Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa
File:                     34352e3233302e38342e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          TYfkpPiaeb9Vm7h4UYvf7b1lzOrsZPoxuKRxI2ElT6g=
Subject key identifier:   AE:C3:C8:53:6F:02:AC:E3:53:90:5B:12:3E:C7:4D:FE:4D:17:E3:36
Certificate issuer:       /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial:       263F083687B5AF5CEB4CFD56B9B80A1465BE4490
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa
Signing time:             Mon 24 Apr 2023 14:55:28 +0000
ROA not before:           Mon 24 Apr 2023 14:50:28 +0000
ROA not after:            Mon 22 Apr 2024 14:55:28 +0000
asID:                     269359
IP address blocks:        45.230.84.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3f:08:36:87:b5:af:5c:eb:4c:fd:56:b9:b8:0a:14:65:be:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
        Validity
            Not Before: Apr 24 14:50:28 2023 GMT
            Not After : Apr 22 14:55:28 2024 GMT
        Subject: CN=AEC3C8536F02ACE353905B123EC74DFE4D17E336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:b8:2f:90:a3:c3:e8:34:03:d1:e0:a6:c5:
                    2d:d7:03:c0:b0:e2:a1:24:a7:d2:a3:f0:9e:c2:d8:
                    06:07:da:49:4c:61:09:e3:0d:a3:76:23:33:95:60:
                    6f:f7:69:a4:18:58:03:34:28:e6:ae:23:6f:8e:c8:
                    18:65:a7:f3:3d:62:9f:8a:64:c3:a6:a1:42:c8:eb:
                    62:1e:ae:70:59:c9:d0:33:46:b8:59:6c:2e:51:dd:
                    30:e4:d9:da:a4:a0:7b:e6:08:49:b1:d8:2e:66:46:
                    cb:9a:4c:65:63:41:96:82:2c:11:dd:30:e8:6a:4f:
                    6e:e1:cf:e7:fd:fb:c5:44:f0:85:30:8d:b8:8f:79:
                    eb:4b:29:fd:17:55:40:3b:d6:a9:57:4a:d5:c1:b1:
                    bc:68:47:dc:e0:55:f0:d2:57:db:a6:ff:ab:4e:4a:
                    64:0b:fc:4e:6a:9b:23:9a:c8:54:da:36:dd:48:f9:
                    36:f2:71:79:d1:88:37:b3:8e:00:20:ad:97:a1:f4:
                    e5:94:c9:78:fb:07:f4:1f:63:46:6d:8a:f5:b9:37:
                    db:8c:42:6f:af:4a:c0:58:bb:9c:1e:81:73:ab:15:
                    27:d8:1b:0f:b7:3e:9a:bd:7c:0a:82:9b:45:a8:d7:
                    28:62:af:f5:ca:b9:c2:ca:68:3c:23:b8:42:36:5d:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C3:C8:53:6F:02:AC:E3:53:90:5B:12:3E:C7:4D:FE:4D:17:E3:36
            X509v3 Authority Key Identifier:
                keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:fd:f2:20:ff:cd:80:b3:60:62:35:3e:62:2d:54:81:b8:
         c5:da:26:a8:6c:0c:7f:4e:81:ea:56:88:59:91:bd:0b:91:15:
         a1:2c:08:6c:62:a0:7d:88:eb:5b:6c:c5:33:8e:64:fa:b1:6b:
         36:b1:76:92:c1:9b:d3:15:b0:6b:b0:9b:94:4a:49:4c:99:2f:
         ec:d8:50:f9:60:49:1d:84:71:76:56:1b:de:d9:74:d1:e6:d8:
         0a:02:ac:7f:d5:e4:c4:93:ac:28:65:0a:bf:e0:83:d1:b3:70:
         47:96:51:04:9a:b8:e3:27:cc:c6:4a:eb:c7:96:3a:0c:e4:6c:
         b6:64:f0:3f:da:82:21:45:aa:5c:51:02:c4:ba:0f:01:6e:c0:
         ed:05:67:db:a2:28:eb:d2:4b:10:35:e3:70:c5:7c:e5:78:35:
         85:b7:62:1e:5e:30:b6:de:37:f7:85:17:6c:9c:f4:e0:3a:a3:
         c1:74:79:61:80:ce:63:38:97:8f:d4:f9:de:6f:0c:15:de:e2:
         91:60:fc:3c:a5:13:93:2f:99:f6:2f:ae:b1:43:d8:be:19:ae:
         aa:8e:52:05:74:b0:88:6e:a7:c8:39:16:b2:ac:52:99:53:28:
         0f:9e:45:7e:9c:f4:56:20:32:11:d5:21:60:9d:1b:da:a5:9b:
         35:87:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 14:50:50 2024 by rpki-client on console-ams.rpki-client.org