Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          5VGCXDSxpCSit0tCW8gC3s/zngMRt0T5lBc/fp9BPMs=
Subject key identifier:   20:12:CC:15:DB:21:32:B7:7D:34:36:8D:A3:C4:1E:85:20:A3:B5:1C
Certificate issuer:       /CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
Certificate serial:       03B7E1E0F46159FE2A8454484A5DDA2B72E5DF55
Authority key identifier: C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:55 +0000
ROA not before:           Tue 09 Apr 2024 16:44:55 +0000
ROA not after:            Tue 08 Apr 2025 16:49:55 +0000
asID:                     268205
IP address blocks:        45.236.50.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b7:e1:e0:f4:61:59:fe:2a:84:54:48:4a:5d:da:2b:72:e5:df:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
        Validity
            Not Before: Apr  9 16:44:55 2024 GMT
            Not After : Apr  8 16:49:55 2025 GMT
        Subject: CN=2012CC15DB2132B77D34368DA3C41E8520A3B51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:40:3c:d5:16:e9:3f:c3:3f:32:bb:48:c6:e6:
                    b4:49:32:1b:07:69:cf:51:17:fa:f5:b3:12:57:67:
                    b1:18:ef:6c:13:f4:bf:6d:4d:00:ce:a9:71:a9:de:
                    11:77:a1:35:24:c7:cb:4a:27:e0:81:d7:97:75:6e:
                    8f:53:4e:c4:bb:26:44:a6:5c:fd:49:58:f6:f6:b2:
                    b7:09:ce:96:a6:6b:24:9a:31:4f:a0:83:db:1b:1f:
                    39:ef:ab:de:e3:a1:08:28:8f:2a:4d:92:93:62:ed:
                    3d:92:63:be:83:d7:86:57:81:50:53:03:f2:0c:95:
                    25:e4:1d:c7:28:82:d7:f5:ce:40:7d:f1:91:0d:81:
                    06:f9:ae:36:11:0d:ae:83:04:df:23:18:4c:5b:84:
                    2b:c3:16:9a:95:7a:d0:35:1b:b7:e4:27:f9:d9:dc:
                    0d:98:e7:30:41:78:45:90:f2:22:09:b9:6c:72:5b:
                    cf:3b:e5:2b:1c:89:88:3d:33:c0:86:d0:a5:86:0c:
                    3d:f7:16:e8:7d:cf:09:31:9a:1c:20:ce:c8:dc:75:
                    3a:b0:e8:d0:45:6a:fa:47:04:af:3f:13:fc:b5:d9:
                    b1:41:a9:44:43:b8:19:ae:ce:23:27:07:c5:cb:14:
                    8b:d9:0e:e0:96:2a:f7:2f:16:e6:e9:76:47:67:6a:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:CC:15:DB:21:32:B7:7D:34:36:8D:A3:C4:1E:85:20:A3:B5:1C
            X509v3 Authority Key Identifier:
                keyid:C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:d2:13:ad:4b:08:47:a7:9e:d5:ad:5d:75:9c:33:bf:10:
         d8:e2:78:e7:1d:b0:46:12:72:31:1c:f1:59:ae:e2:93:cd:67:
         4f:54:23:a5:d4:93:6d:11:3b:ea:34:2e:62:d3:53:af:1e:f4:
         41:e5:25:38:93:19:14:6a:94:29:5a:0e:3b:f0:20:9b:60:5e:
         11:98:ea:d9:61:aa:2d:4a:b5:4d:8e:b4:ae:3e:ad:22:ba:7c:
         52:f2:1d:33:a2:e0:0b:14:2a:2f:ac:01:37:2d:8b:75:63:79:
         62:6b:12:59:16:3f:a2:f4:3a:90:66:52:92:d1:16:dd:9e:92:
         62:61:fa:c3:45:f8:e8:b4:fe:a4:02:22:14:d0:ad:6b:26:44:
         28:19:cb:01:43:79:91:d1:a2:c4:35:e3:12:49:cc:4f:7b:3f:
         35:50:0c:90:c9:29:5a:ad:29:7c:01:12:df:98:62:17:2a:0a:
         8d:e0:e8:2f:b1:f6:04:76:b3:a8:6d:2b:61:28:38:e7:69:3e:
         24:60:33:09:f9:b3:84:37:b2:a0:1e:a2:44:5e:d0:1a:52:ee:
         51:95:c8:26:d9:14:92:7c:a9:79:a5:3e:3b:f3:c3:5c:73:b9:
         09:43:a4:38:9e:b8:93:65:d8:45:35:30:4b:8b:da:d4:ff:60:
         24:96:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:11:44 2024 by rpki-client on console-ams.rpki-client.org