Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier:          D95hSrdt//SmoUsmVTQLpZmojPtu7g6cWWQh9diTS7s=
Subject key identifier:   A8:2B:6C:0B:34:15:44:9E:CF:64:F9:0D:6A:A9:B1:BB:0D:20:85:5B
Certificate issuer:       /CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Certificate serial:       4702F8C70BEFD6FC47BD7F60B0B81868A849B598
Authority key identifier: D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa
Signing time:             Mon 07 Apr 2025 20:20:23 +0000
ROA not before:           Mon 07 Apr 2025 20:15:23 +0000
ROA not after:            Mon 06 Apr 2026 20:20:23 +0000
asID:                     263360
IP address blocks:        191.37.136.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:02:f8:c7:0b:ef:d6:fc:47:bd:7f:60:b0:b8:18:68:a8:49:b5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
        Validity
            Not Before: Apr  7 20:15:23 2025 GMT
            Not After : Apr  6 20:20:23 2026 GMT
        Subject: CN=A82B6C0B3415449ECF64F90D6AA9B1BB0D20855B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b0:db:df:24:3c:51:b0:9a:81:0d:f1:6a:e4:
                    45:87:5c:18:87:c0:d9:d9:1d:40:c9:2c:63:db:8d:
                    dc:e3:1e:25:e2:96:c1:d8:eb:77:16:25:75:29:0d:
                    f2:26:92:b0:51:5c:82:ca:26:d5:0c:f4:07:b7:a3:
                    4c:06:56:c6:15:61:36:2f:e8:9a:a9:23:17:65:b0:
                    c1:d7:bf:4c:65:50:bb:ce:b8:a6:52:68:6e:6e:e3:
                    b5:1b:b9:3c:53:fe:c6:6a:e9:47:8d:05:ae:8a:41:
                    2e:3c:12:0f:b6:43:a6:78:2b:ac:be:2e:2f:f5:66:
                    c8:73:5e:2c:7e:d8:5b:4b:3c:ad:b9:78:f4:db:1d:
                    41:fa:84:14:f0:a2:3d:a5:40:eb:ad:f4:22:2e:81:
                    19:83:e0:50:0a:21:c4:65:59:09:76:33:4b:ac:d0:
                    4f:ca:64:7a:f6:6d:64:79:0d:f6:ac:3a:c6:14:92:
                    c5:d6:f5:41:41:8f:47:aa:65:cf:49:b8:54:21:8a:
                    c2:b6:e0:0c:52:0a:59:3d:bb:bb:e5:68:e8:23:7b:
                    92:93:3e:e0:07:3d:f2:fd:2b:3c:76:b0:55:d6:a9:
                    3b:30:91:3c:e2:49:a3:b0:37:f5:c4:6f:c1:fa:b6:
                    85:dd:1d:a0:33:67:1e:86:cb:df:30:fe:40:18:a1:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:6C:0B:34:15:44:9E:CF:64:F9:0D:6A:A9:B1:BB:0D:20:85:5B
            X509v3 Authority Key Identifier:
                keyid:D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:d1:8e:a1:a5:ab:d6:01:dc:fa:1d:f1:db:77:e3:49:30:22:
         ee:ab:d4:5e:a3:63:40:7b:e8:59:b7:34:64:91:fb:3e:66:b4:
         9d:33:27:7c:90:5a:4d:bd:7a:48:82:87:53:98:7e:60:dc:53:
         bc:ae:63:ea:20:5c:aa:09:89:91:d3:f6:30:b5:5b:93:93:b2:
         2c:71:d8:36:a7:d8:e1:af:dc:c7:93:1b:3e:b8:be:05:3b:a8:
         bd:79:9c:d4:59:b2:ad:9a:99:17:2a:be:f7:31:21:91:90:e0:
         8c:75:e8:54:e9:4d:73:f8:05:9f:e5:f4:76:f1:55:2d:f2:bd:
         5f:39:94:cf:76:7d:e2:90:3e:ed:d4:ca:b0:b5:05:d6:4b:4d:
         90:21:06:65:0e:9d:a8:d3:82:9d:f6:c2:fa:72:a3:b8:ad:ec:
         b6:8e:d4:83:c3:f3:4c:46:1f:e3:8f:af:8f:f0:57:bf:b2:81:
         5a:5e:01:dc:77:f3:00:50:d0:c7:3a:58:1a:67:57:de:a7:1b:
         ce:65:9d:5e:bd:58:6c:21:fc:38:69:1b:58:19:71:33:bf:e9:
         d2:72:e9:7f:7a:4c:70:ef:eb:bb:af:ad:05:8c:86:98:ad:60:
         49:a9:c8:99:5b:6d:7e:9a:7f:63:36:44:07:24:f0:30:20:73:
         eb:14:26:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURwL4xwvv1vxHvX9gsLgYaKhJtZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI2NDE2RTlFRUUxMDBFRTk2MjZCQzU5QkZBQzg0RjBC
QzlGNkIyOTAeFw0yNTA0MDcyMDE1MjNaFw0yNjA0MDYyMDIwMjNaMDMxMTAvBgNV
BAMTKEE4MkI2QzBCMzQxNTQ0OUVDRjY0RjkwRDZBQTlCMUJCMEQyMDg1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDksNvfJDxRsJqBDfFq5EWHXBiH
wNnZHUDJLGPbjdzjHiXilsHY63cWJXUpDfImkrBRXILKJtUM9Ae3o0wGVsYVYTYv
6JqpIxdlsMHXv0xlULvOuKZSaG5u47UbuTxT/sZq6UeNBa6KQS48Eg+2Q6Z4K6y+
Li/1ZshzXix+2FtLPK25ePTbHUH6hBTwoj2lQOut9CIugRmD4FAKIcRlWQl2M0us
0E/KZHr2bWR5DfasOsYUksXW9UFBj0eqZc9JuFQhisK24AxSClk9u7vlaOgje5KT
PuAHPfL9Kzx2sFXWqTswkTziSaOwN/XEb8H6toXdHaAzZx6Gy98w/kAYoVK/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqCtsCzQVRJ7PZPkNaqmxuw0ghVswHwYDVR0j
BBgwFoAU0mQW6e7hAO6WJrxZv6yE8LyfaykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBKM296eFpIZ1R0V3RYTUpZRUZoOTVmRjd0enAxU0RHdWkyS2FETWhm
RXkvMC9EMjY0MTZFOUVFRTEwMEVFOTYyNkJDNTlCRkFDODRGMEJDOUY2QjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNjQxNkU5RUVFMTAwRUU5
NjI2QkM1OUJGQUM4NEYwQkM5RjZCMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwSjNvenhaSGdUdFd0WE1KWUVGaDk1ZkY3dHpwMVNER3VpMkthRE1oZkV5LzAv
MzEzOTMxMmUzMzM3MmUzMTMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/JYgwDQYJKoZIhvcNAQELBQADggEBAAbRjqGl
q9YB3Pod8dt340kwIu6r1F6jY0B76Fm3NGSR+z5mtJ0zJ3yQWk29ekiCh1OYfmDc
U7yuY+ogXKoJiZHT9jC1W5OTsixx2Dan2OGv3MeTGz64vgU7qL15nNRZsq2amRcq
vvcxIZGQ4Ix16FTpTXP4BZ/l9HbxVS3yvV85lM92feKQPu3UyrC1BdZLTZAhBmUO
najTgp32wvpyo7it7LaO1IPD80xGH+OPr4/wV7+ygVpeAdx38wBQ0Mc6WBpnV96n
G85lnV69WGwh/DhpG1gZcTO/6dJy6X96THDv67uvrQWMhpitYEmpyJlbbX6af2M2
RAck8DAgc+sUJqQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net