Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37312e302f32342d3234203d3e20323639333539.roa
File:                     34352e3138342e37312e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          sHyCxpIuR9h27rF57BqZH+t7tE4XnCmzCprm11sW9xI=
Subject key identifier:   46:DD:E1:A6:9F:41:B7:4C:43:E2:0E:E0:B1:11:B7:9D:95:F8:DD:7E
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       0C04382CCE0422822FC90C773B5AD3193322D25B
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37312e302f32342d3234203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:07 +0000
ROA not before:           Mon 26 Aug 2024 19:28:07 +0000
ROA not after:            Mon 25 Aug 2025 19:33:07 +0000
asID:                     269359
IP address blocks:        45.184.71.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:04:38:2c:ce:04:22:82:2f:c9:0c:77:3b:5a:d3:19:33:22:d2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:07 2024 GMT
            Not After : Aug 25 19:33:07 2025 GMT
        Subject: CN=46DDE1A69F41B74C43E20EE0B111B79D95F8DD7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d6:d5:97:ff:18:f1:93:f5:62:bd:e7:6e:00:
                    4c:f4:25:c4:5a:c2:67:44:9a:42:52:8a:20:06:ed:
                    5c:2f:0b:6c:04:dd:37:37:be:e2:73:31:07:08:c8:
                    cb:48:dc:8a:6a:e0:51:9f:8d:c8:4e:c9:d3:b4:1c:
                    1a:7e:cd:e6:90:ee:49:f1:57:f1:4f:41:27:ac:eb:
                    16:0e:e8:03:3c:fa:b5:5e:b3:1b:0a:2b:c7:0b:bd:
                    19:25:77:64:eb:18:e7:af:9d:bd:aa:cb:92:5a:e8:
                    7b:84:87:06:4a:dc:3a:d0:18:7a:ed:c2:cf:21:83:
                    00:d1:f5:23:4e:20:9a:da:d7:bd:cf:59:05:50:3e:
                    29:38:00:58:2d:1a:c0:87:e7:6c:c2:92:85:26:e3:
                    0f:92:d7:df:b3:39:52:42:19:da:fd:ed:11:73:a9:
                    b1:f2:31:ba:ed:c9:14:df:f0:43:0a:9f:d3:46:99:
                    5c:b9:47:6e:4a:62:0a:d4:56:da:37:36:e2:4f:44:
                    bc:ee:d9:77:2b:07:f5:3d:a7:9b:06:92:6f:0a:27:
                    72:5d:ea:ed:ea:cd:0f:85:75:54:da:25:21:d5:ff:
                    e3:93:cf:83:e5:2c:bd:4e:d2:f5:12:68:63:54:d8:
                    0b:e4:f3:ff:02:c3:6a:85:f2:8d:59:ef:8b:02:77:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DD:E1:A6:9F:41:B7:4C:43:E2:0E:E0:B1:11:B7:9D:95:F8:DD:7E
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37312e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:92:ec:ad:44:fa:ac:2b:3a:d8:be:49:f3:17:3f:d1:ab:d9:
         a7:ce:a6:36:d1:70:f4:25:ba:4f:8c:38:f8:7e:c9:d5:14:fb:
         73:d6:8b:4a:2c:33:0f:00:8a:d5:2c:77:07:ba:c2:b5:73:90:
         1b:1e:cf:73:1f:fc:f0:be:69:1a:51:9e:9f:2d:79:02:17:9b:
         c6:84:5c:4e:3e:d7:69:b3:f1:05:12:a2:da:ad:85:1d:f7:48:
         e6:2d:23:f7:79:36:b4:e3:97:4b:db:e9:78:b3:7e:a1:cc:67:
         fb:49:1c:f4:e9:6d:dd:3b:ab:e0:9d:9d:e5:cb:1d:8c:11:8e:
         90:f8:ac:3c:88:65:8a:a2:84:18:d3:0f:c9:4a:c8:3c:06:a7:
         47:df:93:b1:fa:35:86:4f:9b:d3:d2:23:bd:4a:e1:3b:20:c2:
         01:e2:5f:dc:63:0a:c9:b6:ab:2a:29:2f:87:02:cb:c7:0a:47:
         4d:ac:b1:3a:6b:74:4b:a5:76:cb:ee:8c:19:09:c9:31:93:a5:
         9d:a6:39:08:71:4b:35:5d:a5:50:5a:f6:1f:18:16:2c:5a:9c:
         4a:7b:10:38:1d:d5:e2:37:4e:da:1c:6f:4e:8d:ba:d3:f3:c0:
         63:8f:92:09:0c:1a:be:de:a9:69:b8:29:14:15:3b:40:4b:9d:
         08:d9:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:58 2024 by rpki-client on console-ams.rpki-client.org