Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32322d3232203d3e20323639353931.roa
File:                     34352e3138392e3134302e302f32322d3232203d3e20323639353931.roa (raw, json)
Hash identifier:          8M+5jVS0qNXm6Q7hQtvARDzJe6d13W5b03gZyww48RI=
Subject key identifier:   2D:2E:96:F5:1B:85:00:13:2C:E2:DF:28:08:DB:73:77:C9:C6:E5:5D
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       50BC3F3B9C11DE7108BD1DE7552B42E4AD85A6DB
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32322d3232203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:00 +0000
ROA not before:           Thu 09 May 2024 13:28:00 +0000
ROA not after:            Thu 08 May 2025 13:33:00 +0000
asID:                     269591
IP address blocks:        45.189.140.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bc:3f:3b:9c:11:de:71:08:bd:1d:e7:55:2b:42:e4:ad:85:a6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:00 2024 GMT
            Not After : May  8 13:33:00 2025 GMT
        Subject: CN=2D2E96F51B8500132CE2DF2808DB7377C9C6E55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:3f:c5:e3:7f:00:f6:b6:c5:17:4e:22:3e:
                    cc:c4:9a:6c:9d:d1:c6:d5:3a:56:c3:74:cc:a2:b8:
                    78:31:03:c1:68:96:4e:53:00:49:05:65:d4:6d:94:
                    cf:02:e6:ab:f2:bf:81:cf:17:4d:9c:68:6c:1b:ae:
                    f7:86:0e:74:48:68:98:d6:58:35:e4:8c:1e:8a:10:
                    bb:a1:f7:ac:af:46:ab:fb:10:36:bc:60:98:f8:71:
                    d7:1d:bf:db:a8:a5:bd:f6:55:6c:01:09:a8:c0:8b:
                    6e:33:f3:39:54:80:21:42:8f:e8:0a:9d:4b:7e:7f:
                    7e:eb:46:67:2d:cb:da:f9:e1:34:73:2d:13:23:f0:
                    cb:12:c9:5e:63:2f:84:be:0c:24:4c:e8:f8:6c:ad:
                    28:fa:34:17:66:ff:3a:ea:19:26:5c:fc:85:59:a7:
                    49:a2:b2:c0:e5:23:33:a9:21:e5:4d:76:52:ba:19:
                    20:f9:c7:e9:f2:cf:5e:c9:f8:52:dd:01:ea:bf:d5:
                    f5:b4:be:02:5b:4a:21:75:c2:6f:cb:b2:9e:9b:d0:
                    88:9e:94:5d:d7:28:4c:4b:1b:53:2b:87:45:0a:b6:
                    8d:e4:28:59:12:c5:8f:47:4d:87:cc:2b:d2:2f:fb:
                    f5:ce:0c:45:95:df:63:70:89:df:9d:63:2b:e1:87:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2E:96:F5:1B:85:00:13:2C:E2:DF:28:08:DB:73:77:C9:C6:E5:5D
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32322d3232203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:00:55:7a:ba:56:2a:35:b0:5b:11:3a:b5:fb:35:27:c2:32:
         b2:66:17:ea:a7:75:c1:08:c1:11:0a:a8:22:4d:b7:b8:d7:d1:
         82:dd:36:5a:1c:2e:33:4b:56:ad:9c:a3:d4:89:0f:76:93:0c:
         cd:5c:71:1b:cf:be:9a:69:66:fc:08:c3:22:84:b5:ca:93:fc:
         99:71:47:ee:a7:18:77:a1:57:88:89:b8:38:bd:d6:16:00:f7:
         c2:82:7d:0e:c6:6a:c5:9e:9b:ad:b2:79:f2:09:bc:73:96:da:
         ec:e8:52:ba:2f:a3:60:25:03:70:64:97:89:ef:13:87:c3:f2:
         d0:98:77:82:05:e9:67:69:3c:13:96:47:86:8e:05:14:45:ac:
         ef:f2:b2:c5:74:9b:f4:94:ef:a7:2e:67:a5:b6:96:3c:69:1b:
         99:21:bc:b6:b5:a3:01:00:5b:43:2f:b2:08:32:a4:59:d9:d3:
         1d:b7:27:55:d6:b3:38:8f:49:76:99:f2:66:fb:7d:b9:fa:d6:
         f6:c5:85:1c:b3:fc:72:3a:3a:3e:81:28:dc:24:5f:7f:da:7a:
         1a:33:b9:5a:85:85:b6:1a:5d:eb:f6:ef:c8:55:83:f2:f2:8b:
         be:59:2d:c5:4b:e6:53:2d:61:44:21:c4:d0:3c:a1:b3:fa:c8:
         b5:93:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org