Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/34352e3136332e3231362e302f32322d3232203d3e20323638363031.roa
File:                     34352e3136332e3231362e302f32322d3232203d3e20323638363031.roa (raw, json)
Hash identifier:          MqxZCEZ6RpX2et2Bq9Zb/G/ept8Zta6Ty3IJNZiy9SI=
Subject key identifier:   23:88:AE:36:27:F2:F0:61:7D:64:94:1D:B8:1F:41:2B:15:D9:01:60
Certificate issuer:       /CN=A935BC57124B9AAC10243C59B618920ED8A5C03F
Certificate serial:       7A2C116B296FB373520A87CB15701445D7565341
Authority key identifier: A9:35:BC:57:12:4B:9A:AC:10:24:3C:59:B6:18:92:0E:D8:A5:C0:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A935BC57124B9AAC10243C59B618920ED8A5C03F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/34352e3136332e3231362e302f32322d3232203d3e20323638363031.roa
Signing time:             Mon 03 Jun 2024 11:03:05 +0000
ROA not before:           Mon 03 Jun 2024 10:58:05 +0000
ROA not after:            Mon 02 Jun 2025 11:03:05 +0000
asID:                     268601
IP address blocks:        45.163.216.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2c:11:6b:29:6f:b3:73:52:0a:87:cb:15:70:14:45:d7:56:53:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935BC57124B9AAC10243C59B618920ED8A5C03F
        Validity
            Not Before: Jun  3 10:58:05 2024 GMT
            Not After : Jun  2 11:03:05 2025 GMT
        Subject: CN=2388AE3627F2F0617D64941DB81F412B15D90160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:75:fa:f7:54:83:5d:b9:b3:9f:a8:8a:2e:
                    01:5c:9c:2d:cc:d6:2d:2b:f1:97:f5:f1:32:45:88:
                    9b:56:2e:30:8e:dc:8f:2f:2d:09:40:de:9b:a4:f1:
                    71:04:27:5d:6a:2e:1e:19:ad:67:d6:af:7c:c1:e1:
                    a4:56:0c:41:b1:8c:f9:53:f8:12:2b:4d:e8:9e:fd:
                    77:01:12:e8:e6:f7:f5:dc:18:36:2a:b7:91:1d:89:
                    6e:87:95:82:49:b1:cf:c9:ab:04:f0:47:53:f5:2c:
                    ea:21:fc:05:f3:70:2a:37:a1:2e:39:75:54:71:00:
                    bc:f8:a6:8e:9e:42:94:5f:b1:0a:4b:03:55:7d:ce:
                    b3:d9:9c:27:cf:8d:77:31:36:27:20:f5:95:be:47:
                    1f:5f:98:05:45:4e:09:d6:3e:e8:fd:a0:ca:04:96:
                    a6:1d:9d:09:b0:4f:30:d3:27:ac:6b:39:8c:80:e6:
                    a8:c7:bc:be:04:14:c4:1f:94:4d:52:1b:1b:f9:57:
                    d0:37:34:df:3f:7c:df:03:03:a6:f5:3e:5c:e4:6a:
                    20:44:bd:7e:f9:d4:06:d3:29:38:98:de:3f:64:dc:
                    ec:41:5b:29:6b:96:bf:bc:eb:24:c5:59:b0:b1:95:
                    c9:10:56:e5:86:36:be:ad:f8:c9:4a:5d:24:54:c9:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:88:AE:36:27:F2:F0:61:7D:64:94:1D:B8:1F:41:2B:15:D9:01:60
            X509v3 Authority Key Identifier:
                keyid:A9:35:BC:57:12:4B:9A:AC:10:24:3C:59:B6:18:92:0E:D8:A5:C0:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/A935BC57124B9AAC10243C59B618920ED8A5C03F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A935BC57124B9AAC10243C59B618920ED8A5C03F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/34352e3136332e3231362e302f32322d3232203d3e20323638363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:1c:bb:b6:f6:33:69:03:a7:6f:2a:06:a6:5a:eb:22:a0:
         dc:f6:2c:0f:56:ac:3b:21:5d:ef:51:96:3c:cd:bd:14:81:5f:
         75:00:77:07:37:eb:aa:d5:00:46:8d:c8:a5:bc:2b:14:11:11:
         24:c9:58:39:3b:51:0e:51:af:57:44:e9:21:36:3e:39:d4:a1:
         89:df:ef:0e:03:7b:6f:25:d0:44:e9:e9:85:20:7f:b1:3e:74:
         62:d8:d2:d7:16:26:81:93:92:47:27:d3:7a:f9:4f:16:ba:19:
         50:72:8e:b0:b5:b6:3c:94:1d:d3:96:59:fe:d2:18:27:79:5f:
         8e:fd:e0:19:4d:95:2a:41:18:2a:0d:4d:d8:2d:53:b5:77:51:
         a7:3e:40:66:f2:32:53:7e:34:36:b2:5b:a2:13:bf:13:1e:90:
         92:6e:c5:0b:90:5a:81:78:66:ec:6b:ab:4b:64:fa:b9:62:e7:
         0f:b3:f5:2f:6a:b9:51:17:8b:f8:2e:0b:84:e2:32:f9:7c:a0:
         52:f0:f7:8b:7c:9b:7a:41:97:c2:6a:db:6a:16:97:30:97:01:
         4e:33:78:c0:47:ae:25:72:e6:d6:60:09:2e:d9:3d:13:2e:bc:
         d7:00:a7:f4:ed:c9:08:c2:eb:6b:f1:5b:39:94:46:83:55:0b:
         6e:62:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 05:27:05 2024 by rpki-client on console-fra.rpki-client.org