Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38382e302f32342d3234203d3e20323638373034.roa
File:                     34352e3137312e38382e302f32342d3234203d3e20323638373034.roa (raw, json)
Hash identifier:          vgBBdphwQszlDj0lPxh7NvLN1YCK/E1hrGD3v3a7ZQw=
Subject key identifier:   B7:86:8A:19:C7:4C:DF:EE:1B:0D:EB:C7:7A:25:B5:64:C5:29:5F:6A
Certificate issuer:       /CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Certificate serial:       72D377B052899D01E63406D758044261DFA3E8CC
Authority key identifier: 96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38382e302f32342d3234203d3e20323638373034.roa
Signing time:             Mon 05 Aug 2024 03:41:41 +0000
ROA not before:           Mon 05 Aug 2024 03:36:41 +0000
ROA not after:            Mon 04 Aug 2025 03:41:41 +0000
asID:                     268704
IP address blocks:        45.171.88.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d3:77:b0:52:89:9d:01:e6:34:06:d7:58:04:42:61:df:a3:e8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
        Validity
            Not Before: Aug  5 03:36:41 2024 GMT
            Not After : Aug  4 03:41:41 2025 GMT
        Subject: CN=B7868A19C74CDFEE1B0DEBC77A25B564C5295F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:a6:83:39:c3:5f:a4:13:b1:a0:60:6f:b7:
                    9e:ec:55:d5:ab:4f:4a:b0:4b:86:83:a9:92:5d:d1:
                    77:be:75:4d:1a:48:f7:9c:7c:93:6b:22:03:41:81:
                    5a:12:d5:10:3a:33:f0:f8:3b:a0:0e:d0:02:89:96:
                    60:22:aa:88:29:f7:0a:65:4d:bb:4d:8e:49:81:eb:
                    d3:cb:83:ef:c2:bb:aa:bb:28:a7:ed:32:26:7c:dd:
                    a5:6a:8c:da:da:24:55:79:48:a1:70:d8:91:a3:7b:
                    cd:72:d3:ea:f2:4e:c5:34:f6:6f:36:ea:48:06:7d:
                    41:c2:6f:9c:2d:24:32:6e:93:d1:f2:fa:2c:6a:bd:
                    0e:07:80:55:d1:69:39:a7:3b:75:60:ba:0c:6d:6a:
                    45:c9:8c:21:1a:67:63:f4:8c:83:e2:b5:dc:b4:41:
                    40:42:12:a6:ca:9b:46:05:86:f1:76:b3:3a:8c:65:
                    9a:e4:a5:91:74:12:9b:77:d9:04:83:b9:cd:52:59:
                    4c:27:7d:5e:25:04:a4:76:9e:e6:4a:5e:84:4f:fc:
                    7d:59:97:ec:5c:11:26:b1:51:bb:30:bd:58:5b:72:
                    ae:be:1c:29:45:a7:64:9c:2b:2e:83:04:f5:9d:cc:
                    a5:09:95:a9:a2:ce:00:45:ed:c4:20:16:f4:98:8b:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:8A:19:C7:4C:DF:EE:1B:0D:EB:C7:7A:25:B5:64:C5:29:5F:6A
            X509v3 Authority Key Identifier:
                keyid:96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/96A28B7606385C538AB85121C62CC8D2D1FFF64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38382e302f32342d3234203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:fb:5b:52:20:36:9d:0f:2f:0c:85:d6:d2:f8:b6:76:d7:
         1f:2b:dd:2d:cf:7c:1e:cf:ae:4b:26:97:21:80:a1:36:ca:17:
         8c:7e:b4:1e:39:c5:bc:1b:08:07:f5:dc:03:4e:7d:80:f8:85:
         03:b1:cb:42:a2:fe:eb:e6:ea:a3:d4:04:fe:82:6f:44:10:b2:
         58:98:51:9a:99:80:19:7f:37:8e:46:74:ac:a4:f0:3b:a8:ba:
         5a:47:a8:23:bf:a8:12:c2:6b:a0:c1:cc:94:e1:f5:bf:8a:75:
         3d:fa:2f:b1:9a:b4:a5:4f:a8:a6:02:18:8e:65:9f:bd:ce:84:
         db:f6:15:71:3d:68:41:bd:ef:a0:c5:17:00:4a:e7:1b:d8:ca:
         be:95:04:da:08:1d:6c:37:2b:e3:e4:17:e5:3e:62:c2:69:f6:
         f7:30:49:51:34:49:0c:db:94:1d:9d:14:08:de:23:83:12:b6:
         bd:dc:0b:19:b9:b9:3c:c9:d5:e5:7e:c7:af:92:2f:18:11:a2:
         6e:e9:fb:bb:39:9d:4d:e4:06:59:82:69:82:6d:11:57:36:ee:
         35:88:cc:32:b0:5b:ea:2a:df:15:34:e4:0a:b4:1c:18:13:11:
         db:e4:65:f9:19:62:71:31:c3:e6:d1:ee:9e:6b:fc:61:6d:68:
         2e:66:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 12:34:23 2024 by rpki-client on console-ams.rpki-client.org