Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e38382e302f32322d3232203d3e20323638303536.roa
File:                     34352e3136382e38382e302f32322d3232203d3e20323638303536.roa (raw, json)
Hash identifier:          +pYCIqBj/EeuvSyBH8nVha8QjExQNYsHfPU9GXs9sYA=
Subject key identifier:   C4:88:6A:74:61:F2:57:84:81:AA:56:08:EC:BD:90:B6:2C:CF:F0:F7
Certificate issuer:       /CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Certificate serial:       10A79572009B5B18E230D00AF6928A27CADA0176
Authority key identifier: AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e38382e302f32322d3232203d3e20323638303536.roa
Signing time:             Thu 04 Apr 2024 03:41:13 +0000
ROA not before:           Thu 04 Apr 2024 03:36:13 +0000
ROA not after:            Thu 03 Apr 2025 03:41:13 +0000
asID:                     268056
IP address blocks:        45.168.88.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a7:95:72:00:9b:5b:18:e2:30:d0:0a:f6:92:8a:27:ca:da:01:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
        Validity
            Not Before: Apr  4 03:36:13 2024 GMT
            Not After : Apr  3 03:41:13 2025 GMT
        Subject: CN=C4886A7461F2578481AA5608ECBD90B62CCFF0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:41:3a:27:e4:40:8b:e7:5d:d6:7f:7d:ab:
                    48:e9:6f:f1:a2:f4:88:5a:4c:57:09:5d:a8:65:5a:
                    f1:13:7b:b0:8a:1d:fc:2c:82:b4:8f:b1:4f:30:b8:
                    f2:b7:6a:3d:53:2c:db:4f:d8:ae:e2:45:72:d8:ae:
                    c5:6b:aa:8b:e0:a8:74:ca:fe:f7:b3:a0:f0:32:5f:
                    43:31:76:e8:b4:31:25:00:67:95:4b:fa:d6:39:0e:
                    bb:c7:e1:42:33:78:89:2c:1b:54:43:fa:27:2a:a4:
                    72:75:14:02:eb:13:f8:ac:c3:a5:48:88:35:a0:31:
                    0c:b5:27:b5:2f:dd:eb:4c:7b:2d:3a:d0:ce:71:8b:
                    09:c5:8e:7e:e1:10:5a:2e:7c:c9:e5:d7:18:d3:4a:
                    36:7f:fc:e4:c1:c0:ab:f7:a2:03:65:33:f2:e9:01:
                    c3:ec:7e:f3:92:3d:cb:5e:54:da:3f:ab:14:67:34:
                    9a:86:3f:42:15:3a:03:d2:d8:c1:d7:72:eb:f9:a3:
                    99:5a:0c:2e:ed:10:9d:06:06:13:e8:e9:fc:27:49:
                    6c:20:f7:1c:1c:9f:61:f7:ab:2c:0c:dd:61:f0:d0:
                    ba:17:46:1a:3b:f4:44:9c:26:45:ca:06:de:d8:d0:
                    6e:42:49:1d:25:27:49:9f:dc:3e:36:00:bf:a3:6d:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:88:6A:74:61:F2:57:84:81:AA:56:08:EC:BD:90:B6:2C:CF:F0:F7
            X509v3 Authority Key Identifier:
                keyid:AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e38382e302f32322d3232203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:0f:21:04:86:e1:69:d5:ea:6f:87:8e:cd:1a:29:7e:22:60:
         58:13:66:6f:a3:9c:c9:20:ff:25:5c:e8:94:ab:a2:53:20:af:
         ec:b9:44:2c:9b:dc:1a:b9:49:93:bb:5f:6e:84:b3:19:ec:63:
         80:8c:65:26:52:95:ef:e1:4e:53:b7:26:22:d7:4f:53:06:db:
         02:1d:72:c8:83:e8:1b:a6:45:6f:ad:a0:51:26:df:d6:96:bc:
         b1:c4:37:7a:32:6a:e3:88:c1:c9:b7:f7:e8:96:cd:67:42:e8:
         4c:4d:c1:84:ed:a6:4b:31:c0:4a:45:79:16:33:28:41:d9:53:
         26:10:f5:56:d8:a2:19:5c:83:f5:17:f1:2d:41:a1:39:f0:6e:
         be:7d:41:fb:96:6c:6f:95:7b:0d:ff:70:60:44:d9:94:21:6c:
         1a:c0:66:09:94:fd:d9:9c:85:94:63:75:7e:20:6d:fa:37:00:
         43:15:c1:02:57:75:f8:8a:74:91:8f:f1:b0:58:25:fe:5a:4d:
         6a:6f:b4:70:99:0c:9f:c7:bd:15:b6:91:85:0f:35:d9:08:51:
         b0:1a:b2:05:cb:87:eb:37:bb:40:29:c6:b8:69:9e:d7:4d:5c:
         26:3d:7f:95:01:85:45:69:54:70:3c:c4:bf:6d:a8:e6:81:87:
         0d:00:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 06:22:47 2024 by rpki-client on console-fra.rpki-client.org