Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32332d3233203d3e20323633323932.roa
File:                     34352e3136362e38362e302f32332d3233203d3e20323633323932.roa (raw, json)
Hash identifier:          F1pxBz8SHyixVodY6m0gqL3T7uuiHQWk+JecBp56CSI=
Subject key identifier:   E6:74:FE:07:7E:A3:6E:E9:02:2C:22:03:A1:38:B3:E2:A6:F1:64:7E
Certificate issuer:       /CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
Certificate serial:       7C1654C74E2C69C019BA30A2A3344EC109D9CA01
Authority key identifier: E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32332d3233203d3e20323633323932.roa
Signing time:             Sat 18 May 2024 02:36:08 +0000
ROA not before:           Sat 18 May 2024 02:31:08 +0000
ROA not after:            Sat 17 May 2025 02:36:08 +0000
asID:                     263292
IP address blocks:        45.166.86.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:16:54:c7:4e:2c:69:c0:19:ba:30:a2:a3:34:4e:c1:09:d9:ca:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
        Validity
            Not Before: May 18 02:31:08 2024 GMT
            Not After : May 17 02:36:08 2025 GMT
        Subject: CN=E674FE077EA36EE9022C2203A138B3E2A6F1647E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:f9:22:e8:b9:45:4f:32:df:04:14:58:5b:
                    be:29:39:06:d0:88:19:54:98:74:5f:ea:2d:67:a9:
                    59:19:71:3d:c6:5a:b5:d8:08:07:0b:9e:88:45:bc:
                    7c:52:1d:13:8b:a3:a9:96:61:7b:29:0f:fc:05:2f:
                    30:05:33:c3:0b:9f:f8:a4:8d:9e:d4:d3:e4:d6:1a:
                    cc:f0:74:f2:a6:b7:0a:4a:56:85:57:44:04:13:2c:
                    48:1c:00:ee:bf:01:43:78:98:7b:3e:ac:3d:39:3a:
                    18:e5:ff:cc:4e:e8:2e:2f:d9:bb:6a:42:49:31:48:
                    dd:e3:10:aa:eb:7a:3e:6b:af:6f:ca:cf:b9:6e:c5:
                    72:34:8a:70:0d:fa:61:90:b4:7b:5a:66:8b:de:87:
                    e2:f7:37:2d:13:23:2c:9c:3a:e9:d3:f3:10:05:a6:
                    c7:a5:88:e3:3c:ab:df:1a:bb:38:be:ad:fb:e8:80:
                    62:ef:b8:b0:36:e4:51:f0:a4:f9:fa:dc:ac:3c:1c:
                    8f:83:2e:34:47:b9:b8:e7:38:08:46:6b:ce:ea:46:
                    43:51:29:32:35:86:a1:dc:4d:04:d0:14:51:25:32:
                    e0:4c:33:61:6e:a5:34:25:50:86:32:db:91:7d:ed:
                    51:93:01:5a:db:2f:34:49:b8:4e:a2:c3:87:d8:45:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:74:FE:07:7E:A3:6E:E9:02:2C:22:03:A1:38:B3:E2:A6:F1:64:7E
            X509v3 Authority Key Identifier:
                keyid:E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32332d3233203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:15:b0:17:e6:9f:d2:15:68:10:e1:d5:72:1f:25:c3:a7:
         11:7a:08:e5:b8:ee:f8:ce:44:ef:9f:62:51:de:28:48:2e:cc:
         87:fd:65:d6:4d:39:a1:94:ee:15:6e:55:94:a5:1d:c8:7b:22:
         84:0c:ae:bb:70:8a:25:36:6f:c0:d7:28:1a:e9:9b:b1:21:a3:
         6f:ef:d5:90:5e:d7:9f:bf:7d:4c:14:17:c4:37:59:27:24:a4:
         79:c3:7b:0e:94:c1:fb:f2:fd:71:dc:64:21:9c:a2:1a:bb:15:
         de:7c:4f:3a:f9:ad:91:1b:95:a2:fa:3a:0b:ec:06:c4:b0:64:
         a6:b1:1a:c7:8b:66:4a:b8:67:4e:b4:0b:c7:df:a0:ce:6f:58:
         3d:2b:06:57:f0:a0:15:45:b3:08:44:b0:7c:22:95:d7:fb:a0:
         36:c0:c5:31:9e:54:0b:ba:a0:03:1a:1d:61:1f:97:78:7b:89:
         99:5d:f8:f9:b8:54:e0:4a:6a:09:ae:e9:ec:30:2c:7e:f4:e9:
         33:07:ef:c2:8c:8f:81:75:0e:33:9d:7c:9c:b2:2d:cb:a2:3a:
         29:05:15:28:39:de:f5:6d:a8:49:11:cb:77:b2:d3:82:82:6e:
         fc:5f:af:52:af:e6:1d:1a:17:fb:61:ac:58:27:9f:6b:b5:d8:
         60:a5:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 11:30:01 2024 by rpki-client on console-fra.rpki-client.org