Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32332d3233203d3e20323639353931.roa
File:                     34352e3138392e3134302e302f32332d3233203d3e20323639353931.roa (raw, json)
Hash identifier:          +pHVOXSu0T6hTX+C0vo10GUL9kuQcgD0qW9XFjvd41s=
Subject key identifier:   F9:FC:EF:54:47:C0:85:56:C9:BA:DB:95:B3:52:A4:E7:31:6F:56:BB
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       6663B733DB58EB83C3E7FE6F460F2D8FA8387EE2
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32332d3233203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:25 +0000
ROA not before:           Thu 09 May 2024 13:28:25 +0000
ROA not after:            Thu 08 May 2025 13:33:25 +0000
asID:                     269591
IP address blocks:        45.189.140.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:63:b7:33:db:58:eb:83:c3:e7:fe:6f:46:0f:2d:8f:a8:38:7e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:25 2024 GMT
            Not After : May  8 13:33:25 2025 GMT
        Subject: CN=F9FCEF5447C08556C9BADB95B352A4E7316F56BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:68:03:51:65:92:80:c9:d5:75:c2:77:80:
                    e6:3b:9f:8d:67:a0:ed:95:da:6a:5a:2b:68:ba:0c:
                    b1:f5:75:67:0b:5f:4b:1e:e1:88:f5:6d:f5:b3:e5:
                    7b:99:0d:b8:cc:e5:9c:0f:15:e1:69:7d:70:90:1d:
                    1c:17:fb:75:13:53:07:64:db:b7:79:8b:48:68:1a:
                    0e:86:8b:15:9a:ec:56:17:52:a5:69:59:95:40:45:
                    01:0d:7a:5b:2a:8c:a8:e3:6f:fa:1d:48:4c:6d:d7:
                    58:55:b9:af:24:1b:25:fd:0e:76:1d:78:58:a4:e4:
                    f3:d0:15:42:ac:d4:ec:27:65:96:13:c1:c9:46:9f:
                    fe:eb:04:24:c7:2f:1f:70:15:12:4a:25:eb:d1:d6:
                    ce:24:66:a3:ce:97:07:d2:b9:25:9c:b9:42:cd:95:
                    11:ff:ba:aa:f4:94:33:26:73:78:fb:27:c0:25:3b:
                    cf:17:78:cf:5c:e9:7e:f5:fb:9f:78:50:33:98:3a:
                    12:4f:e0:8e:57:7e:fb:a7:9f:87:48:79:46:3e:c0:
                    b6:52:1c:0e:94:89:39:46:cb:99:d1:ad:ff:d9:a4:
                    23:61:a7:8d:0a:c6:f0:64:fc:9d:4b:08:5c:6b:d3:
                    ab:a1:5a:ae:19:88:80:88:3b:a6:87:8d:9b:49:14:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FC:EF:54:47:C0:85:56:C9:BA:DB:95:B3:52:A4:E7:31:6F:56:BB
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32332d3233203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:40:ad:c1:ef:db:4a:c3:0b:4a:35:d6:f1:c4:70:b2:35:93:
         2f:fd:6f:82:f3:10:de:2d:16:ec:d8:fc:c1:5d:ea:fd:2e:18:
         1e:9a:e3:1e:f4:01:dc:d8:12:26:f5:c9:8d:72:cb:1b:82:3d:
         9c:0b:fd:37:97:f1:ca:d7:26:da:fd:bf:94:70:e8:6c:35:c3:
         f8:9f:53:b6:50:8c:bf:aa:23:36:4b:4f:0f:9c:8d:19:bb:b2:
         4e:9b:41:bf:bc:ac:a4:2b:45:83:c8:e3:6e:b7:db:77:53:9d:
         03:69:bf:b5:41:0a:75:56:0d:d4:78:3e:6d:1c:3a:9d:3c:b1:
         36:86:39:47:ec:90:59:58:fb:5b:cb:c8:cf:2c:74:80:4f:ea:
         f3:7b:67:69:14:11:0c:9a:55:f5:bb:e4:99:55:84:41:cc:a8:
         a0:d1:e7:4b:d8:87:90:48:53:a2:ed:87:eb:c8:34:6b:fb:0f:
         93:18:64:53:f4:e3:63:eb:d6:f9:bc:26:5c:98:51:70:1a:25:
         3f:13:c0:d0:31:6b:0e:34:c0:4c:61:64:94:4d:96:d3:7b:0e:
         2f:a6:de:da:80:b5:c2:e3:a8:6d:08:25:f9:61:a2:f9:2e:fc:
         0b:b0:30:1b:c9:af:97:b5:8a:2e:38:d4:4a:87:26:80:e8:d5:
         f1:fe:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org