84022929D91AC
        Validity
            Not Before: May 29 19:38:29 2024 GMT
            Not After : May 28 19:43:29 2025 GMT
        Subject: CN=B5CB4D5F3BD538820CEBADF0BDE046AE2524C4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b2:df:42:57:93:c2:8d:22:64:bc:dc:09:49:
                    86:30:d3:a8:73:1b:60:9c:29:c9:29:2b:60:c2:a9:
                    c5:94:44:64:bb:c9:da:15:38:ec:e0:f9:75:b6:c9:
                    68:d9:c8:33:e0:7e:ea:3e:04:82:46:ee:61:40:ee:
                    8b:2e:a6:4b:0f:42:e3:6e:b0:ce:55:2b:bf:e6:07:
                    f8:6a:75:0f:80:bd:78:11:1f:64:57:32:39:b4:0e:
                    dc:5f:06:dd:1c:93:b3:e9:68:4c:a0:91:19:35:07:
                    1b:54:34:0a:f9:7b:d6:56:63:bf:35:a4:fd:ae:25:
                    da:8a:43:d2:cb:a6:58:a8:b1:5b:38:ed:d3:46:bb:
                    ad:4e:bc:d4:53:3f:0e:4b:84:bc:35:6d:04:51:e9:
                    06:2a:3c:00:6e:1e:70:98:9b:5d:31:4c:33:a9:e1:
                    8b:93:4b:80:af:cd:be:10:ca:89:eb:bf:fd:d7:e2:
                    95:f0:9f:88:f5:43:93:11:5a:c9:39:1c:76:79:18:
                    2f:e4:63:cf:22:8f:ae:71:17:1a:8f:8c:fb:80:89:
                    10:ad:1c:7e:41:a0:42:af:27:42:a2:fd:30:27:51:
                    06:ca:7c:14:ca:cc:5f:8d:46:7d:92:c0:21:79:bb:
                    e5:12:a7:cf:34:cf:88:e3:10:34:0c:d4:ea:93:01:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:4D:5F:3B:D5:38:82:0C:EB:AD:F0:BD:E0:46:AE:25:24:C4:EE
            X509v3 Authority Key Identifier:
                keyid:A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/A700B738441CDD3978A0EECBB6A84022929D91AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233352e35392e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:55:ba:f5:2c:7f:67:43:0d:01:19:7e:82:14:76:8b:b7:9a:
         b8:46:cc:83:7f:47:8b:55:1b:e0:ee:6c:9c:7c:21:b2:df:d7:
         98:b2:a1:47:f3:dc:0c:50:27:b4:b6:ae:31:42:35:a7:37:19:
         ae:ef:6e:29:87:ea:f1:d5:b5:12:1f:42:a7:f6:95:6b:33:13:
         9b:2a:e4:64:18:11:31:5b:b2:14:7d:c4:66:5e:5f:72:80:f9:
         3d:b6:70:fa:88:02:b6:02:a8:e2:4b:2d:54:cb:21:3e:1b:af:
         64:b7:5d:10:12:2a:38:19:83:6c:3b:de:81:3e:15:c3:97:3b:
         c2:e0:5a:91:5b:7a:6f:5d:4a:8e:07:b7:b5:90:ce:38:d6:55:
         b9:63:32:18:76:ed:39:32:5a:08:2d:84:ff:83:67:bc:19:06:
         97:a5:50:28:83:14:b6:a2:85:52:79:e5:3c:57:e0:e3:be:0c:
         8c:aa:2a:26:67:44:12:1e:a0:ac:23:93:2a:36:0e:f2:77:7a:
         e0:df:2c:6d:48:ab:88:e6:e1:db:87:89:a0:34:09:5e:44:a6:
         27:c8:9d:54:95:f3:4e:64:25:77:4d:75:00:8e:56:a3:6f:0f:
         72:f4:a2:9d:9d:d6:77:3e:20:cd:91:36:10:fc:6e:e9:d4:c0:
         a3:1c:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:35 2024 by rpki-client on console-ams.rpki-client.org