Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa
File:                     34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa (raw, json)
Hash identifier:          WWUUXlgwtsux4ku4T538R1+tnvuSkP5jSY697E5SpoM=
Subject key identifier:   7E:B2:12:E1:08:B9:64:0C:F8:B4:86:81:D2:49:8F:49:A8:3C:02:9B
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       3799ED2FB8C68DAEFBDB3364E6449CE3437AE381
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        45.162.214.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:99:ed:2f:b8:c6:8d:ae:fb:db:33:64:e6:44:9c:e3:43:7a:e3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:98:f5:5b:ef:8a:c6:18:86:7d:4a:15:d9:
                    eb:8f:50:8f:de:2c:4f:a8:18:aa:99:22:86:4f:ce:
                    11:db:20:52:95:e4:1c:21:ac:fe:29:fc:b3:8c:f7:
                    d1:19:52:c6:cf:de:f9:b6:8e:a1:9b:12:d8:4d:60:
                    96:29:e5:aa:bf:f1:0d:c0:52:7b:62:d4:cf:22:73:
                    18:4c:9e:5d:e1:ec:83:09:22:a8:6b:70:e8:14:f3:
                    81:03:5c:fa:dd:df:17:63:c3:71:9e:94:ab:5a:8b:
                    f0:cc:dd:9e:55:19:72:55:27:9f:01:04:70:cc:ff:
                    ca:26:4a:26:21:a3:19:57:bd:78:78:6a:77:ed:a2:
                    9a:0f:7a:b7:48:91:2c:4f:46:c1:63:5e:92:69:dd:
                    d3:81:24:dc:51:58:a3:fa:c2:d1:42:bd:74:f8:d1:
                    c4:db:d8:20:65:d0:2e:0d:7d:2f:46:e9:77:ba:4c:
                    78:4f:d0:8c:c5:d9:87:50:2d:61:9c:4b:fc:27:88:
                    b2:62:6e:8a:e3:f5:b8:11:9d:0d:2a:a9:82:15:11:
                    df:65:3e:99:df:2d:01:6c:aa:9b:c6:ae:21:86:26:
                    b3:8f:07:1b:51:bc:b0:ba:5b:20:25:46:f0:8d:98:
                    1f:25:e4:98:2f:d4:4b:e3:dc:33:37:fa:c4:1b:ee:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:12:E1:08:B9:64:0C:F8:B4:86:81:D2:49:8F:49:A8:3C:02:9B
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:56:18:03:91:a7:43:31:6e:86:b0:9e:9f:50:80:73:83:98:
         4a:21:88:39:a4:24:11:41:e3:77:46:ed:36:8f:31:1f:ee:2e:
         8a:0f:49:c9:d3:e9:3a:52:b9:bd:f8:1e:62:e5:e1:e5:8e:2b:
         12:a7:ce:6f:51:f5:af:b1:ed:02:5d:12:a2:80:6e:78:e5:c2:
         10:5e:cd:03:31:69:dd:bb:94:5d:a1:4a:3f:44:36:27:79:b5:
         86:a1:bf:9f:36:9c:14:63:ae:f4:1e:93:19:fe:68:41:b6:eb:
         c0:12:62:cf:b0:12:0a:e5:d0:d0:42:14:83:d8:82:2a:d6:f4:
         7d:2e:3b:71:b3:2a:51:d0:c6:25:f4:59:09:3e:8e:7a:6b:16:
         4b:3c:7b:d9:0f:52:14:9b:10:cf:68:1e:28:0b:06:c1:4b:73:
         a6:77:40:04:50:f4:0d:4c:3e:1f:98:59:6a:fa:42:bd:20:fe:
         55:d5:9e:12:59:15:4f:6d:f8:62:78:11:a5:f0:55:db:2f:cf:
         9b:66:c9:cc:f0:fc:c4:ba:72:c6:02:bc:9c:1b:c9:06:74:c1:
         55:9a:14:47:25:53:90:b5:8e:54:f9:67:37:79:fb:6c:58:f1:
         c3:e7:5b:df:cb:5f:60:0a:78:79:0b:36:d1:22:2c:6c:6a:b8:
         29:83:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 15:20:14 2024 by rpki-client on console-ams.rpki-client.org