Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36312e302f32342d3234203d3e20323632353639.roa
File:                     34352e3136372e36312e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          OrtswpVlzxHdO+I8TzStbGax0ZUZyRWG7Ix4y4qRxL8=
Subject key identifier:   AF:49:75:7C:81:2F:61:4A:C4:43:20:15:E3:75:9E:70:19:D2:8C:8A
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       213E0C2F623FF46028EB650A85DA95F03AE012CC
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36312e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 27 Jun 2024 14:29:46 +0000
ROA not before:           Thu 27 Jun 2024 14:24:46 +0000
ROA not after:            Thu 26 Jun 2025 14:29:46 +0000
asID:                     262569
IP address blocks:        45.167.61.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3e:0c:2f:62:3f:f4:60:28:eb:65:0a:85:da:95:f0:3a:e0:12:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Jun 27 14:24:46 2024 GMT
            Not After : Jun 26 14:29:46 2025 GMT
        Subject: CN=AF49757C812F614AC4432015E3759E7019D28C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:6c:2d:83:06:53:82:c7:52:72:a2:85:71:
                    f5:05:2c:04:00:70:b2:69:1b:2b:75:a4:f8:e2:39:
                    d7:d1:2e:06:c0:ee:1b:7b:84:64:aa:19:85:97:74:
                    f7:c5:69:f9:69:2f:f1:01:1f:33:28:6a:a4:19:34:
                    6c:a6:ed:f8:58:e6:5c:4e:0f:28:06:57:50:74:eb:
                    bb:df:c7:df:d9:86:12:39:29:56:6b:75:ab:ea:7e:
                    a7:d3:1b:d3:3a:ea:46:60:37:3d:b2:33:3b:9f:bf:
                    6a:a8:18:fb:5c:4d:1b:35:31:5f:68:30:0f:94:94:
                    61:53:47:f4:a5:e0:1f:12:68:5d:67:15:6e:18:9c:
                    7a:dc:a5:bf:08:79:a4:87:2c:f1:31:44:40:20:70:
                    97:68:48:d7:c2:80:e5:6d:c3:5d:04:b1:51:10:68:
                    d5:e1:45:f9:a9:5a:e2:42:7b:15:7e:a8:6c:af:c8:
                    97:6e:94:ff:b4:a6:35:c3:27:52:6b:9c:ec:60:6b:
                    d2:c1:cf:10:53:2c:4b:02:c6:e2:22:bb:fb:af:de:
                    82:ec:ff:6e:ca:1c:0d:3b:6e:30:44:c1:cb:87:d7:
                    52:96:10:47:a7:81:e1:2d:0d:05:01:e7:fd:77:b5:
                    29:96:d6:7b:10:e9:6f:6e:94:63:54:e5:6d:be:6e:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:49:75:7C:81:2F:61:4A:C4:43:20:15:E3:75:9E:70:19:D2:8C:8A
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36312e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:20:29:5f:77:f0:d2:fe:b1:fa:2a:ad:30:ca:b0:bd:40:73:
         c5:3f:ed:b0:62:aa:5e:d0:0e:ce:ac:4f:1d:b0:12:4a:f3:4a:
         0e:42:75:dd:e6:12:51:08:7f:57:57:fb:c5:f2:fb:d5:2b:7d:
         95:c5:ef:87:ea:01:d7:2a:d0:94:45:5a:c1:17:cf:54:91:10:
         67:8d:2f:06:db:92:8e:39:06:0e:3b:1b:93:bb:9a:33:4d:24:
         6f:62:fa:c1:42:87:a3:ad:b4:3b:31:36:fa:ff:9e:99:ca:a0:
         75:c6:78:dc:b9:32:63:60:6d:3f:3a:5a:09:54:59:ab:eb:29:
         b6:3e:16:21:e4:6b:b7:1d:45:c1:4d:c2:a2:e9:de:32:8e:b6:
         d8:c9:81:b3:1b:74:2b:f4:fe:2e:79:44:a3:3e:e8:cc:e6:e5:
         c8:05:f4:60:ab:db:41:17:04:46:74:8a:e7:a0:7a:be:a1:fd:
         b4:56:1d:e8:11:93:9c:58:77:97:7b:d0:a1:bb:95:dc:39:91:
         4b:17:e7:bb:a6:4a:08:b3:ea:e8:68:58:b5:3a:04:cb:45:90:
         5c:0f:57:46:96:f7:db:34:b1:68:01:4c:77:e3:f7:38:31:83:
         27:db:66:f2:c2:be:d3:75:23:ec:8a:8f:ae:98:54:26:c6:bc:
         ce:ef:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org