Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3138362e3235312e302e302f32312d3332203d3e20323632383230.roa
File:                     3138362e3235312e302e302f32312d3332203d3e20323632383230.roa (raw, json)
Hash identifier:          0f8Z/1bF7moOgtaUZ/JAGcejpGlKL1VIHIQjkg23ZoU=
Subject key identifier:   11:CE:25:A7:C7:27:76:34:43:4A:38:98:89:CE:29:BB:BC:14:41:8B
Certificate issuer:       /CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
Certificate serial:       357E1D5C480F5386679E7983263000C9C271BB85
Authority key identifier: F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3138362e3235312e302e302f32312d3332203d3e20323632383230.roa
Signing time:             Wed 23 Apr 2025 14:52:43 +0000
ROA not before:           Wed 23 Apr 2025 14:47:43 +0000
ROA not after:            Wed 22 Apr 2026 14:52:43 +0000
asID:                     262820
IP address blocks:        186.251.0.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7e:1d:5c:48:0f:53:86:67:9e:79:83:26:30:00:c9:c2:71:bb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
        Validity
            Not Before: Apr 23 14:47:43 2025 GMT
            Not After : Apr 22 14:52:43 2026 GMT
        Subject: CN=11CE25A7C7277634434A389889CE29BBBC14418B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:a6:56:8b:b7:89:b3:89:93:c7:3c:c0:fc:
                    66:f7:67:a2:95:a3:ab:79:1f:a0:8f:fd:40:19:d2:
                    50:94:78:50:04:5c:d3:eb:44:88:77:1b:c4:90:15:
                    1b:28:e2:aa:77:76:42:bc:e6:d5:5a:23:41:18:bd:
                    5f:e0:ee:c7:31:a2:08:da:bc:93:6a:5c:82:fc:aa:
                    ba:94:01:cc:a4:d0:cd:23:cc:46:0f:66:12:9e:4c:
                    39:30:c8:27:fb:8e:01:7a:4f:c9:c7:b1:ca:d9:de:
                    76:f5:94:d9:82:9d:54:8c:ea:c3:05:d5:ff:d7:be:
                    34:ca:e3:f8:f4:cf:30:51:3c:b6:c1:c8:f0:64:a1:
                    78:e4:bc:94:85:d7:94:fa:10:8a:6a:f7:58:b7:4f:
                    31:ad:e9:68:4d:49:04:fa:67:36:57:4a:df:a5:33:
                    ca:ac:fa:63:9d:8c:47:71:c2:8c:29:10:69:36:c4:
                    f1:5c:74:d0:bf:a0:94:5d:b6:6b:ee:0e:e4:f1:f0:
                    69:b2:57:40:af:8d:d6:c3:e9:57:32:c0:61:b9:aa:
                    89:80:f3:a1:ff:a7:b8:33:12:4f:f0:db:71:30:0e:
                    10:45:1b:3f:f2:ce:99:3c:32:de:c0:27:c2:27:9e:
                    55:99:2d:09:2d:6f:29:b8:e8:2c:d9:c0:02:55:e1:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CE:25:A7:C7:27:76:34:43:4A:38:98:89:CE:29:BB:BC:14:41:8B
            X509v3 Authority Key Identifier:
                keyid:F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3138362e3235312e302e302f32312d3332203d3e20323632383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:3b:a9:37:39:e3:91:cb:b3:e9:18:a5:01:84:29:0a:b2:
         a4:b3:03:57:97:86:26:3c:f7:d2:cb:24:8f:26:a2:db:d6:a8:
         57:9b:2b:7e:48:c4:35:df:b2:88:fc:66:fa:63:0b:39:bd:34:
         7a:92:e4:91:cd:61:f7:61:03:22:d4:bd:61:12:f1:7d:63:83:
         83:8a:81:70:6a:ca:44:dd:ea:81:4f:e3:b1:ed:06:f4:14:18:
         19:ba:88:c3:38:32:d1:b5:41:e8:cb:dc:93:72:16:6b:8f:e8:
         e1:cf:8d:78:9e:96:fd:15:f1:dc:d7:fe:2b:0e:d3:89:bb:7e:
         8b:1a:5d:97:bf:fa:b3:bd:dc:4f:c1:6c:e4:92:a0:a6:5a:43:
         da:30:aa:5b:e1:75:0f:38:42:3a:ee:79:a6:f3:37:24:ef:58:
         3f:17:e1:f5:7b:26:de:06:27:eb:c3:d7:25:cd:14:6a:ca:18:
         c8:e5:53:3a:d8:f0:24:6e:43:a3:46:ce:02:5a:80:36:ca:30:
         c5:b1:b3:5c:9e:d6:dd:aa:3e:b5:d7:3b:f0:94:a2:4b:41:9d:
         af:11:b9:0e:de:b4:88:1c:47:60:70:ae:6c:ae:26:fd:05:d8:
         0f:89:af:85:f4:2a:f9:6b:88:12:92:34:a5:61:b7:3d:0f:79:
         0a:68:3e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net