Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134332e302f32342d3234203d3e20323639353931.roa
File:                     34352e3138392e3134332e302f32342d3234203d3e20323639353931.roa (raw, json)
Hash identifier:          aVhrS/eh9mSBA3dUvXY4ZzNXLuIys77ghCmRYA2sQWQ=
Subject key identifier:   0E:92:A7:58:8F:B1:7A:A4:9F:E7:F9:7D:08:85:1C:01:ED:54:E9:26
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       5E5D8B1E673A713B6050CB21ED5BBE057DF8AD68
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134332e302f32342d3234203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:26 +0000
ROA not before:           Thu 09 May 2024 13:28:26 +0000
ROA not after:            Thu 08 May 2025 13:33:26 +0000
asID:                     269591
IP address blocks:        45.189.143.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5d:8b:1e:67:3a:71:3b:60:50:cb:21:ed:5b:be:05:7d:f8:ad:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:26 2024 GMT
            Not After : May  8 13:33:26 2025 GMT
        Subject: CN=0E92A7588FB17AA49FE7F97D08851C01ED54E926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:f3:69:54:0f:8b:4d:ec:b6:51:23:ef:4e:5f:
                    32:94:83:66:e9:c5:72:2d:7e:65:75:2a:dd:5c:f7:
                    96:45:2d:1e:19:f5:b3:27:21:b5:ef:11:b0:15:48:
                    d4:06:fd:92:8d:ce:76:8d:4d:01:f9:0d:66:a5:bd:
                    68:36:63:e4:10:ab:01:71:93:d1:45:ed:bf:65:35:
                    1f:59:cb:b6:b3:fc:1a:d4:96:3b:aa:13:5c:ef:ab:
                    f3:4e:21:c7:b8:87:3b:0d:ca:53:80:f1:d7:70:5d:
                    52:30:79:76:e3:e5:05:78:37:13:60:6c:ef:07:dd:
                    02:41:6e:08:ba:ad:3b:ca:c7:f1:23:62:e6:11:4a:
                    39:e1:e9:0c:27:84:16:da:7d:20:8c:1b:6a:0d:15:
                    03:ef:d5:74:e4:01:24:1a:8b:8d:37:a9:21:38:07:
                    06:ba:36:7c:bb:2b:81:28:b3:78:a6:a5:2d:bb:74:
                    c8:75:c5:62:92:f2:f9:95:ac:b5:b0:67:d2:cd:a2:
                    ba:29:ea:36:ab:de:8d:ea:d5:9e:82:0b:f8:27:24:
                    0b:44:f9:a4:af:47:86:e5:de:c2:ca:d3:b8:84:61:
                    6e:3b:45:69:a6:99:80:96:fd:c1:f2:62:a9:d9:1f:
                    79:b7:e4:fe:6b:02:6a:84:f9:18:88:d1:7f:e8:17:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:92:A7:58:8F:B1:7A:A4:9F:E7:F9:7D:08:85:1C:01:ED:54:E9:26
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/34352e3138392e3134332e302f32342d3234203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:7a:40:3a:42:af:ff:64:c9:6e:65:ac:86:5c:c3:fb:95:
         b6:b3:32:0a:42:d6:ac:df:9c:4c:48:d1:54:27:47:ee:a6:df:
         3a:aa:8f:45:63:9b:82:c6:d8:1e:92:7a:82:1e:d4:84:bd:b3:
         a3:a4:57:36:ae:15:63:eb:74:84:0e:4f:da:f8:d6:ab:2f:9a:
         d0:53:88:34:5e:b9:00:20:ab:57:6b:cc:4f:72:80:53:a1:6e:
         b5:32:a7:15:99:82:e6:b1:40:61:f8:98:1c:c5:21:66:27:f5:
         31:9f:42:fe:19:4c:d6:25:de:ea:03:09:0a:23:9c:92:31:6e:
         21:b3:03:78:8e:00:6b:6d:e5:13:8b:b4:af:e9:d7:1b:d2:51:
         fe:3c:38:1b:8a:0e:e6:2e:69:0b:c4:ad:25:0e:5d:eb:b1:67:
         58:9e:86:ed:7e:4c:c1:9d:aa:f1:e1:0c:8a:a3:c9:15:90:a6:
         e7:c7:e6:55:1a:c0:66:0f:19:01:03:75:ab:c4:07:7c:ab:3c:
         61:9b:d0:de:33:74:df:3e:eb:f9:25:91:89:b8:36:cd:69:20:
         2e:6a:b7:8c:6c:c3:fe:9d:b3:3a:d6:08:fe:2a:e7:ee:20:58:
         de:03:9f:7a:b0:3a:f0:1e:76:28:9a:1e:dd:d0:c7:38:2b:86:
         3a:5a:e6:07
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXl2LHmc6cTtgUMsh7Vu+BX34rWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDQUZGQUYyRUQ2MDVBMjMxMjE3MDY3NkE4QTFEQkFG
MDM3REJFNTAeFw0yNDA1MDkxMzI4MjZaFw0yNTA1MDgxMzMzMjZaMDMxMTAvBgNV
BAMTKDBFOTJBNzU4OEZCMTdBQTQ5RkU3Rjk3RDA4ODUxQzAxRUQ1NEU5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD982lUD4tN7LZRI+9OXzKUg2bp
xXItfmV1Kt1c95ZFLR4Z9bMnIbXvEbAVSNQG/ZKNznaNTQH5DWalvWg2Y+QQqwFx
k9FF7b9lNR9Zy7az/BrUljuqE1zvq/NOIce4hzsNylOA8ddwXVIweXbj5QV4NxNg
bO8H3QJBbgi6rTvKx/EjYuYRSjnh6QwnhBbafSCMG2oNFQPv1XTkASQai403qSE4
Bwa6Nny7K4Eos3impS27dMh1xWKS8vmVrLWwZ9LNorop6jar3o3q1Z6CC/gnJAtE
+aSvR4bl3sLK07iEYW47RWmmmYCW/cHyYqnZH3m35P5rAmqE+RiI0X/oF2FXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDpKnWI+xeqSf5/l9CIUcAe1U6SYwHwYDVR0j
BBgwFoAU68r/ry7WBaIxIXBnaooduvA32+UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby85cHZTVkxWZ3hUUWRod0JoOENyV2ZUQ2dCQk5qTHhMa3hHQ3ZVYzh0MzVF
LzAvRUJDQUZGQUYyRUQ2MDVBMjMxMjE3MDY3NkE4QTFEQkFGMDM3REJFNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FQkNBRkZBRjJFRDYwNUEyMzEy
MTcwNjc2QThBMURCQUYwMzdEQkU1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85
cHZTVkxWZ3hUUWRod0JoOENyV2ZUQ2dCQk5qTHhMa3hHQ3ZVYzh0MzVFLzAvMzQz
NTJlMzEzODM5MmUzMTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzkz
NTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtvY8wDQYJKoZIhvcNAQELBQADggEBAJCfekA6Qq//
ZMluZayGXMP7lbazMgpC1qzfnExI0VQnR+6m3zqqj0Vjm4LG2B6SeoIe1IS9s6Ok
VzauFWPrdIQOT9r41qsvmtBTiDReuQAgq1drzE9ygFOhbrUypxWZguaxQGH4mBzF
IWYn9TGfQv4ZTNYl3uoDCQojnJIxbiGzA3iOAGtt5ROLtK/p1xvSUf48OBuKDuYu
aQvErSUOXeuxZ1iehu1+TMGdqvHhDIqjyRWQpufH5lUawGYPGQEDdavEB3yrPGGb
0N4zdN8+6/klkYm4Ns1pIC5qt4xsw/6dszrWCP4q5+4gWN4Dn3qwOvAediiaHt3Q
xzgrhjpa5gc=
-----END CERTIFICATE-----
Generated at Wed Aug 21 00:38:21 2024 by rpki-client on console-ams.rpki-client.org