Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32332d3233203d3e20323633363631.roa
File:                     34352e3137392e38362e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          5wbRsruhFilp+p5tl6Oc+MFyCv+KRdWhZShHA2jvauc=
Subject key identifier:   9B:59:C9:E5:EB:2E:1F:13:7E:73:A0:51:6B:D8:83:2E:AE:46:34:0D
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       128AB0779D6A5F96747A9C96138E912B4B116872
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32332d3233203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:59 +0000
ROA not before:           Mon 04 Mar 2024 21:17:59 +0000
ROA not after:            Mon 03 Mar 2025 21:22:59 +0000
asID:                     263661
IP address blocks:        45.179.86.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8a:b0:77:9d:6a:5f:96:74:7a:9c:96:13:8e:91:2b:4b:11:68:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:59 2024 GMT
            Not After : Mar  3 21:22:59 2025 GMT
        Subject: CN=9B59C9E5EB2E1F137E73A0516BD8832EAE46340D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:77:09:e1:cc:e0:92:24:5b:ce:c7:8c:2e:
                    0f:27:45:46:fe:8b:2f:ef:21:30:55:9b:3b:31:a6:
                    1a:26:92:95:e1:b2:9f:a8:88:06:3a:a9:0b:85:66:
                    da:01:64:a2:06:ee:8c:fe:b1:90:e4:99:5f:81:3a:
                    e8:9b:26:6b:fa:7d:8e:90:a2:44:0d:00:d8:3b:26:
                    3a:4e:8d:af:cc:3f:c1:91:38:5d:e6:64:91:75:18:
                    50:49:96:be:3f:93:20:cd:0f:6b:5b:8f:a9:59:67:
                    6c:0e:9e:96:b1:ef:dd:13:d9:ae:d9:51:6e:84:13:
                    2b:43:55:d7:52:a6:78:e0:ed:25:94:7e:c3:06:0f:
                    8e:54:14:1c:3e:fc:ea:52:72:e8:0d:d8:cd:88:a6:
                    77:78:05:c0:ca:56:97:64:d9:98:3d:a9:6a:a3:3a:
                    c2:5a:7e:4f:02:5e:65:2e:41:a1:e6:1c:32:ea:a5:
                    fb:21:e3:68:67:61:c9:20:2a:ca:72:e7:fd:d5:16:
                    77:c9:d1:4d:45:1e:08:b6:98:be:27:e0:3a:a0:c9:
                    90:2e:23:72:9b:6b:f3:91:ff:fd:00:af:e7:02:07:
                    70:4f:f1:af:4f:ae:e2:e8:06:e1:24:c6:9e:89:39:
                    3a:0d:d7:87:f6:80:4b:ba:5d:e0:2b:87:d6:7c:23:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:C9:E5:EB:2E:1F:13:7E:73:A0:51:6B:D8:83:2E:AE:46:34:0D
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:2a:de:e7:23:49:1f:0c:c9:5e:73:47:05:a8:1d:57:02:f9:
         48:02:4d:b2:ee:1c:da:e5:eb:52:e9:e8:05:37:30:33:29:bc:
         1e:91:b5:60:f2:92:eb:2f:18:6a:20:01:23:12:2c:5f:ce:cb:
         e9:86:21:d1:38:1a:64:db:2f:82:be:1d:f2:2b:11:46:34:bf:
         b4:3d:e0:3e:38:37:5c:39:6e:b5:31:11:46:a3:93:51:87:90:
         da:a0:d0:bf:80:df:40:98:c8:dd:ae:59:c6:2b:57:55:ae:c3:
         e5:c2:cd:e0:35:e3:2d:88:5b:8b:2a:f6:82:12:e2:b7:9e:fc:
         5a:6c:7f:0a:0e:f9:63:57:5b:2e:ec:2e:19:e6:d4:19:d1:94:
         07:cf:80:86:ca:8f:2e:60:fb:c6:87:78:99:15:0c:c6:22:f9:
         49:87:9b:59:0e:e2:ae:c6:1b:40:a9:16:88:36:9b:f3:f1:25:
         82:6e:99:09:1b:48:05:fc:66:c7:a6:7e:70:13:e4:86:79:d5:
         8a:51:7a:cf:2e:e4:2b:47:b3:f6:e9:e5:7b:7e:48:d8:5d:db:
         4e:38:35:c5:4e:9e:3c:21:76:b8:70:39:89:f5:c7:97:ba:c7:
         c6:6f:83:f2:45:1c:67:7b:9a:be:3f:5d:37:e3:ef:85:e8:3f:
         a5:8e:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net