Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa
File:                     34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (raw, json)
Hash identifier:          nWF1KkSPIozX0vifJZqBiuISz6es1BnizdIs1L8MVI4=
Subject key identifier:   FB:F6:3F:0B:8D:F6:C7:89:E1:36:81:94:9E:5F:38:0E:24:4F:D7:BD
Certificate issuer:       /CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
Certificate serial:       7FA30A8272A31DB3BC63286A770826373552ED61
Authority key identifier: 78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa
Signing time:             Wed 03 Apr 2024 23:10:48 +0000
ROA not before:           Wed 03 Apr 2024 23:05:48 +0000
ROA not after:            Wed 02 Apr 2025 23:10:48 +0000
asID:                     269053
IP address blocks:        45.179.52.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a3:0a:82:72:a3:1d:b3:bc:63:28:6a:77:08:26:37:35:52:ed:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
        Validity
            Not Before: Apr  3 23:05:48 2024 GMT
            Not After : Apr  2 23:10:48 2025 GMT
        Subject: CN=FBF63F0B8DF6C789E13681949E5F380E244FD7BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:61:5e:0c:7e:d1:9e:ac:8e:3a:c5:7c:fd:
                    dc:19:04:7d:ad:ff:75:25:b7:42:6a:7f:da:b3:00:
                    b4:68:4a:33:9e:ce:d6:75:31:04:33:32:86:90:fc:
                    7b:a4:e9:9e:01:df:2a:ee:39:28:93:aa:fd:13:e4:
                    ed:9a:29:5e:77:25:3c:14:56:fe:f8:a7:23:e5:6e:
                    72:fc:ba:b8:e3:e2:14:a6:e8:42:fa:97:a1:29:48:
                    34:48:b4:06:9c:e3:a4:e9:1d:77:30:79:85:c5:ca:
                    7f:f4:86:1d:ce:2b:a3:ae:24:67:8a:fb:38:8b:5a:
                    9e:9f:55:79:51:6d:0f:a1:a5:ae:2c:10:c9:02:00:
                    ca:e5:1a:3a:b4:3f:3e:fe:fe:cb:91:b6:e5:c5:75:
                    b7:a8:ce:da:6e:87:be:5e:c0:1d:23:c2:40:d2:87:
                    3c:a3:07:f2:c6:ce:cb:b6:e4:e6:16:4b:b8:2c:8d:
                    f6:ec:21:be:28:78:64:1a:9b:4e:a4:eb:81:6e:92:
                    70:9c:dd:60:71:74:b5:95:a9:24:48:3d:d1:d1:2e:
                    dc:a8:97:4f:2f:95:98:48:a1:db:70:9a:4e:07:aa:
                    88:5f:05:a3:af:2d:55:e9:24:88:93:07:b9:65:46:
                    53:32:6a:9d:d6:33:85:ed:db:69:f8:cf:67:53:c9:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F6:3F:0B:8D:F6:C7:89:E1:36:81:94:9E:5F:38:0E:24:4F:D7:BD
            X509v3 Authority Key Identifier:
                keyid:78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:64:b5:30:d6:5d:fa:2d:8e:c1:06:8a:df:77:7e:37:67:29:
         e6:38:ab:54:ae:99:ff:b3:72:32:df:64:3e:0b:b0:31:c0:f5:
         fb:bb:2d:64:d8:02:23:78:ad:d9:b8:28:fb:cd:5d:80:29:56:
         94:92:15:8c:d5:16:8b:7c:4e:d1:61:c1:88:9e:83:f1:cf:af:
         9d:ae:21:2d:e1:a4:12:ad:20:77:00:4f:78:01:75:2e:6c:97:
         2c:d5:94:7b:f5:1e:e0:e5:ad:df:32:df:98:93:6b:66:63:05:
         b4:58:6d:0d:f8:38:ab:d9:b1:f9:86:91:b1:f3:14:a8:33:e0:
         e3:78:3c:2c:47:17:09:74:6b:33:bf:b6:a5:2b:f9:dc:ee:e9:
         87:8a:64:5e:6f:4b:a7:02:6a:c5:c8:08:51:92:31:d3:f4:c0:
         40:60:21:01:f4:af:ee:0c:1a:7c:3d:d9:34:fc:93:5d:22:89:
         ce:f4:8f:59:84:47:60:be:44:03:00:34:69:ee:6c:0d:a4:50:
         0e:9c:bb:a4:a8:a9:e7:e2:26:df:39:92:2e:11:40:41:0d:2f:
         0d:5b:31:8c:4e:9d:64:07:52:bf:c5:16:7a:84:b0:06:76:05:
         f2:4d:ce:16:36:4e:e1:8a:e9:07:cf:12:83:01:36:7a:b3:98:
         51:0a:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 08:15:43 2024 by rpki-client on console-ams.rpki-client.org