Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa
File:                     3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa (raw, json)
Hash identifier:          ul/aMgJhRBVaFum2VpWRX+d+07Jb2qgSV4NtQ1aTyug=
Subject key identifier:   C4:3A:AE:FD:F0:87:BF:C9:C0:9D:A2:2A:E1:4B:D8:7F:46:2A:76:DE
Certificate issuer:       /CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
Certificate serial:       4B4A9E597BEE4CF5141E59370AD6ECF510837602
Authority key identifier: A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa
Signing time:             Wed 16 Oct 2024 14:48:20 +0000
ROA not before:           Wed 16 Oct 2024 14:43:20 +0000
ROA not after:            Wed 15 Oct 2025 14:48:20 +0000
asID:                     263360
IP address blocks:        191.37.138.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4a:9e:59:7b:ee:4c:f5:14:1e:59:37:0a:d6:ec:f5:10:83:76:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
        Validity
            Not Before: Oct 16 14:43:20 2024 GMT
            Not After : Oct 15 14:48:20 2025 GMT
        Subject: CN=C43AAEFDF087BFC9C09DA22AE14BD87F462A76DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:84:5e:af:8a:2a:4f:e6:33:2b:26:f0:a2:
                    d2:d3:e4:30:90:7e:c4:78:5d:18:58:17:93:20:1c:
                    99:dd:96:e0:d6:ee:eb:65:f4:f3:0e:67:fc:32:ac:
                    e2:c4:f5:e8:fb:b7:ea:0b:19:10:f0:60:c3:c2:92:
                    92:3a:ab:4d:d3:8c:3e:be:24:dd:fe:78:e7:77:95:
                    e8:69:0b:2c:6f:0d:8b:88:18:18:fa:7f:22:32:76:
                    e3:3a:87:c0:e4:f2:a6:77:d8:9d:f7:17:79:a7:28:
                    21:28:76:91:a5:4b:5e:13:38:14:18:9b:fa:19:f5:
                    9a:81:86:bd:35:8b:e7:74:b9:45:c9:8a:d1:88:39:
                    29:56:51:dc:e4:d1:31:cc:c7:dd:66:54:0b:1d:10:
                    2d:b0:84:72:8e:9c:c4:aa:e6:6a:d7:27:c4:88:95:
                    5d:0c:f7:72:38:d1:1b:77:5e:ae:4b:6c:89:24:4e:
                    f7:73:a6:18:94:04:6d:0e:a5:38:e2:b5:b3:ce:f2:
                    04:a5:e2:90:52:ae:b4:d3:80:37:4d:b6:42:0b:2f:
                    ec:b9:b1:af:39:0a:04:2e:e9:ad:c5:94:36:87:af:
                    f6:7d:03:6b:ff:73:0b:93:f6:9f:c6:bb:41:bd:af:
                    e5:13:b4:11:78:f1:f3:49:b1:cd:24:f8:2d:30:7e:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:AE:FD:F0:87:BF:C9:C0:9D:A2:2A:E1:4B:D8:7F:46:2A:76:DE
            X509v3 Authority Key Identifier:
                keyid:A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:50:e9:b8:2b:68:70:3c:52:be:66:41:56:4b:23:65:2f:74:
         60:39:cb:e3:49:d3:63:fa:8d:ee:1e:85:2f:d7:3f:42:03:39:
         a6:dd:96:72:60:46:8b:6d:0b:6a:70:fa:50:42:05:52:d9:23:
         f9:99:e0:1a:1e:5d:1e:5b:f6:6c:41:54:be:60:c9:e3:6f:b2:
         ba:06:24:cb:02:ab:dd:66:ff:eb:48:ac:25:8c:25:84:8b:67:
         37:1f:af:ed:55:47:7e:70:8b:13:54:f1:86:52:20:76:db:b6:
         c0:84:93:54:3d:47:d7:01:ad:fc:48:82:81:6e:a3:40:7f:9b:
         a6:b8:40:a1:dc:e0:fc:dd:01:78:26:bf:33:ef:d2:08:dc:a1:
         88:f4:e3:c4:eb:61:fd:74:6d:0b:2e:e1:52:50:5a:b8:5b:72:
         69:6f:c1:e2:00:a0:a8:b3:cf:73:45:29:de:9f:06:c9:2b:a1:
         82:a5:05:2e:aa:e2:ca:a4:13:6a:13:8a:cb:49:24:77:a5:12:
         64:d8:22:e1:f2:21:69:26:c7:11:05:e5:ce:dd:c0:8c:ce:05:
         bd:34:e3:ce:1b:b5:6c:29:9e:74:48:d6:fe:4d:e6:fc:3d:02:
         e1:42:46:d7:72:15:73:63:e2:e6:33:63:5e:aa:16:34:23:41:
         6f:25:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 03:26:38 2025 by rpki-client on console.sobornost.net