Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39312e302f32342d3234203d3e20323638373034.roa
File:                     34352e3137312e39312e302f32342d3234203d3e20323638373034.roa (raw, json)
Hash identifier:          +4tc8mAriTIbUGb5etaRuZ11h+rGt5Tqjt6RzchlPd4=
Subject key identifier:   67:80:59:E1:8E:D0:38:5A:9F:66:B1:F3:A8:CC:9C:56:A8:B2:93:E2
Certificate issuer:       /CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Certificate serial:       717DC192DB09234F112D5D08FA71D2AEACEE0404
Authority key identifier: 96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39312e302f32342d3234203d3e20323638373034.roa
Signing time:             Mon 05 Aug 2024 03:41:41 +0000
ROA not before:           Mon 05 Aug 2024 03:36:41 +0000
ROA not after:            Mon 04 Aug 2025 03:41:41 +0000
asID:                     268704
IP address blocks:        45.171.91.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7d:c1:92:db:09:23:4f:11:2d:5d:08:fa:71:d2:ae:ac:ee:04:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
        Validity
            Not Before: Aug  5 03:36:41 2024 GMT
            Not After : Aug  4 03:41:41 2025 GMT
        Subject: CN=678059E18ED0385A9F66B1F3A8CC9C56A8B293E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:e3:5c:5d:2a:5a:6a:7a:93:2f:a0:6b:0f:
                    a6:bc:65:52:77:fe:b7:89:2c:5c:7f:d3:80:d6:91:
                    4e:79:11:b1:4d:38:11:8a:09:28:b1:b8:b5:26:3b:
                    24:83:be:5d:e8:1c:87:f2:ae:3b:75:59:f9:4f:92:
                    d4:48:7f:ab:51:6c:1d:03:10:e7:8e:96:0f:fa:8a:
                    1e:fe:5d:57:49:b4:62:00:82:5e:e6:42:12:dd:da:
                    f2:64:55:45:ad:02:16:2d:4c:fb:e1:cd:b5:d6:6a:
                    5e:8a:4b:8a:d7:d6:b4:2c:0d:30:95:e3:9d:d9:0f:
                    76:fc:34:de:17:71:f5:34:5c:f6:90:9d:1b:ce:30:
                    d7:fb:72:bf:97:3c:a9:42:2a:5a:4e:97:fe:7f:8c:
                    0a:09:9e:6d:9f:f3:07:d3:61:9a:78:c7:44:bd:90:
                    0a:dd:e0:61:1b:10:5b:70:7b:3f:ed:3c:ff:5b:f4:
                    c7:eb:b7:23:fa:43:6a:c1:d1:52:f0:78:39:3e:fb:
                    3e:f2:f6:1a:d3:e2:b9:56:c9:b7:5c:98:6d:bc:d1:
                    b3:96:71:52:1b:d1:f2:47:15:5b:c9:77:ed:3e:c1:
                    6e:8c:31:57:16:26:59:95:de:f0:b0:fa:ca:b2:89:
                    0e:ce:8b:a3:4d:18:27:3d:94:a4:af:c3:83:bc:69:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:80:59:E1:8E:D0:38:5A:9F:66:B1:F3:A8:CC:9C:56:A8:B2:93:E2
            X509v3 Authority Key Identifier:
                keyid:96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/96A28B7606385C538AB85121C62CC8D2D1FFF64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e39312e302f32342d3234203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:0c:4c:20:2c:b1:01:53:9d:fe:4a:56:73:8d:b1:a6:d4:c5:
         10:89:fb:ac:2d:2e:5a:33:0e:4f:2f:2c:58:6a:3f:35:a2:79:
         d1:b2:b6:fe:18:66:9b:d5:e4:1f:44:a5:c3:34:67:78:4f:ce:
         c1:47:3b:76:6c:41:7f:5c:20:c5:f5:c0:eb:29:c5:c7:08:69:
         e0:79:50:88:79:c6:0a:dc:92:6b:76:3b:9a:cd:49:a7:a7:97:
         62:8f:31:31:0b:99:f8:48:f7:d7:d2:b6:0f:e9:fc:f9:c2:43:
         ce:1b:20:7b:0d:0d:35:5d:99:fd:44:37:cb:d6:fc:c4:29:85:
         63:6e:3c:28:d0:b3:0f:56:7b:36:2b:89:49:56:63:cb:ce:0c:
         a4:e9:cc:06:fa:6e:a6:03:d1:d4:e5:82:7e:93:1f:5e:fd:48:
         89:97:af:e8:76:aa:88:14:54:96:25:02:f0:cf:55:74:66:7c:
         dd:18:4f:7a:4e:24:69:82:88:ff:76:94:1c:f8:91:01:8d:48:
         9e:b0:bb:9c:21:6f:72:09:0e:5d:38:df:1a:d9:37:25:5d:08:
         08:df:ed:dc:ff:a3:17:1e:2c:91:6e:d9:63:74:92:84:e9:39:
         92:00:e1:c8:a7:30:e8:7d:b3:a3:93:86:ff:63:ba:4c:e7:b7:
         54:dc:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 12:34:23 2024 by rpki-client on console-ams.rpki-client.org