Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136322e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          lgeuI31k8lAZEvHf33qmbbfBqrYzfqG92KxU7cCZEO4=
Subject key identifier:   83:FF:AF:E4:2C:E4:00:3E:6C:2A:4F:7F:7F:4A:EF:D4:18:0D:25:E3
Certificate issuer:       /CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
Certificate serial:       1B8EAD954C6AE16DFD6CFC74C00C40EF72FA5197
Authority key identifier: F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 30 Jul 2024 15:36:56 +0000
ROA not before:           Tue 30 Jul 2024 15:31:56 +0000
ROA not after:            Tue 29 Jul 2025 15:36:56 +0000
asID:                     266196
IP address blocks:        45.6.162.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8e:ad:95:4c:6a:e1:6d:fd:6c:fc:74:c0:0c:40:ef:72:fa:51:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
        Validity
            Not Before: Jul 30 15:31:56 2024 GMT
            Not After : Jul 29 15:36:56 2025 GMT
        Subject: CN=83FFAFE42CE4003E6C2A4F7F7F4AEFD4180D25E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:3c:cd:1f:de:3f:39:15:aa:0b:e8:00:f6:
                    ca:72:d0:e5:48:8f:3b:9a:66:cd:99:00:3a:83:68:
                    38:f0:bb:2b:e4:92:56:5a:a7:75:36:08:ca:a3:04:
                    37:2c:af:28:46:e6:b6:a0:ae:41:ce:16:b5:be:38:
                    08:ea:37:bc:04:84:59:1f:00:4f:d2:4a:5f:ad:0d:
                    66:23:ea:f7:fc:92:6b:c1:8d:16:84:6d:f0:fe:76:
                    e1:90:09:8b:79:84:11:83:2b:c0:9b:d6:a6:80:c8:
                    60:59:45:83:83:a6:af:0b:5c:ba:7c:e4:c0:99:c5:
                    fc:7a:5a:4d:73:8b:f4:9e:c6:cf:0c:80:dc:32:28:
                    c0:2c:93:f2:86:0d:19:3d:57:1f:53:ae:e0:df:44:
                    83:4c:6d:ae:30:f9:12:8c:9f:07:8a:f2:40:8b:4c:
                    b7:e4:e3:7d:76:70:5c:a6:4e:92:8d:2f:7e:4c:b5:
                    f6:a6:a5:8c:f4:5f:4f:d5:1d:5d:9d:a0:b9:ec:9d:
                    f9:7d:f8:cc:06:46:b6:c9:ab:67:0e:6d:64:1c:88:
                    8a:21:75:ce:91:e0:6e:cf:16:0b:78:76:f1:40:01:
                    ec:30:de:cb:aa:21:45:01:be:7c:1c:f7:14:83:62:
                    86:56:cb:41:46:51:52:63:df:8a:a2:34:90:ab:53:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:AF:E4:2C:E4:00:3E:6C:2A:4F:7F:7F:4A:EF:D4:18:0D:25:E3
            X509v3 Authority Key Identifier:
                keyid:F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:a6:d8:b0:f0:58:46:91:2b:2c:30:a5:e8:d8:0c:f3:fa:
         de:14:6f:25:50:41:7e:36:e8:6a:96:86:bf:7d:0e:70:ca:b4:
         35:15:87:6d:0c:d5:1e:96:f4:0b:5c:61:0a:cc:3a:5d:03:eb:
         85:f8:88:75:6c:ef:6a:10:19:61:55:6c:22:e4:51:ca:d2:f1:
         aa:91:b3:4c:42:36:d5:0f:7a:e0:f4:65:99:fb:d4:d7:b3:00:
         29:42:69:37:d3:35:10:38:f5:56:10:fc:d9:58:77:17:94:9e:
         02:71:25:c8:37:f0:71:41:e2:a9:0c:71:70:eb:19:c7:97:25:
         45:44:8e:98:fa:49:5b:a6:22:f6:62:52:bc:25:70:87:50:8c:
         5c:c0:34:22:9f:0c:e0:5d:a0:5d:6f:f5:d5:3f:3e:3b:89:ae:
         7c:41:82:99:56:fd:d4:11:3f:26:11:e6:14:ff:42:6f:e8:62:
         fc:aa:aa:80:a7:eb:5e:55:18:ce:b1:4e:9e:99:ba:98:7e:40:
         f2:3e:d1:3f:a0:50:74:c2:46:60:2b:0b:db:e3:b8:92:97:c6:
         db:0e:7a:0b:14:2b:51:15:0f:b5:3e:26:dc:1e:cc:d8:67:9a:
         c0:26:54:95:f7:b5:32:1f:d3:09:88:ef:bf:1a:a1:48:59:8b:
         b5:28:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:56:25 2024 by rpki-client on console-fra.rpki-client.org