Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138332e302f32342d3332203d3e20323731353832.roa
File:                     34352e3136352e3138332e302f32342d3332203d3e20323731353832.roa (raw, json)
Hash identifier:          NqvTcW/lJmgUMjZ3Za26UsVuWe+UVJyx8j0EMc7Mapo=
Subject key identifier:   12:72:4F:53:A3:F5:1A:1E:06:49:35:F6:CF:A7:3D:2B:65:FC:36:3A
Certificate issuer:       /CN=42580E647D96523C34EBD7D8F6B91281804DC276
Certificate serial:       66205AC5B07B2F7522D830972A79F0DBDADC71C1
Authority key identifier: 42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42580E647D96523C34EBD7D8F6B91281804DC276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138332e302f32342d3332203d3e20323731353832.roa
Signing time:             Wed 24 Jul 2024 11:25:56 +0000
ROA not before:           Wed 24 Jul 2024 11:20:56 +0000
ROA not after:            Wed 23 Jul 2025 11:25:56 +0000
asID:                     271582
IP address blocks:        45.165.183.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:20:5a:c5:b0:7b:2f:75:22:d8:30:97:2a:79:f0:db:da:dc:71:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42580E647D96523C34EBD7D8F6B91281804DC276
        Validity
            Not Before: Jul 24 11:20:56 2024 GMT
            Not After : Jul 23 11:25:56 2025 GMT
        Subject: CN=12724F53A3F51A1E064935F6CFA73D2B65FC363A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:fe:dc:7e:6b:6f:18:67:f5:06:88:64:65:
                    cd:fd:8f:3f:31:80:66:1b:ad:06:63:9d:ce:0e:63:
                    3e:fd:05:a4:fe:d9:b6:a3:33:bb:a2:07:36:82:53:
                    ae:ed:4a:c5:be:c3:3e:a6:13:4c:ff:0b:e9:dc:24:
                    e2:37:fc:f0:0f:fa:9b:b6:55:4c:a5:07:db:8a:84:
                    ab:af:a4:2b:42:f0:fc:b9:82:9d:e5:df:ff:05:76:
                    9b:bb:24:9a:2c:b8:c2:38:86:6c:e0:82:e2:68:34:
                    f8:5f:10:f3:24:32:a9:5f:ba:c1:59:63:fb:7f:be:
                    bd:ee:76:50:0c:6a:4b:22:4c:96:ad:2b:cc:ee:20:
                    46:70:0d:2d:07:26:8d:ac:4c:b5:d6:93:5a:07:68:
                    d4:bb:2a:a9:c3:99:87:12:bd:bf:56:b2:64:19:c4:
                    78:2f:0c:60:75:e1:0c:00:b6:85:5a:b8:b0:9f:24:
                    44:0f:aa:81:7b:52:75:69:12:fd:bc:4d:e3:5c:84:
                    64:32:ab:9f:5a:f0:89:74:7b:21:d8:a3:71:ff:0d:
                    63:25:61:fd:43:29:00:fa:98:56:4f:5f:22:92:87:
                    4b:fb:6b:62:fa:ab:99:62:6b:ef:0e:32:46:9d:60:
                    90:57:2a:89:4f:b5:03:d3:28:5c:96:d9:a7:ea:05:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:72:4F:53:A3:F5:1A:1E:06:49:35:F6:CF:A7:3D:2B:65:FC:36:3A
            X509v3 Authority Key Identifier:
                keyid:42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/42580E647D96523C34EBD7D8F6B91281804DC276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42580E647D96523C34EBD7D8F6B91281804DC276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138332e302f32342d3332203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:3d:f0:d8:72:c2:6b:4d:06:04:5e:dc:60:8f:68:da:be:
         72:c4:a5:b0:de:61:aa:cd:c5:4a:a4:39:91:15:4d:fe:bc:06:
         eb:04:7f:48:ff:33:99:15:c1:71:47:35:14:54:37:d0:01:4e:
         33:63:28:9c:90:fa:0c:80:49:03:5e:a4:86:44:2e:15:e3:5b:
         e2:79:ea:c2:17:32:3a:2b:f2:ae:a2:9b:54:97:08:20:fb:52:
         95:7b:72:3f:9e:8d:48:1d:3a:cc:3e:88:0c:bd:d3:bf:26:3b:
         6d:6d:5e:0c:d0:6e:00:05:f5:af:87:73:cc:13:31:8e:9b:bd:
         c9:24:4f:ab:77:d6:3b:14:2a:b9:61:8c:e6:65:4c:ec:87:85:
         2e:77:3f:f2:a5:0b:8f:44:3d:fb:19:aa:00:de:0d:17:c7:28:
         5f:5d:d6:8c:3a:0c:62:93:df:7c:e1:d2:37:cc:2f:0b:23:9a:
         50:55:df:cc:46:e2:2a:45:d3:ff:c0:df:03:dc:5a:9e:2f:9e:
         39:9f:9f:9a:92:77:2b:cc:42:de:0d:af:6d:f3:8c:18:59:fa:
         3f:c7:74:ea:c6:a5:40:67:f3:46:a2:a4:94:96:d6:c4:79:77:
         02:7e:07:d8:91:95:22:98:e4:b9:22:07:41:b0:8d:8d:c0:f3:
         b1:a6:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 16:08:15 2024 by rpki-client on console-fra.rpki-client.org