Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32342d3234203d3e20323636393438.roa
File:                     34352e3232352e3139322e302f32342d3234203d3e20323636393438.roa (raw, json)
Hash identifier:          U+k6nEwcmoee6CyFgBJfJBQt6K6KvOggPzEaNPYBWGs=
Subject key identifier:   31:0A:D1:05:E0:5B:E8:E8:86:E6:15:DD:BF:8D:06:2A:19:D3:F8:0A
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       0AF9BB874BC4B5F39DB219772A54D9BD14C57AB7
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32342d3234203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:19 +0000
ROA not before:           Mon 29 Jul 2024 17:29:19 +0000
ROA not after:            Mon 28 Jul 2025 17:34:19 +0000
asID:                     266948
IP address blocks:        45.225.192.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f9:bb:87:4b:c4:b5:f3:9d:b2:19:77:2a:54:d9:bd:14:c5:7a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:19 2024 GMT
            Not After : Jul 28 17:34:19 2025 GMT
        Subject: CN=310AD105E05BE8E886E615DDBF8D062A19D3F80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:42:39:1a:92:de:55:d2:3a:22:56:97:76:
                    cb:03:9b:cc:e3:93:69:8b:86:0b:b6:8f:7b:51:fc:
                    e8:35:6a:22:1b:7e:3b:43:da:eb:7e:16:23:e7:43:
                    11:30:3f:c9:ca:37:19:e0:b2:f7:45:af:84:f0:99:
                    b9:f3:54:23:a7:cb:b6:41:45:1d:92:39:74:67:a3:
                    ef:b8:ab:4d:59:82:cb:38:5f:52:85:2b:75:74:af:
                    65:0b:4a:2e:f7:11:37:ce:5f:11:6b:bd:4a:2e:77:
                    42:c8:6f:bf:9f:49:5b:6a:75:30:69:7b:5d:94:b5:
                    65:60:01:12:2a:bb:47:0a:a4:05:b2:9f:ad:fb:b2:
                    76:8e:d9:34:38:1a:1c:71:37:a7:a9:aa:ea:40:91:
                    1d:f8:19:64:d3:17:46:b2:88:1d:84:79:0b:8f:de:
                    d5:f9:6d:4d:99:cd:52:8c:e4:bb:0a:fe:79:e9:0a:
                    3c:8e:ad:47:86:85:e8:f9:d3:06:0b:a6:15:77:06:
                    8a:0e:ef:7c:5c:15:ae:b3:18:c6:27:35:33:0c:c0:
                    6f:69:93:4c:7e:3f:75:82:0e:a0:2b:b9:8f:28:0b:
                    15:cd:87:f6:f0:3e:86:18:fb:48:5b:30:57:9f:18:
                    5c:06:29:9a:ff:dc:c0:84:50:69:c3:12:96:49:75:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0A:D1:05:E0:5B:E8:E8:86:E6:15:DD:BF:8D:06:2A:19:D3:F8:0A
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32342d3234203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:0d:5c:a3:f7:bb:22:9d:ad:a7:b4:7c:98:21:be:38:1b:
         e0:f2:fd:c4:ab:53:c3:f2:ae:47:a7:c4:50:c5:20:c1:f5:e7:
         a5:2b:e3:57:77:56:59:c3:26:45:c5:f6:50:b0:67:cc:a5:76:
         43:6e:ea:a6:af:0f:a0:fe:57:2b:d8:a5:c6:ac:3a:16:3b:54:
         2a:44:8b:c6:16:18:54:d9:51:1d:61:ce:0f:f9:77:5b:8f:cd:
         29:33:16:d4:6f:ac:c5:5d:bb:81:84:3e:cf:8f:ca:c1:e4:40:
         9a:33:50:74:ed:49:cf:c3:ff:e1:45:62:46:3f:16:f5:42:b9:
         a6:0a:8d:9d:6d:35:0a:bd:61:9c:5e:e7:d6:63:ac:4e:ff:89:
         05:22:3e:ec:4f:1b:58:7c:0a:c1:32:77:e5:d6:76:f7:32:30:
         10:b7:a2:e7:81:05:ef:6a:a0:ad:21:86:03:85:41:e8:5b:66:
         46:f3:22:ff:a8:3b:7b:75:8f:f0:87:2d:ec:28:71:19:ca:44:
         f4:67:ba:df:4d:c6:73:5d:fc:4b:b2:12:2f:36:04:62:ee:91:
         13:de:b9:88:8d:a8:a3:3e:01:ef:91:19:a7:58:78:2e:a3:2d:
         82:07:e0:cf:81:e7:e8:68:c9:42:e2:05:b8:91:ae:96:38:fe:
         c3:45:de:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 07:38:25 2024 by rpki-client on console-fra.rpki-client.org