Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35332e302f32342d3234203d3e20323639303533.roa
File:                     34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (raw, json)
Hash identifier:          cv+shyOlx2986lkUWbG1d8sRK8u61YPZ6MFp2YFtrlw=
Subject key identifier:   D7:8E:47:E2:D7:16:80:9D:6D:95:82:6B:C6:7D:81:C2:B5:F0:03:ED
Certificate issuer:       /CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
Certificate serial:       4852FDE8D1011DA04EB47430C0BCE976DEE60AE6
Authority key identifier: 78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35332e302f32342d3234203d3e20323639303533.roa
Signing time:             Wed 03 Apr 2024 23:10:49 +0000
ROA not before:           Wed 03 Apr 2024 23:05:49 +0000
ROA not after:            Wed 02 Apr 2025 23:10:49 +0000
asID:                     269053
IP address blocks:        45.179.53.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:52:fd:e8:d1:01:1d:a0:4e:b4:74:30:c0:bc:e9:76:de:e6:0a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
        Validity
            Not Before: Apr  3 23:05:49 2024 GMT
            Not After : Apr  2 23:10:49 2025 GMT
        Subject: CN=D78E47E2D716809D6D95826BC67D81C2B5F003ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:2f:a2:a4:1e:a1:e2:49:b4:93:cb:58:7d:
                    28:90:16:65:07:de:39:eb:b6:39:0c:39:92:80:67:
                    87:f1:44:cf:3f:69:04:13:40:7f:73:4c:1e:fc:29:
                    f7:08:70:c2:a3:b7:b7:40:53:7c:e7:fd:b5:5a:91:
                    cb:35:f3:9f:96:55:a0:ca:cf:0d:32:8c:df:0c:f7:
                    50:45:a5:fb:11:0b:bf:49:45:f8:15:af:0c:04:5a:
                    04:9a:c5:ff:54:83:f4:bb:20:e7:29:57:2c:b0:9d:
                    73:db:20:8b:3e:14:5d:09:e8:01:df:21:d0:73:72:
                    3a:12:e4:70:73:56:b0:c3:4b:cd:45:33:81:c9:65:
                    a9:37:cb:2e:f9:13:8b:28:9e:98:7d:bf:a9:51:92:
                    53:83:7b:68:08:6c:85:42:ce:9a:00:d7:72:0d:49:
                    30:84:3a:35:9c:b3:48:16:6f:f8:19:8d:8c:b0:df:
                    ca:4c:6b:8f:bd:2a:b8:2b:d5:f6:5c:d0:1d:c1:3a:
                    41:f3:29:5f:51:ee:c1:4f:4b:1d:b3:a4:3c:70:44:
                    9e:73:cb:d4:16:c2:28:56:fe:f4:43:31:a4:4a:3f:
                    65:26:9e:35:99:4a:7b:60:85:79:df:29:a1:1b:58:
                    c1:01:23:d1:a1:df:6d:17:9d:52:7c:89:93:e7:20:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:47:E2:D7:16:80:9D:6D:95:82:6B:C6:7D:81:C2:B5:F0:03:ED
            X509v3 Authority Key Identifier:
                keyid:78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35332e302f32342d3234203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:5d:66:bf:41:8e:68:a4:fa:93:93:e4:ac:66:32:53:da:
         bd:41:c9:ca:90:ad:99:bb:cb:a4:a7:02:f3:ca:e2:dc:d3:01:
         8c:73:f2:0e:a4:2d:9d:58:fd:bb:32:64:45:68:7d:bd:1f:11:
         5b:f3:57:4c:e8:48:66:26:48:f1:1d:cd:fb:07:94:24:c4:f7:
         25:53:59:af:e7:55:a7:f2:f1:86:27:88:14:e3:fd:65:9a:3a:
         8e:b7:f8:e0:f2:ec:4d:f2:7e:90:f9:ce:0b:84:83:28:bd:e7:
         5b:b1:75:df:fe:e0:a8:13:c0:46:e3:69:97:c4:8c:da:3b:d4:
         91:7e:87:f5:5c:c3:c1:67:c2:5f:0a:a8:1f:72:f1:ce:99:d9:
         f7:d0:c6:ad:a8:94:47:ff:e0:c4:7f:49:2d:00:a4:9f:29:04:
         f1:9f:dd:5d:c3:d8:d1:c8:05:b6:2e:1a:e2:39:13:1f:dd:ab:
         f2:9e:62:d4:1a:27:be:8c:12:24:d7:30:b4:9e:fd:01:95:62:
         b2:3e:fa:f1:f4:76:e3:51:a7:0b:1d:20:40:a8:8f:a1:29:5f:
         3f:5c:00:8d:00:c6:09:ab:2f:4f:70:5e:45:1a:93:dc:a2:05:
         cc:45:e8:9b:9f:a9:81:b4:be:9d:a7:29:9e:4e:b9:4e:b7:9b:
         55:87:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 08:15:43 2024 by rpki-client on console-ams.rpki-client.org