Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203630303434.roa
File:                     34352e3136392e3138322e302f32332d3234203d3e203630303434.roa (raw, json)
Hash identifier:          zYRDPOZbZ9L18Iq7+tv5ydKTV7JaJ6wsBcrtuUney0Y=
Subject key identifier:   7F:B4:E2:62:6F:C0:0C:B5:F4:7C:02:D3:A4:E6:71:BB:E7:ED:D2:FF
Certificate issuer:       /CN=FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13
Certificate serial:       3392FBFEDD8F1FB54C4460690D8472B2420A005B
Authority key identifier: FE:EE:EC:E2:FC:07:BB:F4:B5:B0:C7:98:6D:0F:95:4D:70:4B:FA:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203630303434.roa
Signing time:             Wed 24 Jul 2024 20:30:46 +0000
ROA not before:           Wed 24 Jul 2024 20:25:46 +0000
ROA not after:            Wed 23 Jul 2025 20:30:46 +0000
asID:                     60044
IP address blocks:        45.169.182.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:92:fb:fe:dd:8f:1f:b5:4c:44:60:69:0d:84:72:b2:42:0a:00:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13
        Validity
            Not Before: Jul 24 20:25:46 2024 GMT
            Not After : Jul 23 20:30:46 2025 GMT
        Subject: CN=7FB4E2626FC00CB5F47C02D3A4E671BBE7EDD2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:da:42:51:7a:ce:ac:f4:47:4f:d4:4d:a0:c4:
                    61:4a:d4:f2:f0:51:f7:4d:30:b5:d4:de:2a:68:91:
                    90:7e:ab:04:0b:18:9a:21:22:63:00:0a:06:63:22:
                    33:d4:31:1f:61:b2:63:d5:88:91:b5:e3:dc:32:6f:
                    f5:9f:dd:dc:e2:15:e3:43:a4:58:2a:fa:cc:a3:9e:
                    cb:2b:f5:5b:5e:d2:17:95:09:ed:ed:90:69:d0:92:
                    27:45:ce:5d:78:62:1d:24:3c:7d:9b:f9:24:01:53:
                    bc:f5:70:e7:b6:a1:93:92:6d:30:42:1e:36:96:db:
                    72:64:cc:18:d5:94:61:e7:6c:8d:68:ad:25:d9:20:
                    23:f9:f2:ff:63:76:e3:9d:3e:06:43:ff:ab:76:6d:
                    02:ac:d0:c4:31:26:00:0d:6d:bf:70:7e:5e:09:f9:
                    a8:a0:dc:56:35:3b:86:5f:86:5b:c6:8a:12:b6:dd:
                    29:58:63:b0:43:4a:3a:cd:30:30:c4:1d:d1:df:11:
                    c0:7a:04:92:9d:15:0f:d7:ce:cf:44:6c:e3:45:62:
                    4b:43:cb:f1:cd:4c:0f:74:bd:e8:9f:c7:91:b6:1d:
                    c8:05:47:08:5f:ed:82:ca:cc:53:ae:d6:50:21:99:
                    0c:97:51:26:12:7c:66:b8:f8:4c:04:06:c3:11:27:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:E2:62:6F:C0:0C:B5:F4:7C:02:D3:A4:E6:71:BB:E7:ED:D2:FF
            X509v3 Authority Key Identifier:
                keyid:FE:EE:EC:E2:FC:07:BB:F4:B5:B0:C7:98:6D:0F:95:4D:70:4B:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203630303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:f9:a7:24:21:fc:ee:17:04:4d:f8:9d:25:2a:ca:e8:cb:
         55:7b:4e:85:ee:47:77:e2:4b:ed:17:54:e7:3a:c4:62:69:63:
         57:19:80:09:fb:38:a6:6a:1d:12:84:77:0e:d8:a9:b3:cb:2b:
         b4:31:35:14:01:36:36:c3:b1:cd:c5:a6:d1:c6:bd:19:f1:2f:
         d1:3b:a7:cc:00:61:60:81:c3:9b:9e:ef:1e:c7:80:f5:83:44:
         77:23:70:2b:37:f3:28:a7:04:8d:80:ab:ce:77:6d:40:21:4d:
         ab:6d:ae:60:21:ad:81:9c:e1:91:92:43:e3:ea:bb:c0:39:cb:
         f2:f7:5c:98:ba:ba:bd:a8:68:db:1f:fb:c5:e2:1f:38:ed:80:
         fc:51:49:3f:37:3b:16:1a:95:6f:87:bf:eb:6a:77:15:de:ae:
         29:9a:35:68:36:c3:d7:61:0b:76:25:3f:f3:fd:1b:e0:f6:b0:
         12:30:44:1a:7b:ce:2f:60:04:be:52:7e:19:d3:81:54:db:36:
         b6:bc:b6:28:15:1d:f4:8e:90:e3:7b:2f:a3:3e:32:cb:e5:87:
         bb:c3:41:96:7b:b8:ff:69:c5:d5:e1:56:39:b8:28:b7:24:f8:
         03:cd:37:27:53:8e:e5:91:f1:48:fe:1f:ea:86:cd:af:1c:fe:
         ee:d6:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:07 2024 by rpki-client on console-ams.rpki-client.org