Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa (raw, json)
Hash identifier:          3bvgQWRl0YM/XhSQb2dfqMSXs7xsJ01cePfAa8z76ZA=
Subject key identifier:   D7:17:E4:02:33:E0:73:87:52:A9:D2:D4:24:49:7B:CC:FD:20:ED:19
Certificate issuer:       /CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Certificate serial:       139AA9F43B53B4B76E2F3B40B3CDD31263557EC1
Authority key identifier: D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
Signing time:             Mon 07 Apr 2025 20:20:23 +0000
ROA not before:           Mon 07 Apr 2025 20:15:23 +0000
ROA not after:            Mon 06 Apr 2026 20:20:23 +0000
asID:                     263360
IP address blocks:        191.37.136.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9a:a9:f4:3b:53:b4:b7:6e:2f:3b:40:b3:cd:d3:12:63:55:7e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
        Validity
            Not Before: Apr  7 20:15:23 2025 GMT
            Not After : Apr  6 20:20:23 2026 GMT
        Subject: CN=D717E40233E0738752A9D2D424497BCCFD20ED19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:a8:50:1c:88:64:eb:a8:ad:62:44:99:f9:
                    46:cf:9a:cb:aa:83:15:36:f2:0f:a9:a5:a4:95:4b:
                    0d:ea:bd:e4:99:05:ad:46:34:37:dd:be:28:9e:b8:
                    dd:66:73:2b:46:35:41:d3:03:08:24:18:74:e2:79:
                    3a:c4:f9:5a:87:0d:3b:b7:c7:f0:1a:4a:bf:e2:d5:
                    7b:64:c0:e1:c9:3e:11:b9:9b:92:73:4e:c2:9e:de:
                    9f:50:d2:4e:a0:f2:7b:43:a5:55:76:9b:f9:8c:bb:
                    53:9a:4b:04:4b:5c:fb:24:33:66:b9:80:72:24:58:
                    fc:63:d9:9d:c0:84:a6:4a:53:fe:c8:79:be:d1:31:
                    9d:db:c4:40:88:9a:9a:fb:9d:76:de:9a:ec:93:a9:
                    c5:8d:a8:1d:46:87:05:9c:4d:d3:d4:aa:e7:25:39:
                    c3:26:0e:37:52:2f:01:f8:f3:dc:29:e9:9f:a4:9a:
                    bc:46:0e:a6:f3:48:34:46:cd:38:52:33:97:48:df:
                    e3:da:ca:e8:26:6c:93:27:04:70:d8:d8:03:02:c8:
                    63:26:c8:87:ca:11:0d:c6:7b:bc:1c:84:eb:27:d9:
                    d2:4a:79:92:e3:68:33:e5:86:ca:45:95:f0:5a:0c:
                    81:83:e8:15:99:81:78:da:c9:04:da:45:b1:63:32:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:17:E4:02:33:E0:73:87:52:A9:D2:D4:24:49:7B:CC:FD:20:ED:19
            X509v3 Authority Key Identifier:
                keyid:D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:37:b4:64:b7:15:23:a5:0e:26:e8:eb:24:b8:8f:52:d2:6f:
         d7:5a:fd:c6:7b:c1:24:b7:1a:f6:e3:b4:3b:80:c2:88:52:02:
         4b:70:47:9d:ad:07:10:b8:51:ed:8e:d0:d4:48:25:c6:74:89:
         75:76:4d:5c:d3:18:88:ed:46:5e:aa:38:b1:6d:40:95:22:41:
         57:17:22:0f:e4:1f:ef:a6:d7:d7:26:62:c7:93:f9:f4:78:e4:
         f7:5e:d4:c5:80:12:00:50:f9:eb:e2:51:e5:95:61:5e:be:5c:
         5c:a9:2f:d3:1e:67:f2:27:21:b6:d7:01:1b:a4:a4:ba:d5:35:
         b8:0a:3c:61:61:89:4d:96:52:f0:0b:a5:d1:93:b6:65:f9:14:
         f1:51:4f:ec:b0:19:b0:53:b3:11:cd:17:f3:76:fc:89:c6:8f:
         29:0d:35:dd:05:9e:1e:c6:df:e3:3a:02:6c:98:e7:29:a8:e2:
         3e:39:5e:dc:5d:76:56:51:d0:a0:10:07:f5:b7:04:67:c7:06:
         4d:84:47:85:82:18:4d:22:da:4b:3a:84:ab:b3:bc:1c:9e:89:
         95:7b:10:d8:46:51:7c:63:f0:72:07:99:f2:95:b8:4f:92:12:
         00:59:52:9d:62:0a:0d:a9:98:eb:0a:5e:f2:52:e7:a5:a9:22:
         38:38:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net