Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa
File:                     34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          phGIeTUEiNK6YtnAUsbfSrBRrjKGIsnVRajTEDm1ack=
Subject key identifier:   AD:62:2D:B1:97:EA:CC:1E:54:76:6E:A2:3D:3A:F2:74:E8:B6:6A:4E
Certificate issuer:       /CN=69FFE860858DE937FD8B0BA5FB8EF9A487532749
Certificate serial:       1E7259BBC8B103B14F2DAE0C32187C1ADAD6F8BB
Authority key identifier: 69:FF:E8:60:85:8D:E9:37:FD:8B:0B:A5:FB:8E:F9:A4:87:53:27:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FFE860858DE937FD8B0BA5FB8EF9A487532749.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa
Signing time:             Mon 24 Jun 2024 12:14:13 +0000
ROA not before:           Mon 24 Jun 2024 12:09:13 +0000
ROA not after:            Mon 23 Jun 2025 12:14:13 +0000
asID:                     268556
IP address blocks:        45.163.172.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:72:59:bb:c8:b1:03:b1:4f:2d:ae:0c:32:18:7c:1a:da:d6:f8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FFE860858DE937FD8B0BA5FB8EF9A487532749
        Validity
            Not Before: Jun 24 12:09:13 2024 GMT
            Not After : Jun 23 12:14:13 2025 GMT
        Subject: CN=AD622DB197EACC1E54766EA23D3AF274E8B66A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:4e:71:2a:c1:80:bb:5c:50:ac:e1:d0:55:
                    c0:16:ea:eb:bc:79:e9:42:f6:11:c0:15:a0:5c:b7:
                    18:da:a3:5d:90:a3:3b:e1:6f:ff:0d:93:6d:8c:d5:
                    1d:b9:3a:d7:92:ed:6f:90:66:18:0a:d5:38:25:0b:
                    b6:89:fc:35:e6:07:7d:c1:bb:2a:5d:4b:0c:7c:44:
                    04:77:b3:69:e1:9f:c1:01:bc:04:7e:07:75:9f:34:
                    e4:07:aa:13:d4:07:22:18:7a:c0:c7:7a:68:9d:82:
                    ef:eb:67:4d:39:f6:95:0a:87:3c:1b:47:ae:c9:b3:
                    a1:5c:bb:9f:4b:0b:6e:d4:ba:71:2e:05:28:75:8e:
                    26:5c:2e:87:6d:37:02:c8:81:6d:ea:da:5c:5c:e8:
                    82:e8:b5:6b:47:c8:9c:e7:c6:8a:f4:31:26:90:51:
                    99:73:55:23:cf:00:c5:a2:92:c1:7d:30:7d:1f:cc:
                    f4:12:e5:e1:a9:a8:17:57:c1:75:a4:cf:87:07:30:
                    7e:d8:2b:24:04:e4:61:a3:2c:e3:ab:c3:34:16:fb:
                    c2:73:0f:c2:07:7b:b2:1a:d6:0c:65:41:17:1d:61:
                    b4:1e:1b:fc:a9:fa:9f:b0:56:7a:88:83:55:90:d2:
                    3d:4e:39:84:d0:ca:25:fc:2b:40:be:76:71:bf:01:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:62:2D:B1:97:EA:CC:1E:54:76:6E:A2:3D:3A:F2:74:E8:B6:6A:4E
            X509v3 Authority Key Identifier:
                keyid:69:FF:E8:60:85:8D:E9:37:FD:8B:0B:A5:FB:8E:F9:A4:87:53:27:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/69FFE860858DE937FD8B0BA5FB8EF9A487532749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FFE860858DE937FD8B0BA5FB8EF9A487532749.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:4a:64:d8:5a:48:d2:ce:86:bc:be:fe:0f:7b:98:12:d5:
         55:b9:54:ec:fa:13:f0:c1:de:a0:1b:42:91:e0:87:68:b2:8d:
         80:3a:57:ca:0c:53:3d:ab:57:58:cf:ac:97:19:55:9a:24:53:
         06:85:84:1f:8e:40:c3:cc:f5:7b:3f:44:df:ca:44:42:0c:8e:
         73:4e:dd:61:62:03:29:ce:bd:bf:4b:8a:92:e1:ba:85:90:2f:
         be:3b:5d:f6:73:4d:e0:3e:e6:5a:79:a8:a6:74:a4:d5:7c:12:
         b2:67:4e:60:4a:d5:fb:b6:43:e8:42:f9:5d:2f:67:44:ce:64:
         98:b0:95:65:5e:7b:66:81:16:51:30:8b:5e:dc:ec:70:d3:df:
         7d:91:22:bf:0f:eb:af:24:29:d6:ec:65:e0:55:42:3f:6b:e0:
         6e:43:b1:f0:8a:15:e0:a7:04:9f:f8:f8:16:c7:d2:46:e2:a0:
         1f:ce:be:c5:29:0b:33:c3:4f:12:27:b8:ed:fa:aa:03:fa:88:
         d1:91:70:c7:cd:67:4e:b3:1a:ec:7a:be:56:13:a0:ff:13:07:
         25:69:46:43:0b:31:a4:55:2f:ee:e0:fa:7f:fc:4d:2a:53:01:
         8f:15:ea:34:55:bf:ff:a5:a4:58:fa:56:85:39:2f:24:6c:0f:
         86:d0:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 18:30:25 2024 by rpki-client on console-fra.rpki-client.org