Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32342d3234203d3e20323633363631.roa
File:                     34352e3137392e38362e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          M+iY6eAnCTzZeKEwmD17ApcMUC0cz8RWgPrBa48TAvs=
Subject key identifier:   EE:24:8A:8C:00:41:C3:A3:58:04:96:77:54:6F:BE:F0:6A:6B:16:A5
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       389D63FEDB56CB66912BBD1DDD6F5BFB3892AED0
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32342d3234203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:56 +0000
ROA not before:           Mon 04 Mar 2024 21:17:56 +0000
ROA not after:            Mon 03 Mar 2025 21:22:56 +0000
asID:                     263661
IP address blocks:        45.179.86.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9d:63:fe:db:56:cb:66:91:2b:bd:1d:dd:6f:5b:fb:38:92:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:56 2024 GMT
            Not After : Mar  3 21:22:56 2025 GMT
        Subject: CN=EE248A8C0041C3A358049677546FBEF06A6B16A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:78:36:a4:eb:58:c4:a0:a8:f3:ed:8a:2e:
                    8f:1e:65:92:eb:73:c7:2c:de:cb:b4:dd:9f:02:ec:
                    f2:b1:3b:e9:ad:22:60:17:ee:d7:a8:55:3e:f1:4e:
                    20:c3:03:d7:5e:3f:26:57:8d:64:36:b9:ed:a5:8e:
                    c9:8f:5f:1c:7d:35:bc:5f:d3:41:67:54:4d:0c:00:
                    27:41:3e:7a:69:d7:7d:1a:1f:7d:5c:9e:ea:35:a0:
                    74:4a:26:0d:3b:25:21:1c:5d:14:f8:32:63:e0:3b:
                    46:d2:ee:99:4e:1d:9d:5f:ee:27:a3:b9:51:66:ce:
                    ee:7c:c1:cc:7a:24:02:f7:0d:ac:08:ef:55:63:c9:
                    c7:0e:87:61:e9:52:d0:08:09:a9:15:55:fb:06:d8:
                    44:20:e1:a9:29:b7:ca:9d:e3:6e:27:55:82:52:d8:
                    95:50:68:cc:57:d8:7a:e9:42:ac:bd:ed:bb:d6:f7:
                    40:96:e6:5d:16:e1:3b:52:dd:ab:ed:89:6c:e4:8a:
                    e2:f9:bb:ac:10:ce:26:3f:f9:a4:8a:4d:ab:53:94:
                    f8:c0:ac:86:b5:2e:02:31:0f:f1:7f:66:86:2b:4e:
                    e2:56:8a:b9:bf:ac:57:a3:8f:64:b8:13:9a:ab:72:
                    c7:f3:a7:73:a5:ac:ff:b3:95:6d:e6:84:08:be:2e:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:8A:8C:00:41:C3:A3:58:04:96:77:54:6F:BE:F0:6A:6B:16:A5
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:83:65:78:4f:8c:02:cb:5d:55:74:74:10:9e:6f:8b:bc:
         9b:ad:b7:55:80:ec:e7:de:e8:c3:a9:96:70:dd:47:be:6a:1a:
         db:0f:3a:5d:25:0d:94:ec:a8:cd:75:2f:50:28:16:cd:da:cd:
         cd:64:94:06:0d:0a:09:5a:3f:5f:26:7e:de:aa:4c:38:a6:be:
         ce:ce:eb:a5:ef:80:39:82:bd:1f:78:02:38:2c:7e:ef:aa:14:
         25:3f:e6:05:5a:14:90:8d:20:f8:43:0b:cb:0e:b8:06:fe:b1:
         d7:fd:2a:20:d6:4c:92:58:15:23:90:4d:d5:96:c8:0f:f9:2e:
         57:41:33:d4:8f:61:e4:08:61:56:d3:84:a4:df:76:e7:f6:41:
         8c:5c:f2:90:0a:99:ee:59:0a:0e:7f:2f:21:50:77:fe:fe:1e:
         de:86:d7:49:e6:4c:0c:26:12:f9:ae:eb:43:c1:ce:b2:96:0c:
         3a:7e:4a:b0:b2:c5:18:3e:d9:5d:b1:be:04:ac:90:d6:80:05:
         d1:5f:76:e4:1f:cc:87:5e:9a:63:b1:8f:58:84:23:52:81:dd:
         e4:e0:e4:5f:ad:d5:ea:4c:49:69:48:a1:c9:de:65:3b:36:01:
         cf:49:01:57:01:45:9d:a8:98:bf:eb:78:1e:e4:c9:51:06:08:
         f0:b1:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net