Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134312e302f32342d3234203d3e20323639353931.roa
File:                     34352e3138392e3134312e302f32342d3234203d3e20323639353931.roa (raw, json)
Hash identifier:          yuFNoHJORlH/pmuoTyc0p7hBvjE4XAPM0n/wQRtfg78=
Subject key identifier:   0C:EF:78:17:FE:5A:67:E1:53:16:BD:41:B9:02:A0:1D:D0:98:5C:27
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       63B1D2EAE8B8CC90F72C73DD326CCC0700C3F84F
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134312e302f32342d3234203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:25 +0000
ROA not before:           Thu 09 May 2024 13:28:25 +0000
ROA not after:            Thu 08 May 2025 13:33:25 +0000
asID:                     269591
IP address blocks:        45.189.141.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:d2:ea:e8:b8:cc:90:f7:2c:73:dd:32:6c:cc:07:00:c3:f8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:25 2024 GMT
            Not After : May  8 13:33:25 2025 GMT
        Subject: CN=0CEF7817FE5A67E15316BD41B902A01DD0985C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:3b:43:b1:b9:de:32:01:5b:c1:93:b3:df:
                    f0:e3:5a:49:b4:9e:5c:d4:d4:2b:53:39:d9:f8:06:
                    4a:46:c3:9c:b4:e4:b5:0f:04:3b:f4:32:07:ad:d2:
                    5a:f6:e8:6c:0b:16:46:3f:6c:33:5e:fa:58:9f:d3:
                    15:0e:7a:69:62:db:19:5f:bf:fc:59:a4:8a:5b:a4:
                    48:3c:9d:8b:69:ea:64:43:b3:90:7c:3f:22:5d:aa:
                    83:8a:9a:af:3d:fe:97:c1:d8:4f:2b:b0:5a:38:8a:
                    2c:00:db:9e:68:1b:1f:a0:73:17:37:ad:49:05:99:
                    e0:bb:94:bd:f5:91:9c:65:96:06:cf:f2:6f:59:1a:
                    a0:7f:cd:f7:7e:c1:b9:c7:2b:51:61:f1:ca:31:55:
                    75:55:7b:3c:7b:08:bb:a4:55:bb:09:95:36:26:bd:
                    a3:5b:ad:bd:f2:08:fd:62:6c:01:b6:24:92:30:d3:
                    71:43:56:8e:26:5f:73:10:8c:35:74:25:97:17:51:
                    64:f9:8e:4f:a0:6f:6d:73:b8:d6:d3:cd:c4:7b:23:
                    d5:6f:4d:59:bd:7a:22:c0:22:fe:ec:dd:d3:fd:60:
                    83:f0:f7:41:41:3e:6a:35:8d:11:99:d1:f2:f2:37:
                    25:36:da:9c:b4:10:fe:57:13:fc:a3:e7:3c:06:17:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:78:17:FE:5A:67:E1:53:16:BD:41:B9:02:A0:1D:D0:98:5C:27
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134312e302f32342d3234203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:8b:cb:70:de:5b:bc:8e:bf:8c:d1:e0:2f:89:64:e6:13:
         ef:aa:f8:09:37:b8:c8:46:7d:b2:9f:67:01:5c:71:0a:65:ff:
         b7:c2:8e:5d:b0:03:5d:ef:2f:64:f6:41:6e:f8:e9:c0:88:aa:
         84:fb:f1:4d:43:3d:ad:e8:19:aa:58:2f:cf:6d:46:35:3d:cf:
         57:f3:de:ce:29:e0:51:61:25:f5:3c:00:80:0a:f4:e6:24:d4:
         d8:ea:59:0e:0c:31:e5:a4:77:14:30:9c:73:0c:71:0d:b6:1a:
         54:a5:ef:e1:45:7a:48:34:6e:74:1e:41:75:41:3d:af:3f:ff:
         8c:f9:5b:ba:27:48:84:6d:b4:27:10:4b:63:1d:ab:27:61:26:
         e6:8b:f5:c9:c1:b7:f6:d7:14:f5:f2:7b:78:d0:33:2b:7e:12:
         3b:75:21:c3:c0:2f:89:24:1a:27:57:5a:cb:09:15:69:8f:99:
         f5:6f:34:99:3d:6d:c2:a4:4c:01:e4:28:f1:f0:53:93:0e:14:
         87:16:c1:4b:01:fe:d3:bd:6a:a9:98:0d:87:16:e5:bd:04:c1:
         31:ee:8f:b2:5f:54:c4:34:87:75:8e:c2:4c:f9:00:07:4a:68:
         86:fc:62:ac:41:42:2c:55:99:83:9d:60:4e:ac:85:60:ed:f5:
         e6:7f:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 00:38:21 2024 by rpki-client on console-ams.rpki-client.org