Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32342d3234203d3e20323639353931.roa
File:                     34352e3138392e3134302e302f32342d3234203d3e20323639353931.roa (raw, json)
Hash identifier:          ugfhMiyTsTX5BGunAaRg7RHl3rirQaFGRaXKd17F7NE=
Subject key identifier:   35:3A:3B:1F:9B:DB:BD:88:5E:29:05:35:52:C4:86:39:2D:1C:B4:FC
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       0452BF8F15AD7970FDCFA322E2CC1ED42170ADB2
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32342d3234203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:25 +0000
ROA not before:           Thu 09 May 2024 13:28:25 +0000
ROA not after:            Thu 08 May 2025 13:33:25 +0000
asID:                     269591
IP address blocks:        45.189.140.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:52:bf:8f:15:ad:79:70:fd:cf:a3:22:e2:cc:1e:d4:21:70:ad:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:25 2024 GMT
            Not After : May  8 13:33:25 2025 GMT
        Subject: CN=353A3B1F9BDBBD885E29053552C486392D1CB4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:af:bb:95:26:9b:e7:27:7c:34:d7:99:85:
                    24:20:0a:75:ea:b5:84:60:5e:39:6b:b5:02:1a:8c:
                    51:a6:a0:23:99:da:1d:3a:d4:92:42:4d:de:44:90:
                    49:99:61:e5:53:9c:20:d9:4c:2b:79:d5:1a:00:a8:
                    30:a7:50:52:d4:49:c5:0c:2a:4d:9f:bf:83:9d:98:
                    86:fc:61:44:a9:b7:d2:54:a4:2f:95:cd:c1:4a:be:
                    69:33:d4:ea:96:4b:5d:05:32:7d:fb:3e:7c:c6:66:
                    94:8f:63:25:ac:3c:2d:0a:45:de:5f:2d:b9:08:32:
                    f2:ff:85:8d:7e:83:a2:a8:0e:76:c2:56:a8:ca:1e:
                    8f:f6:d0:64:c0:c2:b5:a2:35:04:9b:03:2e:0f:66:
                    92:20:49:d7:a2:ca:d3:38:28:2b:64:f6:8c:13:1a:
                    a4:c0:94:94:9d:2a:a5:47:59:7c:3e:44:bd:d6:61:
                    3f:14:f5:fc:b8:4f:26:5e:8b:07:db:91:1f:e5:87:
                    c7:d9:be:f6:39:2e:26:da:89:cd:dd:49:a1:58:a8:
                    7a:9d:72:d6:c4:5f:da:33:0c:df:99:ad:7c:4b:f2:
                    8a:ab:f3:56:49:81:ea:f4:ca:e2:12:b5:10:a8:25:
                    c3:07:15:72:cc:6e:53:9b:a2:05:65:97:0c:e3:82:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3A:3B:1F:9B:DB:BD:88:5E:29:05:35:52:C4:86:39:2D:1C:B4:FC
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134302e302f32342d3234203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:50:7e:3f:ec:c4:9f:29:fa:62:ca:73:46:9d:5d:10:83:
         67:b4:aa:71:fd:59:3f:21:75:dd:7c:df:c6:23:57:16:14:68:
         5c:33:90:63:2e:82:70:31:a5:79:a3:4a:43:2a:35:9a:9e:80:
         bc:5c:01:fc:ac:6a:fd:2e:7d:5c:8a:d7:30:f9:19:69:2b:dd:
         28:16:e4:50:87:87:b8:63:bb:8f:82:e0:be:6a:60:f8:d0:a9:
         9f:c9:65:ff:6a:50:bc:59:37:86:18:44:f2:96:e6:c4:31:64:
         5b:15:9f:ae:c7:a5:db:14:c5:8d:46:3c:a1:af:cb:22:39:a0:
         a8:6a:bc:ba:16:d4:a1:d6:b8:0b:39:4b:fc:71:50:aa:00:32:
         ea:97:8f:15:39:20:d9:99:ef:be:65:53:0b:86:44:74:96:46:
         cf:0f:1d:b7:8c:3e:2c:f8:3d:c6:2a:d1:b0:73:e3:0d:55:6a:
         3e:05:12:93:6c:22:3c:b2:13:6f:ff:c9:73:1e:e2:de:b1:20:
         ce:27:38:4c:21:fc:ce:e6:23:7d:38:68:f2:72:a9:23:41:51:
         e3:33:4d:27:a0:df:1c:19:15:88:0a:37:09:03:d3:9b:81:41:
         82:cf:17:50:fc:5c:4a:b8:16:89:87:20:d1:fe:78:18:af:88:
         23:b9:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org