Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa
File:                     34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa (raw, json)
Hash identifier:          1qoa0qzob0fNNrbmc7+6uoXmW25CqML/CuXec78YqrQ=
Subject key identifier:   E5:C1:08:54:9C:A5:34:C5:99:9E:49:17:01:22:8A:75:FC:26:54:8D
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       1C996E9ED855EC7C7D142AAE90F929B732125B66
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:20 +0000
ROA not before:           Mon 29 Jul 2024 17:29:20 +0000
ROA not after:            Mon 28 Jul 2025 17:34:20 +0000
asID:                     266948
IP address blocks:        45.225.194.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:99:6e:9e:d8:55:ec:7c:7d:14:2a:ae:90:f9:29:b7:32:12:5b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:20 2024 GMT
            Not After : Jul 28 17:34:20 2025 GMT
        Subject: CN=E5C108549CA534C5999E491701228A75FC26548D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:93:75:71:c6:44:72:8f:cf:c0:70:d7:bc:
                    b7:21:64:79:c7:f9:7a:e3:40:06:f1:3a:f9:52:b3:
                    4a:91:1e:6d:e7:93:d6:b9:02:38:00:31:cf:87:bb:
                    77:d8:89:a7:fd:10:fe:da:f6:94:0a:ca:36:6a:be:
                    0d:8f:13:cc:42:44:79:4d:56:7c:66:30:0d:ff:db:
                    f3:8e:56:f4:4e:15:10:b5:77:ed:62:c9:e4:3d:8b:
                    6b:31:2e:50:36:4a:ce:67:e9:99:6b:36:04:03:50:
                    b8:9d:de:f4:8e:40:ed:be:20:ca:a0:bb:5b:3b:0d:
                    a3:53:5c:0f:9c:a5:d4:e4:ee:0b:8d:c2:4d:c1:4f:
                    ec:af:bc:1a:e7:e8:58:3c:28:d4:4b:ee:fe:08:40:
                    dd:c5:ed:a8:30:06:a0:95:20:7a:84:c1:84:72:c0:
                    a6:48:0d:f4:05:e4:ed:10:98:49:d5:49:64:c6:be:
                    2e:34:6b:4f:83:0c:28:a6:4a:73:0f:51:44:05:a9:
                    62:28:ec:ed:35:d8:3d:21:54:e8:d0:2d:91:06:86:
                    53:76:23:31:2b:9a:f0:ad:6a:0d:fa:b9:59:c4:ed:
                    9e:5b:8a:f6:03:8c:8f:62:29:ca:90:e5:ac:52:f1:
                    12:64:1d:c5:af:07:7a:45:42:e4:fc:92:33:55:17:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:08:54:9C:A5:34:C5:99:9E:49:17:01:22:8A:75:FC:26:54:8D
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:0f:55:ce:3a:c6:48:a4:0f:11:0c:11:b7:4d:c4:be:b3:
         56:91:32:97:20:d9:25:c3:c1:37:7b:ce:99:5d:33:15:78:bd:
         9d:46:07:17:a3:4d:67:19:ec:4d:c8:c0:c4:7c:88:b8:cf:b8:
         8a:92:fe:2b:bb:2f:c8:fe:90:7b:53:dc:9f:73:c9:74:24:64:
         a9:87:29:10:c0:cf:c0:65:b2:cb:b9:65:46:5d:dc:32:e5:9b:
         d9:85:8b:4a:c7:5c:2c:09:c9:60:2e:f7:f9:2e:71:6d:bb:ea:
         36:12:10:67:93:d2:ab:5d:0f:47:73:e0:6d:27:f8:8a:f3:51:
         a5:46:cc:a8:02:ff:c1:9f:b6:c0:76:06:7a:a4:f9:fe:e7:0b:
         5f:ff:b7:d7:67:3a:4b:01:fc:0a:11:d6:81:24:43:35:47:95:
         0b:6d:8d:f6:03:af:87:ea:72:d2:1b:29:e6:d1:b8:9d:c1:b8:
         a1:cf:d8:de:21:c3:ac:fa:1a:ff:2d:19:3d:59:5b:ed:d7:72:
         f3:b0:9b:32:e5:f8:f6:21:d6:af:a9:ce:f4:3d:cf:c6:e0:82:
         d1:a8:3e:d2:ed:a5:45:97:fe:46:23:6a:ba:16:8d:9d:34:d6:
         aa:5a:a9:aa:e4:2d:a2:f5:fb:3a:54:0e:20:08:f5:31:8c:08:
         07:d9:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 09:26:23 2024 by rpki-client on console-ams.rpki-client.org