Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32332d3233203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          0MKIQiPit/miC2VupflEeZyKRGFX8XleD/80ew9ec7I=
Subject key identifier:   7B:E2:BD:FA:F8:47:49:BE:E1:FE:F6:91:58:D9:D7:6C:9C:56:1B:78
Certificate issuer:       /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial:       4F7B91C6AF4325790DF3132EE9E96C68D38EA9DF
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32332d3233203d3e20323639333539.roa
Signing time:             Mon 24 Apr 2023 14:54:44 +0000
ROA not before:           Mon 24 Apr 2023 14:49:44 +0000
ROA not after:            Mon 22 Apr 2024 14:54:44 +0000
asID:                     269359
IP address blocks:        45.184.68.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7b:91:c6:af:43:25:79:0d:f3:13:2e:e9:e9:6c:68:d3:8e:a9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
        Validity
            Not Before: Apr 24 14:49:44 2023 GMT
            Not After : Apr 22 14:54:44 2024 GMT
        Subject: CN=7BE2BDFAF84749BEE1FEF69158D9D76C9C561B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:51:79:b6:b7:71:4a:9b:27:be:e9:b6:bb:
                    a3:c1:3a:a0:1d:e8:e2:5e:fd:65:88:aa:71:ab:8a:
                    0c:4f:14:22:7f:96:8c:8a:f1:a0:25:89:7e:26:f1:
                    6c:63:54:c1:18:50:fe:20:fb:0c:c3:18:cb:03:bd:
                    55:52:c2:ca:46:a5:3a:7f:4b:28:6d:e5:84:42:80:
                    e0:c1:77:20:57:e6:63:4a:56:e0:e9:ad:16:62:e9:
                    8c:62:65:51:f2:0e:93:cb:c7:c1:74:b8:fb:f9:1a:
                    8c:9f:64:9f:27:dc:97:dc:80:ed:be:86:5b:df:6d:
                    23:72:54:ed:4c:01:25:46:e7:64:ce:08:49:ae:c2:
                    64:3d:d9:fb:12:f8:8c:bc:8c:3c:3f:6a:9b:97:b7:
                    f0:7c:ce:2c:0c:a0:6a:fc:5a:f5:b8:fc:a5:5e:20:
                    d6:fc:ca:7f:1d:36:b8:59:bc:cf:b3:53:bf:89:45:
                    ca:0a:c7:cc:67:21:83:8f:73:3e:53:69:4b:49:aa:
                    3b:23:ac:32:33:23:36:78:52:55:00:a6:b3:d9:52:
                    e4:4c:03:7e:74:d9:90:6b:c9:6b:49:a4:78:87:24:
                    ba:73:11:39:f5:02:4a:d0:01:e2:3c:5d:29:ba:7d:
                    6b:a4:ad:98:30:45:79:23:43:7a:80:c5:35:aa:57:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E2:BD:FA:F8:47:49:BE:E1:FE:F6:91:58:D9:D7:6C:9C:56:1B:78
            X509v3 Authority Key Identifier:
                keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:d0:4d:f7:ce:b7:49:f8:0d:15:f9:61:28:e1:0e:86:51:
         50:c9:fa:f9:60:10:b4:ba:03:ef:b6:d0:b5:f1:7d:08:85:2e:
         c8:cd:4a:d4:eb:ff:c0:84:58:6d:2b:6b:8b:f1:46:aa:fe:98:
         e4:af:17:b8:fe:53:37:5e:60:f5:f7:06:a8:e5:85:de:13:76:
         5f:5a:9e:d6:ab:e2:62:44:14:f9:5e:a9:a6:b5:ad:83:94:e2:
         a1:e7:f4:f0:e3:54:63:2b:5b:54:b2:d4:bc:ab:c8:3b:b1:06:
         a6:44:d2:75:d2:d2:7d:fd:44:36:1c:3f:2d:25:e9:c3:3f:20:
         70:b9:88:b8:03:97:a6:5a:68:d1:cd:32:b6:93:63:5c:05:5b:
         0a:d0:4f:88:6a:cf:8e:6f:e8:ec:59:ca:05:56:80:72:28:3f:
         7d:16:09:44:e8:2b:4e:5e:af:0a:5f:01:e7:95:1b:68:01:d1:
         c2:bc:d1:59:8b:5c:ec:94:26:81:eb:59:5c:f7:84:d3:df:6b:
         6f:96:93:d3:93:25:da:0d:4a:ae:1f:f7:dc:6a:e0:2d:df:30:
         37:53:6d:f4:3f:3b:eb:4f:e3:d9:75:47:97:95:a5:84:6c:83:
         8e:de:60:50:5a:dc:04:dd:33:cd:96:df:a5:18:21:d8:be:d6:
         87:51:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 15:07:24 2024 by rpki-client on console-fra.rpki-client.org