Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32342d3234203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32342d3234203d3e20323633333630.roa (raw, json)
Hash identifier:          Y9wqsJVrlyBLIJIN1NAkdKH7VJCbyOEH2g1mQ9gH6Ao=
Subject key identifier:   D1:10:F4:6E:78:45:7B:C7:5E:31:20:1D:10:97:29:8A:F8:0E:AC:B8
Certificate issuer:       /CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Certificate serial:       78D0D31028EBEC39C054FD91EA71CDEBF8DE641A
Authority key identifier: D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32342d3234203d3e20323633333630.roa
Signing time:             Mon 07 Apr 2025 20:20:23 +0000
ROA not before:           Mon 07 Apr 2025 20:15:23 +0000
ROA not after:            Mon 06 Apr 2026 20:20:23 +0000
asID:                     263360
IP address blocks:        191.37.136.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d0:d3:10:28:eb:ec:39:c0:54:fd:91:ea:71:cd:eb:f8:de:64:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
        Validity
            Not Before: Apr  7 20:15:23 2025 GMT
            Not After : Apr  6 20:20:23 2026 GMT
        Subject: CN=D110F46E78457BC75E31201D1097298AF80EACB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:fb:95:8a:14:c2:77:c5:a3:a8:45:ef:3a:
                    64:9d:7b:b4:41:26:7b:f0:a1:96:bb:d5:6b:13:b9:
                    0c:dd:95:32:40:fa:74:65:23:e2:ae:4b:e5:8c:c4:
                    df:80:40:63:c4:0a:36:06:cb:2a:3a:8d:83:e0:78:
                    60:c5:a7:07:83:72:1f:68:a8:4d:a5:e2:3e:02:31:
                    b1:e0:b9:92:1a:7d:41:e3:8d:e4:21:68:8c:01:e9:
                    62:77:27:03:3e:88:f2:d4:48:a5:84:d3:ce:ff:36:
                    d8:6c:c4:93:57:49:b1:65:59:21:ec:8a:83:7d:5e:
                    91:60:5a:b3:ea:72:56:c4:be:c7:c7:9b:85:c5:bc:
                    3f:30:35:07:ad:be:bd:9f:5c:f8:13:b1:ae:bb:74:
                    b4:d3:a8:83:1a:4c:82:1c:dd:00:77:d2:8f:5b:a3:
                    ce:1d:11:65:62:48:08:65:b9:97:7e:86:7d:cb:71:
                    c9:e9:61:88:b3:25:b6:69:14:a8:cf:8b:14:14:36:
                    8e:37:68:ca:92:2f:5b:bf:a7:e2:21:c4:50:0d:61:
                    6d:22:b3:8a:39:35:e7:89:23:80:03:e5:ad:3d:d7:
                    d2:f6:9c:18:00:7c:88:98:71:13:da:96:6b:82:7b:
                    85:65:66:f1:42:84:c1:8e:e1:9c:3a:16:26:e2:84:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:10:F4:6E:78:45:7B:C7:5E:31:20:1D:10:97:29:8A:F8:0E:AC:B8
            X509v3 Authority Key Identifier:
                keyid:D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32342d3234203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:91:0b:74:83:17:8a:8d:00:ca:87:e8:6a:8f:e6:da:1f:26:
         14:dd:3b:c8:27:6a:cc:bc:18:1e:a0:b2:07:a5:be:4e:89:ca:
         ad:f3:6d:76:42:41:de:28:39:12:6f:60:c3:a6:5d:bd:30:af:
         48:b0:65:9e:9d:ef:7d:58:50:d2:33:76:42:ed:55:06:e9:8a:
         fc:16:8d:a9:a3:29:99:3e:c6:54:e6:42:e8:5f:69:52:d1:62:
         48:18:c2:8d:0d:62:6b:ba:2e:6e:83:97:78:79:c4:f3:bd:4a:
         90:f0:6a:4e:76:c4:9e:4a:0a:09:7c:ee:a5:69:a3:7b:2e:11:
         68:35:80:88:20:65:2b:53:f2:33:c0:ea:fa:c2:4c:65:ea:7f:
         2d:07:a6:cf:8d:b3:a6:b7:97:45:bd:fc:f9:38:20:f6:8f:65:
         91:ca:20:f8:64:ec:4d:4c:11:f8:6a:4f:1e:7e:ce:fa:ab:c1:
         9c:6d:51:4a:69:10:c3:65:a1:0d:89:9f:30:fb:25:73:0e:ed:
         21:e6:d2:45:b0:ed:b9:71:4b:4b:e1:3a:de:4a:f7:53:81:76:
         0c:b4:6e:ac:c2:ee:fd:ad:3f:98:02:64:b1:8f:de:bd:82:9f:
         94:05:62:8c:e2:95:a8:14:e9:aa:a9:db:d1:6e:d3:f6:a6:9a:
         97:ab:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net