Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138322e302f32332d3332203d3e20323731353832.roa
File:                     34352e3136352e3138322e302f32332d3332203d3e20323731353832.roa (raw, json)
Hash identifier:          +08OaWHfWtpU3zps8oDV9cEIays2wZQ/fL6lNWv9kZ0=
Subject key identifier:   BB:18:EB:40:FC:2C:B9:B9:24:6A:36:DC:43:C2:9B:DD:8A:A3:D4:A3
Certificate issuer:       /CN=42580E647D96523C34EBD7D8F6B91281804DC276
Certificate serial:       51CEAC91EF8003A7F096050E280457F0243D4493
Authority key identifier: 42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42580E647D96523C34EBD7D8F6B91281804DC276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138322e302f32332d3332203d3e20323731353832.roa
Signing time:             Wed 24 Jul 2024 11:24:13 +0000
ROA not before:           Wed 24 Jul 2024 11:19:13 +0000
ROA not after:            Wed 23 Jul 2025 11:24:13 +0000
asID:                     271582
IP address blocks:        45.165.182.0/23 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ce:ac:91:ef:80:03:a7:f0:96:05:0e:28:04:57:f0:24:3d:44:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42580E647D96523C34EBD7D8F6B91281804DC276
        Validity
            Not Before: Jul 24 11:19:13 2024 GMT
            Not After : Jul 23 11:24:13 2025 GMT
        Subject: CN=BB18EB40FC2CB9B9246A36DC43C29BDD8AA3D4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:68:5d:b8:60:59:a8:fe:90:b0:18:d2:69:
                    a3:75:85:5a:fd:ca:76:ab:96:a1:ec:71:65:34:83:
                    79:08:27:7b:7d:f5:fa:cd:08:5b:e7:96:7f:e6:ce:
                    16:8b:0d:6e:84:8d:31:76:64:7d:bc:a0:90:66:e3:
                    59:9e:d3:ef:ee:47:f5:c3:7d:8b:e1:f2:8c:c1:06:
                    3b:1b:ff:00:27:1b:8a:d5:3d:a9:47:ad:6e:ef:db:
                    c5:4b:4c:df:32:65:7d:a3:8f:70:8e:72:7b:5b:09:
                    ac:5c:8f:a0:12:6d:ce:5d:2a:50:23:33:37:e6:c8:
                    1c:23:1a:95:da:2e:3d:31:dd:fb:ff:a8:c5:9a:8f:
                    22:a9:b0:76:d1:17:75:83:df:96:a8:1e:e6:ee:c9:
                    fb:54:6f:43:e7:52:80:6e:42:6e:99:dc:46:09:3b:
                    33:dc:92:62:05:f9:e4:42:cf:ce:69:f4:e1:fb:a3:
                    66:a4:1c:f6:a8:21:cd:d3:19:05:66:e8:5e:17:7c:
                    9f:8d:80:ef:f0:bc:bc:b3:60:1e:94:cb:4e:1d:a5:
                    67:3f:4a:6a:ed:d9:0c:b7:26:5c:31:a5:9c:c3:67:
                    44:7d:44:ad:93:cc:4b:5a:11:9c:33:7c:8d:fb:c5:
                    43:26:8a:09:95:42:98:0e:7f:ee:6c:5f:0b:72:ab:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:18:EB:40:FC:2C:B9:B9:24:6A:36:DC:43:C2:9B:DD:8A:A3:D4:A3
            X509v3 Authority Key Identifier:
                keyid:42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/42580E647D96523C34EBD7D8F6B91281804DC276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42580E647D96523C34EBD7D8F6B91281804DC276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138322e302f32332d3332203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:aa:01:28:3f:c7:01:e0:2b:61:e5:0a:e7:17:fc:f3:8e:d8:
         67:ca:80:6d:27:9b:b1:86:70:9d:79:a3:bf:30:cb:36:e7:bf:
         2a:2f:b2:b8:8a:8f:dc:5b:d4:3c:c1:af:fa:41:2f:17:04:29:
         98:37:9f:d6:7f:21:79:02:fe:c9:c9:0b:c7:49:6a:36:35:65:
         4f:2c:04:f0:c8:36:fb:91:d9:54:f1:81:3c:7c:38:c8:d9:cf:
         4a:18:bf:73:17:43:9d:78:33:30:c6:84:00:6d:7f:04:4c:8a:
         21:33:fb:c3:0a:19:1f:ae:82:bd:1f:10:b4:83:da:f5:82:72:
         42:a9:b2:f7:93:f4:f9:2d:4d:a7:c2:27:d9:0a:08:cb:4a:55:
         c9:ac:cb:f8:47:38:f1:8f:70:5a:f5:07:ed:b9:06:04:1a:a0:
         60:5e:0c:4c:ed:11:bc:1d:44:0d:93:1a:81:cd:9d:5e:d6:c0:
         ff:20:70:ab:61:39:41:5b:71:63:e9:0e:15:92:e2:12:e0:42:
         1b:fd:7f:73:a1:9d:27:92:ea:ca:f1:3c:fd:d5:cc:1d:e7:be:
         51:2c:c5:b6:d6:42:94:5a:b4:f9:a3:ce:cd:5f:5b:2b:63:5e:
         1b:17:a7:ec:80:08:0e:81:e0:f2:f2:82:e9:47:56:1e:37:87:
         b2:8d:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:22 2024 by rpki-client on console-ams.rpki-client.org