Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa
File:                     34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          cdFhtau3IcY7o01mToxK3m/4wq+CTozKwq3B+Qq1VTU=
Subject key identifier:   49:2D:D6:87:1C:AB:91:61:34:D2:59:F8:B7:BA:ED:15:55:17:9C:F0
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       78D7BFA66DFCF1CE38ED7658802611B18B58007B
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa
Signing time:             Tue 04 Jun 2024 21:03:07 +0000
ROA not before:           Tue 04 Jun 2024 20:58:07 +0000
ROA not after:            Tue 03 Jun 2025 21:03:07 +0000
asID:                     267420
IP address blocks:        45.235.160.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d7:bf:a6:6d:fc:f1:ce:38:ed:76:58:80:26:11:b1:8b:58:00:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Jun  4 20:58:07 2024 GMT
            Not After : Jun  3 21:03:07 2025 GMT
        Subject: CN=492DD6871CAB916134D259F8B7BAED1555179CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:67:89:38:17:3d:6e:8c:10:00:6b:09:0f:
                    20:3f:50:74:fd:25:58:1f:5a:bb:88:8e:d9:82:7a:
                    c9:55:d3:be:52:7c:36:91:27:f6:14:09:7f:cc:2d:
                    3c:f8:16:6a:c8:69:61:be:22:eb:0f:8e:cb:de:4c:
                    01:93:dc:13:0e:14:63:a8:43:61:18:3b:6d:d5:f0:
                    73:8d:c6:36:58:fb:0c:35:24:83:9a:a8:c1:1b:b6:
                    0c:b8:63:8b:e5:ac:25:a6:74:a2:78:36:41:5f:cd:
                    8c:53:88:38:f9:5f:52:68:7d:95:bc:cb:b0:f7:54:
                    29:f6:be:1f:f0:14:b5:e0:9d:11:8a:c8:3e:de:c4:
                    dc:3c:99:a0:18:31:28:2f:9e:58:c8:57:96:9b:c3:
                    1b:bd:c8:e3:ea:02:38:c8:b5:41:82:d9:d1:4b:76:
                    e2:b3:ef:af:67:d1:c2:ec:e1:aa:6e:43:9a:b1:9a:
                    73:db:c4:d3:55:34:f8:88:08:f0:32:93:14:38:af:
                    35:68:2c:55:5d:d6:38:c4:3e:e2:de:4b:ad:db:80:
                    30:1e:d0:d0:bb:bd:58:51:a9:b3:c6:b8:b5:21:a9:
                    1e:82:d7:a5:1d:3c:d6:22:e1:74:85:e5:f6:8f:36:
                    ea:9f:f1:5f:64:97:55:91:d7:aa:11:5d:e9:25:a8:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2D:D6:87:1C:AB:91:61:34:D2:59:F8:B7:BA:ED:15:55:17:9C:F0
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136302e302f32322d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:8c:c1:2b:df:fb:87:08:47:1c:9a:6b:36:95:9b:d7:84:
         1e:4e:aa:2a:a5:51:76:6d:ce:56:b9:af:71:24:bd:8e:b0:bc:
         1a:a5:ef:f2:c7:bc:df:53:fc:87:3c:8e:74:59:0e:9e:52:a7:
         ff:07:bd:8a:b3:49:ab:2a:e3:7d:b4:20:6d:2c:b8:a5:df:d1:
         85:f8:94:eb:19:fd:2a:59:bb:76:d8:17:40:cf:52:33:24:34:
         6d:91:6d:0a:4a:e2:8f:39:2f:1e:6a:62:c8:1f:3f:7c:40:13:
         41:f3:34:1b:3f:fc:35:58:a1:55:d9:e8:d1:2f:b8:28:79:fc:
         8c:e7:df:ea:b6:6d:3e:0c:fd:32:e8:8c:37:5c:5a:63:47:5d:
         e0:1d:5f:08:b7:f6:24:8d:25:d6:9f:8d:fc:f4:57:d2:4b:e9:
         0d:1b:ab:29:5c:1a:b7:50:f9:37:33:74:5d:7e:0f:1e:4d:fb:
         2a:de:0c:7c:e6:6c:29:58:83:7c:ef:22:99:0d:86:16:6b:4f:
         3e:b8:bd:c0:53:05:95:ae:df:f2:d0:e9:5e:fb:33:57:f9:0f:
         d5:f4:2b:d0:02:30:ee:b4:4b:d8:71:08:5f:e0:fd:15:1c:fe:
         54:f9:e9:4d:fa:be:18:42:84:ea:8a:7c:90:68:c7:20:ba:71:
         05:f2:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:05 2024 by rpki-client on console-fra.rpki-client.org