Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa
File:                     3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa (raw, json)
Hash identifier:          hg0uZ/XxK9MD5mHXoJ8d+kJSu0HRUgNGzplmshSH2fU=
Subject key identifier:   CB:5D:1F:34:4C:6C:48:D3:BC:CF:04:F5:4B:27:5F:A8:E3:73:A9:E6
Certificate issuer:       /CN=A25520F1E15109C50B44F56EA799FE2E685092D4
Certificate serial:       03C5ED3DD1ADB93B1ACFBC87B0D691A34C6C1389
Authority key identifier: A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa
Signing time:             Thu 03 Apr 2025 14:15:15 +0000
ROA not before:           Thu 03 Apr 2025 14:10:15 +0000
ROA not after:            Thu 02 Apr 2026 14:15:15 +0000
asID:                     263934
IP address blocks:        138.219.128.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:ed:3d:d1:ad:b9:3b:1a:cf:bc:87:b0:d6:91:a3:4c:6c:13:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25520F1E15109C50B44F56EA799FE2E685092D4
        Validity
            Not Before: Apr  3 14:10:15 2025 GMT
            Not After : Apr  2 14:15:15 2026 GMT
        Subject: CN=CB5D1F344C6C48D3BCCF04F54B275FA8E373A9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:b4:73:5c:1d:3b:46:ed:cb:05:c7:9a:81:
                    e1:a2:dc:f4:cd:b6:06:d0:41:95:2f:88:3c:a6:e3:
                    de:cf:ff:07:a5:4f:71:35:94:be:a6:5c:14:34:7a:
                    42:c6:ff:6c:e2:d9:f0:b7:6d:e7:8f:33:bc:70:ab:
                    fe:1e:94:a9:cc:5e:aa:19:97:11:e8:96:9b:50:f6:
                    19:6b:85:64:28:ed:90:32:2c:27:c4:a2:f4:6a:58:
                    52:e0:9d:48:c8:56:3b:49:1e:a9:8e:53:cb:b1:2c:
                    f6:b8:a9:30:7d:b4:cf:99:84:de:6d:db:99:03:a2:
                    40:11:06:91:02:c8:56:0f:48:63:81:56:e7:ca:50:
                    8c:0f:39:15:97:e8:42:f0:72:72:05:33:3d:d2:54:
                    8a:12:61:81:da:77:89:8d:ce:32:7f:c3:ba:c3:ed:
                    42:bd:7f:59:f2:33:9c:bb:8b:fb:4a:7d:37:ec:90:
                    95:e2:a1:2e:30:47:a6:0d:d0:d5:d3:af:57:f1:a6:
                    4c:12:e7:13:66:33:13:3e:c8:02:e1:2d:67:67:4f:
                    5e:47:ed:3f:ec:b0:d0:08:94:3c:4b:f5:06:94:11:
                    8d:b8:dd:79:0d:62:3f:60:27:ac:43:f5:1d:8f:20:
                    98:2d:aa:5a:f3:11:e0:7d:29:fc:67:c7:2c:a8:ca:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5D:1F:34:4C:6C:48:D3:BC:CF:04:F5:4B:27:5F:A8:E3:73:A9:E6
            X509v3 Authority Key Identifier:
                keyid:A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:e9:6e:a1:34:bb:10:93:b6:16:1a:58:92:52:cf:86:57:
         89:06:b2:9b:e6:12:2c:b9:6f:1d:0a:87:21:5d:a4:7d:c7:13:
         f9:75:87:56:d8:9e:39:ed:87:3b:b8:d2:ef:21:29:d6:3c:ea:
         26:bd:6f:72:e0:cd:dc:6a:6d:97:0b:f6:88:c9:a7:4d:23:a8:
         b3:19:7c:ec:6c:49:c1:47:51:98:16:6d:c1:17:19:e5:08:18:
         5b:16:6f:7d:30:fb:12:1b:bb:44:7b:6b:c2:b5:58:c2:70:9d:
         ff:1e:76:1b:30:b1:90:8e:61:1b:39:fc:82:5a:95:fb:a3:bb:
         41:a9:0e:b2:4b:48:d7:77:95:9d:e3:b6:46:ca:7b:8d:2c:a9:
         2b:fa:7f:9f:4f:f1:19:2f:c6:7e:b7:c4:e2:34:fd:28:ce:90:
         c4:be:4d:b4:8c:1c:1a:8c:ac:c1:52:9b:ce:82:fd:21:0a:0d:
         74:03:20:07:bc:ba:7d:8d:a0:91:32:10:58:ed:fd:47:1d:39:
         ce:e3:34:ff:49:ad:90:97:5d:b5:81:77:e1:cc:7f:1d:78:20:
         c7:e9:77:60:ac:db:61:37:7e:3a:05:5b:15:40:03:67:33:b0:
         64:b0:a1:8b:3b:82:bc:77:91:a5:b4:04:f0:c0:79:69:5b:78:
         8c:26:54:dc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUA8XtPdGtuTsaz7yHsNaRo0xsE4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI1NTIwRjFFMTUxMDlDNTBCNDRGNTZFQTc5OUZFMkU2
ODUwOTJENDAeFw0yNTA0MDMxNDEwMTVaFw0yNjA0MDIxNDE1MTVaMDMxMTAvBgNV
BAMTKENCNUQxRjM0NEM2QzQ4RDNCQ0NGMDRGNTRCMjc1RkE4RTM3M0E5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbbRzXB07Ru3LBceageGi3PTN
tgbQQZUviDym497P/welT3E1lL6mXBQ0ekLG/2zi2fC3beePM7xwq/4elKnMXqoZ
lxHolptQ9hlrhWQo7ZAyLCfEovRqWFLgnUjIVjtJHqmOU8uxLPa4qTB9tM+ZhN5t
25kDokARBpECyFYPSGOBVufKUIwPORWX6ELwcnIFMz3SVIoSYYHad4mNzjJ/w7rD
7UK9f1nyM5y7i/tKfTfskJXioS4wR6YN0NXTr1fxpkwS5xNmMxM+yALhLWdnT15H
7T/ssNAIlDxL9QaUEY243XkNYj9gJ6xD9R2PIJgtqlrzEeB9KfxnxyyoynsbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUy10fNExsSNO8zwT1SydfqONzqeYwHwYDVR0j
BBgwFoAUolUg8eFRCcULRPVup5n+LmhQktQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkU1a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2
cDQvMC9BMjU1MjBGMUUxNTEwOUM1MEI0NEY1NkVBNzk5RkUyRTY4NTA5MkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyNTUyMEYxRTE1MTA5QzUw
QjQ0RjU2RUE3OTlGRTJFNjg1MDkyRDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFNWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrbgDANBgkqhkiG9w0BAQsFAAOCAQEAb3Hp
bqE0uxCTthYaWJJSz4ZXiQaym+YSLLlvHQqHIV2kfccT+XWHVtieOe2HO7jS7yEp
1jzqJr1vcuDN3Gptlwv2iMmnTSOosxl87GxJwUdRmBZtwRcZ5QgYWxZvfTD7Ehu7
RHtrwrVYwnCd/x52GzCxkI5hGzn8glqV+6O7QakOsktI13eVneO2Rsp7jSypK/p/
n0/xGS/GfrfE4jT9KM6QxL5NtIwcGoyswVKbzoL9IQoNdAMgB7y6fY2gkTIQWO39
Rx05zuM0/0mtkJddtYF34cx/HXggx+l3YKzbYTd+OgVbFUADZzOwZLChizuCvHeR
pbQE8MB5aVt4jCZU3A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net