Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39302e302f32342d3234203d3e20323638373034.roa
File:                     34352e3137312e39302e302f32342d3234203d3e20323638373034.roa (raw, json)
Hash identifier:          qEHsTTwtJYB0lRYS9hNSSuZ3dtvAOWcE679WAp7thCs=
Subject key identifier:   43:CD:5A:32:B7:4B:CC:48:CB:E6:FB:73:F8:E0:BB:58:27:A1:88:02
Certificate issuer:       /CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Certificate serial:       31778CB6784CD877A5C682545EE2D3C89115A5B7
Authority key identifier: 96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39302e302f32342d3234203d3e20323638373034.roa
Signing time:             Mon 05 Aug 2024 03:41:41 +0000
ROA not before:           Mon 05 Aug 2024 03:36:41 +0000
ROA not after:            Mon 04 Aug 2025 03:41:41 +0000
asID:                     268704
IP address blocks:        45.171.90.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:77:8c:b6:78:4c:d8:77:a5:c6:82:54:5e:e2:d3:c8:91:15:a5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
        Validity
            Not Before: Aug  5 03:36:41 2024 GMT
            Not After : Aug  4 03:41:41 2025 GMT
        Subject: CN=43CD5A32B74BCC48CBE6FB73F8E0BB5827A18802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:69:9c:46:f5:fc:b1:ff:c9:d0:85:c7:94:
                    0e:fe:2d:9f:28:5c:26:83:03:8c:fe:06:d4:19:43:
                    0a:31:1c:92:f2:bb:03:80:ce:e5:a3:1c:6a:3f:6f:
                    a5:bb:29:1b:7c:da:c8:45:ec:6c:f0:4e:33:d6:1e:
                    af:32:c9:3c:0d:b2:37:d0:ba:dc:23:9b:de:81:91:
                    84:20:46:46:c6:05:da:22:24:d8:cd:c2:69:77:20:
                    ec:dd:c4:c8:8a:01:4a:0d:9d:6d:c3:43:30:48:de:
                    4f:15:9a:04:f8:b3:f8:ac:32:16:ca:72:dc:c2:51:
                    7a:6e:0b:86:31:db:06:96:d1:89:b3:fe:b4:25:fb:
                    c4:e1:14:f2:3f:a5:c6:78:45:90:18:27:38:90:2f:
                    37:f1:cd:a1:45:3d:34:6f:46:c7:c1:7d:e9:f0:72:
                    53:da:52:2c:ce:74:74:0d:34:17:07:20:2e:db:8f:
                    2b:41:10:cb:6a:70:05:49:6c:a8:1a:34:04:f8:ec:
                    1b:8d:3f:07:4e:1f:2c:69:00:37:e4:b2:b5:1b:f9:
                    61:d4:fb:52:0e:6d:94:ba:16:64:d5:54:38:4a:80:
                    55:cf:2f:63:dc:18:13:b4:ee:66:6c:ab:56:f4:15:
                    f7:f7:d3:39:b9:ae:14:83:21:7b:d8:73:2e:a2:40:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CD:5A:32:B7:4B:CC:48:CB:E6:FB:73:F8:E0:BB:58:27:A1:88:02
            X509v3 Authority Key Identifier:
                keyid:96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/96A28B7606385C538AB85121C62CC8D2D1FFF64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39302e302f32342d3234203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:dc:2b:1b:d4:7b:1a:9b:b4:3f:9d:f5:6f:41:76:8a:bd:aa:
         1e:e0:9f:ff:82:a7:14:22:ae:da:d0:9d:46:89:f9:b5:51:37:
         1d:4b:36:71:79:9c:d1:4e:34:2b:ac:eb:dd:d3:2a:0b:4c:4a:
         8b:e1:89:62:4c:ad:22:fc:3d:8f:85:b9:69:92:3e:60:30:a8:
         07:a6:c8:27:78:b4:f8:8a:45:3c:22:10:db:05:0d:67:6f:5c:
         13:f8:ee:96:a0:57:35:77:22:b6:f5:78:df:91:f8:29:a5:54:
         28:81:07:9e:9a:5a:ec:0a:4b:6e:61:db:c4:f5:70:67:c1:6b:
         5e:e5:53:ab:63:23:79:34:f5:c0:5c:a8:2f:1d:bf:fb:53:5e:
         3d:4e:24:08:ca:73:ff:bc:4b:7e:4a:63:6e:10:50:76:64:b1:
         ec:a4:5d:4f:32:01:f0:50:64:f3:d7:73:09:47:50:6e:36:06:
         69:61:11:f6:29:e7:0e:f4:78:0e:d2:58:35:cf:45:d8:20:2a:
         88:01:35:50:e7:15:d7:58:49:13:07:d0:8f:71:a6:10:b2:3b:
         1e:e5:fa:2c:d4:bf:3d:1c:c3:27:a7:6c:c3:78:a0:77:13:08:
         1b:18:c5:43:97:19:ee:98:b2:46:3c:42:78:64:97:40:f5:e6:
         f4:22:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:42 2024 by rpki-client on console-fra.rpki-client.org