Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32332d3233203d3e20323632353639.roa
File:                     34352e3136372e36302e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          Q52HGHGaoUEuwzfzzlQDrt2L60SRR+yHJo3vXE75VmQ=
Subject key identifier:   39:11:AB:FB:7E:93:10:18:50:CA:69:02:20:31:32:41:68:83:BF:A3
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       4C47C0AFF64B5F2DBF47F4481F67C410B7B73BBB
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32332d3233203d3e20323632353639.roa
Signing time:             Thu 27 Jun 2024 14:28:37 +0000
ROA not before:           Thu 27 Jun 2024 14:23:37 +0000
ROA not after:            Thu 26 Jun 2025 14:28:37 +0000
asID:                     262569
IP address blocks:        45.167.60.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:47:c0:af:f6:4b:5f:2d:bf:47:f4:48:1f:67:c4:10:b7:b7:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Jun 27 14:23:37 2024 GMT
            Not After : Jun 26 14:28:37 2025 GMT
        Subject: CN=3911ABFB7E93101850CA6902203132416883BFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:37:7e:0e:02:8f:e0:6e:8c:bd:1f:c7:8d:
                    81:c2:b6:29:97:8e:b8:bf:61:7f:e3:1d:27:32:30:
                    7e:a6:32:0c:05:c8:18:fb:5a:be:d2:0d:03:9a:dd:
                    6d:0e:ed:a5:94:77:6d:9c:bb:69:89:68:26:db:6f:
                    e9:f8:fa:aa:ed:d8:8d:48:86:e2:91:4e:fd:29:4b:
                    47:55:e5:63:01:e5:c9:b5:ba:59:e3:2c:e4:28:0e:
                    4e:6d:fe:ab:3f:84:71:09:1c:13:24:ea:69:9c:74:
                    f9:1a:14:cb:99:26:8c:af:f2:ca:8f:d8:46:df:25:
                    a4:d2:d0:0d:0f:09:f0:d9:d4:56:da:38:b3:3c:46:
                    3f:f3:2c:18:6d:00:d0:97:2c:d9:dd:ca:68:da:58:
                    c8:a1:9b:eb:84:6b:51:0e:28:9d:54:74:ea:7b:e7:
                    ee:92:65:d5:7c:99:34:f7:e2:a7:ce:c0:0a:50:ae:
                    63:0c:54:98:67:ab:6c:28:92:11:c7:a6:51:b1:18:
                    79:60:ea:c8:07:cf:82:27:92:25:f9:24:89:e8:0b:
                    82:7d:13:f6:f9:53:f2:44:be:a0:64:83:43:63:1b:
                    59:5c:bc:ba:71:85:1e:fe:c1:99:68:21:88:77:59:
                    53:4e:d8:61:ee:06:b4:30:5c:78:41:b8:75:e4:82:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:AB:FB:7E:93:10:18:50:CA:69:02:20:31:32:41:68:83:BF:A3
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:0a:ea:34:67:58:33:80:48:40:28:c2:e2:21:c6:35:a4:0b:
         de:a9:13:38:eb:78:ae:a3:11:82:7f:31:21:82:9a:9f:20:51:
         f4:5c:bf:db:bc:6c:74:dd:f1:ad:74:64:c4:43:4b:e0:b1:8d:
         66:6f:c9:2f:f1:c2:13:e7:c8:03:e1:cf:97:96:3a:67:ad:a5:
         e3:cd:ba:b5:87:dd:25:ca:84:7c:de:57:d6:78:4a:2f:13:41:
         41:c9:8b:e2:8c:8d:4d:1c:71:9c:c4:0c:3f:d6:06:84:6f:53:
         27:e0:3f:a3:48:fe:b1:72:97:dd:1b:a8:4b:be:fb:80:d8:f1:
         c7:eb:a1:20:36:8f:f3:ff:b1:2d:fd:06:6e:3b:d9:71:64:b1:
         5e:d3:5c:ff:c7:fc:c4:6c:dd:da:5e:d6:b1:f2:57:35:ad:67:
         8c:f4:0c:92:07:46:0b:14:ff:5c:2d:6e:d0:db:a8:d6:92:af:
         c4:0d:c3:7c:f2:f2:1c:83:9f:dd:f3:25:bc:bd:28:4a:3b:d6:
         a9:1e:3b:09:ea:35:46:15:e1:01:07:73:b7:43:1b:e0:1d:90:
         41:31:ee:b6:ca:a1:59:0e:88:ee:a3:b4:43:9e:c8:cf:82:8f:
         45:58:f0:5e:0c:46:c6:c4:7c:ba:32:bd:84:ec:d1:64:08:0b:
         5f:52:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org