Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa
File:                     34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          oza1Mt8vjK8p9VVxHeMXB/JeF2B0kyfOM2RuzzGtFCw=
Subject key identifier:   6B:09:DF:F5:A6:5C:48:E8:34:CA:AE:77:8A:81:22:40:2F:59:46:6F
Certificate issuer:       /CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
Certificate serial:       75C56A799B3ECD080E31ECFCE58D6EC7688BD27E
Authority key identifier: EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa
Signing time:             Tue 03 Sep 2024 13:27:38 +0000
ROA not before:           Tue 03 Sep 2024 13:22:38 +0000
ROA not after:            Tue 02 Sep 2025 13:27:38 +0000
asID:                     267420
IP address blocks:        45.235.160.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c5:6a:79:9b:3e:cd:08:0e:31:ec:fc:e5:8d:6e:c7:68:8b:d2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
        Validity
            Not Before: Sep  3 13:22:38 2024 GMT
            Not After : Sep  2 13:27:38 2025 GMT
        Subject: CN=6B09DFF5A65C48E834CAAE778A8122402F59466F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:2d:44:dc:42:51:3c:e8:44:73:22:64:9b:
                    47:18:a8:18:91:b3:29:c8:d6:9e:40:ca:b0:16:16:
                    c5:ca:cb:0f:32:ec:01:55:61:17:be:9d:94:63:18:
                    73:a9:10:82:df:bc:f8:32:84:57:ac:fc:23:af:6f:
                    d5:c2:2a:60:71:37:b4:bb:82:9c:2f:88:c9:3b:30:
                    66:c9:f7:f7:f6:83:43:0a:eb:44:44:05:ec:57:49:
                    23:2a:23:84:87:85:07:a4:e0:e0:1e:e2:49:1d:8a:
                    28:55:27:81:58:f2:20:44:52:4a:94:2b:2a:ae:3a:
                    38:c6:97:90:40:04:99:5e:d9:21:f2:2b:13:72:e4:
                    46:64:26:a1:d4:fe:a7:38:f5:27:fb:b9:00:92:ab:
                    c6:07:02:07:72:73:96:8a:70:bc:17:f7:35:5f:0a:
                    44:d7:ff:a3:e5:f6:fd:37:83:39:18:cd:b4:ac:7f:
                    37:ca:bd:e5:75:8b:93:aa:09:b4:17:df:6a:10:70:
                    62:a5:7d:9e:24:78:e1:99:7f:d8:d5:f5:7e:96:08:
                    d8:2d:35:19:88:83:95:9a:a3:d0:18:b4:0e:19:01:
                    5f:bf:59:db:29:86:c5:fd:3d:6b:e9:5d:69:6e:53:
                    1d:b2:78:84:fa:e6:48:47:39:76:fc:84:0d:c7:5b:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:09:DF:F5:A6:5C:48:E8:34:CA:AE:77:8A:81:22:40:2F:59:46:6F
            X509v3 Authority Key Identifier:
                keyid:EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:06:00:0f:8b:1b:aa:36:e9:20:92:eb:79:45:5a:a7:9e:80:
         59:9e:71:34:33:81:4e:e5:7b:8f:7e:ff:86:55:92:c7:eb:7a:
         26:b1:ca:b0:1b:52:10:54:71:ce:c6:36:a2:2f:29:35:ba:da:
         2c:2f:42:ae:83:77:a5:86:5a:72:26:83:34:7f:cf:d7:ec:9f:
         97:8a:87:ce:9a:a9:42:f0:f9:fd:d8:b8:68:b2:72:95:13:80:
         dc:de:d2:78:5f:0e:b7:88:e9:01:5e:35:a8:8c:69:fb:ef:0e:
         fb:bb:a2:80:b9:47:f0:ea:c3:5a:ce:28:76:e1:a8:85:51:cf:
         7b:37:4a:7a:94:6c:73:40:db:02:45:86:5d:f8:ee:d6:11:be:
         4a:38:2a:c0:e6:8b:07:5c:7e:ee:70:24:e1:c8:d3:d0:df:77:
         fc:92:ed:95:50:6a:a4:f6:fa:cb:64:ca:8d:96:85:db:2d:22:
         4e:5d:04:2c:ca:ba:41:cc:ca:cb:f4:0f:37:82:51:5a:e4:5a:
         a8:9d:61:79:d4:05:0c:53:f2:53:c6:61:29:4a:8e:3b:54:61:
         23:7e:c0:34:c2:3e:dd:ab:d8:f6:a7:9c:29:44:68:80:8d:c7:
         fb:33:bd:36:bc:69:2e:41:ff:1b:84:cc:fc:63:44:80:bc:72:
         cd:93:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 14:31:46 2024 by rpki-client on console-ams.rpki-client.org