Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134322e302f32342d3234203d3e20323639353931.roa
File:                     34352e3138392e3134322e302f32342d3234203d3e20323639353931.roa (raw, json)
Hash identifier:          nwztgYjMXZ6Mco9ydQ7hjfYLNQrzstTsb3Rzb/emmEk=
Subject key identifier:   1E:2F:27:0A:71:9F:08:F2:88:D9:61:ED:A0:00:48:DD:04:CE:C0:5B
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       7A7E8375391E286C336507C2D49BBA488F367DA9
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134322e302f32342d3234203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:25 +0000
ROA not before:           Thu 09 May 2024 13:28:25 +0000
ROA not after:            Thu 08 May 2025 13:33:25 +0000
asID:                     269591
IP address blocks:        45.189.142.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:83:75:39:1e:28:6c:33:65:07:c2:d4:9b:ba:48:8f:36:7d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:25 2024 GMT
            Not After : May  8 13:33:25 2025 GMT
        Subject: CN=1E2F270A719F08F288D961EDA00048DD04CEC05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:8f:58:48:ef:a1:0e:d3:9b:10:3d:1b:69:
                    64:36:24:98:ca:e8:79:f9:27:41:4f:b3:79:fe:61:
                    6c:f8:94:21:74:ce:26:ef:22:60:64:39:39:2d:17:
                    67:79:51:bc:b7:41:1b:42:16:bb:74:03:75:46:e6:
                    90:0c:89:f7:48:d3:55:bd:2a:b4:0f:40:4d:3a:52:
                    ad:fc:0a:4c:3a:97:f9:f2:c5:d5:ea:e2:13:b3:36:
                    9c:9e:07:0a:13:ea:5c:32:dc:19:fd:0b:ad:9c:1e:
                    5d:03:33:16:41:c8:4c:f0:59:6c:cd:2c:1e:f1:c5:
                    e6:25:6d:cd:26:77:a0:66:a3:b4:c6:24:74:cb:61:
                    a2:bc:6a:7e:de:ca:23:81:b7:31:f4:5a:0c:6b:19:
                    b6:bf:90:d9:d5:7f:f4:18:d3:bd:1f:47:74:65:ca:
                    3c:c9:61:d5:5d:d8:be:90:9f:ff:90:c5:e9:59:09:
                    90:54:5e:5b:df:88:82:89:f3:3d:26:8b:d4:69:c0:
                    4a:1c:85:37:b8:89:63:49:5f:eb:b0:81:7b:a3:47:
                    bf:99:50:dc:84:f9:23:71:39:35:fa:5f:66:b5:3e:
                    7b:02:a8:d6:26:af:20:22:bc:04:3d:42:23:9b:34:
                    2a:d2:89:6e:67:bb:d4:12:e0:f6:ec:42:ce:f0:0a:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2F:27:0A:71:9F:08:F2:88:D9:61:ED:A0:00:48:DD:04:CE:C0:5B
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134322e302f32342d3234203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:c0:fe:8b:3e:1f:7f:a0:c9:f9:59:4f:12:11:c8:87:24:
         b1:78:e7:64:b5:ea:14:91:d9:28:8c:0f:9d:96:87:a4:f7:2b:
         89:f0:d2:aa:18:32:73:48:45:5d:ca:42:e8:12:a9:a7:1d:92:
         8f:19:8d:42:3c:cd:dd:62:ea:52:e5:be:c5:4e:a2:8a:dc:ea:
         f4:30:96:ee:5d:af:43:98:b1:ce:2e:a3:b9:5f:44:13:26:40:
         a8:6d:8e:2b:92:56:bc:de:3b:70:3d:d6:b4:25:60:56:60:fb:
         20:30:84:3f:4a:86:46:e1:84:62:23:fe:3c:a9:3b:b5:59:db:
         3e:77:ff:33:b3:14:ed:43:3a:b1:b8:1a:60:e8:d8:7d:f1:08:
         2b:0a:56:8b:56:e9:fd:ae:de:d8:41:bc:37:b2:7e:e5:ae:d6:
         e3:09:fd:24:2c:70:e6:e9:13:e5:a0:96:5c:0a:8d:2c:b5:2a:
         1c:4c:9c:85:e9:6d:94:3e:b0:fe:02:18:d6:4f:db:69:b3:4c:
         03:ca:ce:4d:08:a5:4f:7c:ca:d2:fa:5e:0b:93:cd:c1:47:6e:
         ce:96:f4:64:9a:a2:f6:54:03:b5:fe:af:ba:f4:e4:0e:87:32:
         78:d1:e3:45:f1:17:38:37:95:39:c0:89:ce:d6:95:69:f7:55:
         9d:45:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org