Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38312e302f32342d3234203d3e20323731363237.roa
File:                     34352e3137382e38312e302f32342d3234203d3e20323731363237.roa (raw, json)
Hash identifier:          puBibk11NbLAtK1wIs80tz318ABxnjOlesRqHAM2Fz0=
Subject key identifier:   6F:5A:24:88:88:EC:3B:B8:E2:09:2D:FB:68:83:F6:96:7F:5B:73:24
Certificate issuer:       /CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
Certificate serial:       6683A18A51E0671FDAFDB7AFF590B849BE31FD1B
Authority key identifier: AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38312e302f32342d3234203d3e20323731363237.roa
Signing time:             Mon 18 Nov 2024 16:00:39 +0000
ROA not before:           Mon 18 Nov 2024 15:55:39 +0000
ROA not after:            Mon 17 Nov 2025 16:00:39 +0000
asID:                     271627
IP address blocks:        45.178.81.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:83:a1:8a:51:e0:67:1f:da:fd:b7:af:f5:90:b8:49:be:31:fd:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
        Validity
            Not Before: Nov 18 15:55:39 2024 GMT
            Not After : Nov 17 16:00:39 2025 GMT
        Subject: CN=6F5A248888EC3BB8E2092DFB6883F6967F5B7324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:12:11:a0:9a:32:aa:8c:60:48:69:91:ed:
                    b8:4e:e9:ca:67:51:96:06:7b:6a:3b:80:58:93:60:
                    95:a3:3d:91:2c:1e:1e:54:bb:39:5d:37:b0:11:a8:
                    77:a4:8c:29:4b:dd:5d:65:34:2b:ef:51:be:d1:c4:
                    7e:f0:00:de:0e:46:fb:9a:1c:7a:fc:f4:b5:76:30:
                    e5:e4:0e:fd:2e:c8:6f:ad:6f:26:61:d1:70:0a:9f:
                    32:5b:d0:75:fc:46:ec:b1:65:9f:0e:69:05:d8:7d:
                    69:f5:25:70:c2:ac:8f:66:34:70:ee:a5:7f:72:a0:
                    f1:d7:c9:d3:af:18:f9:2c:71:8a:24:64:ac:8c:85:
                    7f:fa:94:5f:bc:7c:f0:34:78:fd:df:6c:93:54:c8:
                    25:05:77:1c:ab:30:f3:c5:b7:d6:22:53:b6:4b:6b:
                    5c:7a:24:76:b5:d3:ad:50:29:57:26:c8:bd:7f:bc:
                    5f:c6:ea:0e:4c:29:ae:8a:3a:f1:9e:0a:1e:ba:0e:
                    20:cd:fa:0a:d5:60:d7:e3:91:69:b7:11:b9:46:28:
                    31:de:ec:79:fc:91:1b:8f:08:2e:46:bc:8f:b6:c4:
                    e0:ce:bc:43:69:7e:74:3f:7e:94:40:40:e0:21:96:
                    4b:fb:c7:7b:da:1c:46:d5:a7:6f:ef:66:13:37:80:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5A:24:88:88:EC:3B:B8:E2:09:2D:FB:68:83:F6:96:7F:5B:73:24
            X509v3 Authority Key Identifier:
                keyid:AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AD217163EB1953839A16E6F7DDA1F424A306D0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38312e302f32342d3234203d3e20323731363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:52:53:7b:76:d3:0f:38:37:51:68:fb:ac:56:ab:11:a5:10:
         f2:de:71:91:d0:c1:01:75:55:8c:9e:6c:7a:d6:6b:29:74:bb:
         e3:12:1d:69:bd:03:68:e2:c2:6e:dc:ff:31:e8:be:49:0a:cf:
         f1:30:2f:aa:83:27:2a:69:db:58:97:99:b9:f1:3d:e7:31:32:
         09:af:59:29:21:8a:92:5f:7e:c0:da:f4:2f:99:9b:d3:5a:78:
         b7:22:db:30:26:a2:38:f5:1f:5a:13:9b:bd:1c:4c:90:a4:83:
         56:45:d3:bd:84:40:c2:23:78:3d:a1:5e:76:f7:33:66:90:54:
         31:27:4e:c1:7e:54:96:fc:62:64:b8:68:72:48:49:02:18:89:
         a8:c5:12:51:1b:a3:0c:e8:d6:6d:60:91:1c:cb:f3:5f:46:d9:
         34:25:1f:c2:ac:f2:8d:51:4f:0b:a0:ca:50:f3:51:d3:1c:d1:
         28:62:c0:9b:55:22:d9:9a:31:33:cc:f3:a9:ec:e8:5a:e4:db:
         2a:8b:db:70:97:70:46:f3:83:b9:77:28:55:b0:05:0d:8a:d0:
         1c:22:c3:33:3b:a0:2e:a5:b2:03:68:ac:a5:83:a0:9c:e6:b8:
         80:bb:02:c9:c9:ae:95:06:69:0c:6a:2e:d9:93:25:fb:f8:f2:
         75:f0:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:52 2024 by rpki-client on console-ams.rpki-client.org