Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134322e302f32332d3233203d3e20323639353931.roa
File:                     34352e3138392e3134322e302f32332d3233203d3e20323639353931.roa (raw, json)
Hash identifier:          tz73pLiipSPdvDAmfQSJi9Tjd2UVQB5CV8wmBIsuWMo=
Subject key identifier:   9F:78:7E:76:8B:71:35:63:40:D2:15:F9:08:26:3F:D4:4F:61:4D:77
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       0B959D275AA95428922CDE125EC857BCBC5CD25F
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134322e302f32332d3233203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:26 +0000
ROA not before:           Thu 09 May 2024 13:28:26 +0000
ROA not after:            Thu 08 May 2025 13:33:26 +0000
asID:                     269591
IP address blocks:        45.189.142.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:95:9d:27:5a:a9:54:28:92:2c:de:12:5e:c8:57:bc:bc:5c:d2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:26 2024 GMT
            Not After : May  8 13:33:26 2025 GMT
        Subject: CN=9F787E768B71356340D215F908263FD44F614D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:0c:ce:0e:f4:4b:a6:50:0f:a0:fa:fe:fd:
                    e7:f8:ba:21:d2:1b:70:1f:8d:87:92:df:1b:96:cc:
                    b6:ab:69:18:34:22:89:6a:3c:fc:38:62:89:27:2f:
                    b9:0d:f0:76:54:8d:f0:4e:58:d2:9b:71:b4:3b:0a:
                    92:ab:6b:60:e5:1b:63:ee:27:99:a9:d4:eb:2a:f5:
                    11:7c:96:61:b3:c5:c7:37:a8:a4:96:b0:0c:eb:0c:
                    b9:76:4a:31:7f:95:59:81:bf:03:99:bd:17:8f:75:
                    ff:65:e3:0b:dc:9e:d2:3e:7d:f8:91:b6:1b:57:2b:
                    2f:18:f0:06:bd:d5:8c:24:b4:44:34:b1:a8:58:90:
                    46:c3:26:39:3d:20:13:0b:22:c1:86:5b:6d:a5:bb:
                    5a:fd:ab:79:1f:84:df:99:df:8a:ec:4b:ab:2b:4c:
                    7e:ef:17:c5:d4:9c:8b:ed:a6:c4:5b:c2:77:ca:e1:
                    fc:8e:a0:c4:15:b8:a5:64:fa:80:61:6f:84:2d:75:
                    1e:87:84:97:39:26:b4:67:45:7f:49:86:86:4c:88:
                    74:bb:a4:f2:87:88:be:09:96:01:11:7c:90:f8:d7:
                    8c:d5:64:6c:88:fc:9c:bb:2d:f2:ec:42:38:03:6e:
                    90:b4:56:de:0b:f1:39:05:b8:fc:25:4e:c9:3d:01:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:78:7E:76:8B:71:35:63:40:D2:15:F9:08:26:3F:D4:4F:61:4D:77
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134322e302f32332d3233203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:43:7d:b9:61:b2:7b:e6:bd:80:4a:90:70:4d:b7:9b:e0:b6:
         f3:97:86:ed:a6:bf:b5:30:d2:d1:9d:1f:52:80:1d:a6:80:a6:
         05:63:04:c0:cd:5f:a8:ef:c3:a4:61:4c:0c:2b:34:47:ca:c8:
         cb:a6:fb:b3:f8:39:54:80:5d:31:19:aa:76:d6:1d:d2:83:ce:
         38:31:0b:3c:30:4b:80:7e:0d:b8:f6:de:36:0c:2f:a2:b3:7c:
         eb:cc:fc:ea:57:8c:8e:96:77:01:ec:7f:6f:6c:5f:be:b0:a8:
         07:ef:85:37:a1:e9:7d:0e:41:40:60:8b:79:25:0c:d2:be:44:
         25:6e:54:89:90:53:05:c0:a8:90:a2:e6:bd:40:a8:93:91:9d:
         d3:0f:df:9c:ca:e5:e4:d6:a6:f4:9e:6e:e6:77:bf:e0:66:1c:
         1d:f8:b8:16:50:93:28:95:f1:2a:5c:c1:c9:92:30:4f:53:b9:
         41:4b:3d:b2:1f:92:93:71:c4:b0:c6:23:44:6a:2f:87:eb:a3:
         45:a7:0d:2c:03:8a:f1:27:6c:72:ad:4d:f0:50:04:60:57:77:
         be:bb:65:f8:53:be:25:8f:5b:66:2d:3c:15:6d:c3:ea:bb:8e:
         34:a7:34:7e:39:0e:24:13:c2:f6:05:49:17:1f:fb:cc:80:e0:
         90:f7:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org