Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/34352e342e3137382e302f32342d3332203d3e20323636343239.roa
File:                     34352e342e3137382e302f32342d3332203d3e20323636343239.roa (raw, json)
Hash identifier:          n9YZ0KjBrtFviRzcEffRMvSHApsac+KlkKiSYHfoYMQ=
Subject key identifier:   E0:0A:0B:97:4F:38:31:3B:59:FA:5B:71:D3:BD:E2:F5:FC:67:7E:4E
Certificate issuer:       /CN=B74E6A510855E6C9EDF83A8806E83DE65F3110D5
Certificate serial:       541A4212881C4D9DB53593A0869CB34D23E19A20
Authority key identifier: B7:4E:6A:51:08:55:E6:C9:ED:F8:3A:88:06:E8:3D:E6:5F:31:10:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B74E6A510855E6C9EDF83A8806E83DE65F3110D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/34352e342e3137382e302f32342d3332203d3e20323636343239.roa
Signing time:             Wed 14 Aug 2024 19:02:55 +0000
ROA not before:           Wed 14 Aug 2024 18:57:55 +0000
ROA not after:            Wed 13 Aug 2025 19:02:55 +0000
asID:                     266429
IP address blocks:        45.4.178.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1a:42:12:88:1c:4d:9d:b5:35:93:a0:86:9c:b3:4d:23:e1:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B74E6A510855E6C9EDF83A8806E83DE65F3110D5
        Validity
            Not Before: Aug 14 18:57:55 2024 GMT
            Not After : Aug 13 19:02:55 2025 GMT
        Subject: CN=E00A0B974F38313B59FA5B71D3BDE2F5FC677E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:05:dc:ce:2f:9e:e9:af:2a:63:34:8b:3b:
                    0e:72:c8:50:a0:df:3b:78:51:49:98:27:13:17:ee:
                    5e:5b:ac:8d:14:6a:22:ad:e6:81:e8:9d:82:34:60:
                    30:11:bf:23:81:bd:1b:0c:64:45:3f:c5:e6:f7:c4:
                    80:18:12:b0:eb:e5:72:67:29:25:53:59:0c:55:b3:
                    99:7a:d2:eb:87:eb:a4:90:9e:a1:21:bb:2e:59:d0:
                    8f:5c:b6:8b:d0:ce:f8:b8:d1:5f:87:c2:e5:de:ae:
                    c0:aa:66:42:32:64:45:14:8f:82:e7:d5:3f:df:34:
                    d5:61:f6:12:1b:08:a5:9a:29:95:78:f5:fc:05:b6:
                    12:21:08:d0:6c:d0:4d:34:98:1f:7c:64:93:7b:ad:
                    59:90:6c:46:fb:3f:d7:c0:f6:2a:70:79:8c:1c:1e:
                    40:08:7f:af:93:b2:09:db:ab:0c:46:c2:ed:f7:d3:
                    bb:d7:0c:82:fe:3e:c8:70:ce:41:19:d5:d3:20:e5:
                    c4:24:80:c5:c2:09:3c:73:c0:96:4f:a6:d2:57:c0:
                    57:32:e3:b8:41:1f:94:4a:59:38:2f:e5:77:13:d8:
                    0e:7c:2b:2b:ef:e7:28:0e:80:ab:98:a2:3b:89:15:
                    86:f6:f6:38:5d:4d:07:c4:83:b2:02:38:9b:60:4e:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0A:0B:97:4F:38:31:3B:59:FA:5B:71:D3:BD:E2:F5:FC:67:7E:4E
            X509v3 Authority Key Identifier:
                keyid:B7:4E:6A:51:08:55:E6:C9:ED:F8:3A:88:06:E8:3D:E6:5F:31:10:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/B74E6A510855E6C9EDF83A8806E83DE65F3110D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B74E6A510855E6C9EDF83A8806E83DE65F3110D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/34352e342e3137382e302f32342d3332203d3e20323636343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:03:0f:0e:6e:70:fe:b7:12:3f:04:10:0b:6e:0a:1a:af:
         04:09:21:cb:3a:e2:ff:0a:83:62:ac:64:6a:6e:d8:ec:0b:58:
         ca:23:12:7f:cf:cb:da:ab:fa:90:7d:51:e1:b4:27:f7:8c:98:
         52:4d:bb:fb:8c:bb:fa:62:66:a3:c9:06:8f:80:88:1a:9f:42:
         a1:f9:7e:70:69:b5:d6:51:b4:cf:11:85:b8:42:76:f9:6d:23:
         4f:42:85:85:11:65:d1:f1:d9:48:27:89:39:0c:82:63:66:35:
         80:f1:52:b4:fd:f9:7b:c8:8c:44:b8:33:aa:33:91:c5:a3:65:
         5c:28:0c:fe:fe:5f:e0:8f:49:05:3d:29:4d:76:57:b0:c3:4c:
         cc:e5:c1:c4:d3:d0:4e:92:26:2e:c4:c0:0d:cf:f4:10:7c:c2:
         96:29:d4:ec:44:96:71:06:14:92:0a:dd:4e:fd:55:37:53:87:
         cc:31:b8:83:44:3f:8f:17:6c:12:c3:4c:e8:5e:b1:b1:97:13:
         71:2b:0a:58:1e:02:f8:ba:32:f9:4d:4e:30:1e:46:af:75:fe:
         32:73:d2:cc:05:3b:bc:6b:97:8d:bc:58:96:8a:ec:17:fc:ac:
         30:c7:1e:27:e9:8a:d8:b8:8b:86:3b:49:a3:23:61:01:b8:de:
         64:46:0e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:35:29 2024 by rpki-client on console-fra.rpki-client.org