Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/34352e3138312e3231382e302f32342d3234203d3e20323639323034.roa
File:                     34352e3138312e3231382e302f32342d3234203d3e20323639323034.roa (raw, json)
Hash identifier:          JKKlwgJnEbQ+p/G/xZII2aGelXiJY9ir8eBcOu4D64s=
Subject key identifier:   1A:A0:B8:F4:97:D7:28:27:EF:30:B9:05:2C:00:92:3E:38:A0:2D:F5
Certificate issuer:       /CN=9391A2EA93E4A74F0F92C7F7F614A95458169940
Certificate serial:       794A9F1D28DC9E4D8BC02CEA3D997314DA5B378C
Authority key identifier: 93:91:A2:EA:93:E4:A7:4F:0F:92:C7:F7:F6:14:A9:54:58:16:99:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9391A2EA93E4A74F0F92C7F7F614A95458169940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/34352e3138312e3231382e302f32342d3234203d3e20323639323034.roa
Signing time:             Mon 15 Apr 2024 19:12:28 +0000
ROA not before:           Mon 15 Apr 2024 19:07:28 +0000
ROA not after:            Mon 14 Apr 2025 19:12:28 +0000
asID:                     269204
IP address blocks:        45.181.218.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4a:9f:1d:28:dc:9e:4d:8b:c0:2c:ea:3d:99:73:14:da:5b:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9391A2EA93E4A74F0F92C7F7F614A95458169940
        Validity
            Not Before: Apr 15 19:07:28 2024 GMT
            Not After : Apr 14 19:12:28 2025 GMT
        Subject: CN=1AA0B8F497D72827EF30B9052C00923E38A02DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:83:51:56:3f:3a:ef:c5:c3:ea:8d:19:81:
                    a5:55:10:8a:37:22:eb:3d:ae:4b:12:b6:77:9c:f9:
                    82:61:04:17:57:5a:e6:39:f1:9f:81:ea:79:3b:68:
                    fd:31:7f:bc:49:fe:15:0d:da:7a:33:67:1a:25:68:
                    f3:9f:17:f2:77:02:e8:b2:17:32:15:1d:0a:63:c8:
                    45:69:02:1e:f0:3a:8f:a0:ea:68:94:10:5c:13:7a:
                    4b:cf:5d:a6:f4:ff:ee:61:05:d6:5b:47:c2:80:f9:
                    d1:dd:3c:42:14:c3:3f:49:20:3f:ec:1c:3a:02:66:
                    a5:df:7a:70:a8:73:c5:29:f3:ce:dd:a9:59:68:cc:
                    c8:12:28:e6:09:c7:25:91:05:ec:6a:6e:68:9d:28:
                    ca:65:24:c2:01:a4:dc:c5:14:f4:f8:f2:6e:e4:26:
                    2e:c3:e6:03:89:b3:5c:bd:e6:1a:1b:c3:fe:73:d2:
                    3c:a8:57:d3:f4:e3:02:50:06:66:98:23:f4:fd:5b:
                    1d:e6:37:a0:b4:e8:f5:7d:65:51:b3:87:a8:24:6e:
                    79:b6:52:0c:2c:7d:7b:89:f7:af:36:2a:45:48:13:
                    5e:b2:12:59:d5:db:6b:f9:f5:4f:08:b8:e4:40:b6:
                    4c:4a:f8:e4:4d:6d:44:26:79:2d:12:d3:63:4a:cd:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A0:B8:F4:97:D7:28:27:EF:30:B9:05:2C:00:92:3E:38:A0:2D:F5
            X509v3 Authority Key Identifier:
                keyid:93:91:A2:EA:93:E4:A7:4F:0F:92:C7:F7:F6:14:A9:54:58:16:99:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/9391A2EA93E4A74F0F92C7F7F614A95458169940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9391A2EA93E4A74F0F92C7F7F614A95458169940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/34352e3138312e3231382e302f32342d3234203d3e20323639323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:23:26:4e:14:75:d7:5a:54:b2:b7:71:db:60:f9:70:7c:
         2c:75:77:cf:6e:9c:a8:a1:1a:ea:cf:43:c5:c5:27:98:bb:30:
         0c:f9:54:4d:91:a3:25:36:e7:94:37:36:d6:63:97:64:73:11:
         c4:28:d6:9e:c9:b3:04:85:55:23:ec:ee:25:52:e2:d1:93:64:
         54:85:5a:af:54:8c:cb:ed:e5:9f:c9:14:e6:fa:b8:d2:1b:05:
         19:f8:33:a1:40:84:f5:dd:91:27:ef:5f:59:c3:b0:88:3e:5e:
         35:64:40:0d:bf:65:48:90:b9:39:76:80:b5:6e:82:65:de:30:
         b9:86:a3:75:82:1d:b6:59:be:02:f7:d0:9f:bf:b8:83:7c:da:
         f4:42:5c:5c:44:09:83:22:c1:11:1c:0a:3f:c9:e8:78:2d:18:
         13:52:11:83:b9:1a:04:a9:0b:47:7a:47:53:ef:96:68:1e:2f:
         76:ca:2e:67:a9:28:3c:ac:d7:23:c5:d2:57:80:1e:ff:37:be:
         52:91:28:4a:a2:47:fe:e8:d7:fb:e1:fb:ed:81:77:b0:10:24:
         f0:86:d8:a6:cd:e1:2d:c9:c9:bd:e4:68:9a:02:e7:cf:4e:fd:
         3b:68:9c:4d:89:18:c3:a5:fb:22:a7:d2:ac:69:43:46:9a:f5:
         6b:cb:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 06:17:23 2024 by rpki-client on console-ams.rpki-client.org