Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37362e302f32322d3232203d3e20323634333733.roa
File:                     3133312e3136312e37362e302f32322d3232203d3e20323634333733.roa (raw, json)
Hash identifier:          VZjlgS7F0kmGRPqy+hZOPRI5RgHNR10HOcD63/1ZQlA=
Subject key identifier:   85:FF:3A:35:D7:95:38:37:88:E3:31:9B:A7:30:48:4F:8E:0D:DC:6B
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       2C07DA12CB46CA380DCFAE72618CE5EFF893A852
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37362e302f32322d3232203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:37:30 +0000
ROA not before:           Mon 16 Dec 2024 18:32:30 +0000
ROA not after:            Mon 15 Dec 2025 18:37:30 +0000
asID:                     264373
IP address blocks:        131.161.76.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:07:da:12:cb:46:ca:38:0d:cf:ae:72:61:8c:e5:ef:f8:93:a8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:32:30 2024 GMT
            Not After : Dec 15 18:37:30 2025 GMT
        Subject: CN=85FF3A35D795383788E3319BA730484F8E0DDC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:dd:c3:a3:ba:90:3b:b3:7e:66:83:66:85:
                    47:6b:c6:89:13:13:d0:1a:dc:c0:d3:f2:f5:4e:fe:
                    cd:32:77:f2:04:de:24:ea:b7:83:e3:a5:db:90:15:
                    9d:a0:07:60:6d:38:56:9f:d5:cc:9d:18:17:de:7b:
                    e8:48:3f:f0:7a:25:61:82:45:28:2d:8d:6d:f5:4a:
                    82:d4:e4:1b:c5:9f:e3:39:14:b6:06:7c:8b:13:c5:
                    da:a3:0a:ad:2c:83:a2:fc:af:2e:7b:4c:c7:9c:d6:
                    bc:0e:33:87:7c:be:5e:6a:ba:80:b2:aa:93:ef:37:
                    01:b2:fa:ab:75:00:de:72:1c:d2:60:00:8a:04:f1:
                    ca:3c:76:8a:7c:2a:55:74:b6:60:ec:de:1f:ec:8f:
                    ff:e0:e8:66:ef:bb:bd:f8:bb:5a:90:bf:27:20:22:
                    d8:56:9d:4e:50:84:11:2a:3c:de:d3:9e:f7:30:6b:
                    14:6a:76:b5:55:87:ed:58:0f:39:6c:98:80:12:94:
                    a3:5f:63:05:fc:97:1a:ef:07:78:09:80:0c:d0:22:
                    3f:07:2e:c3:18:ae:43:c5:2b:9a:20:f5:a9:62:40:
                    40:8e:3c:cc:a3:b3:f0:e6:6b:ae:6c:34:ae:53:2a:
                    68:97:89:2b:b2:9b:4f:14:d6:54:bc:dd:69:2b:37:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:3A:35:D7:95:38:37:88:E3:31:9B:A7:30:48:4F:8E:0D:DC:6B
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37362e302f32322d3232203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:91:cd:67:51:dc:f6:19:06:cc:49:52:2e:6f:a6:8c:f0:5f:
         67:db:2a:80:06:19:8a:75:86:9d:36:f0:05:5a:b8:b6:a2:71:
         c2:64:f7:9d:33:11:7d:7d:01:14:07:23:ef:83:c5:bd:1b:ec:
         9c:fd:77:13:6a:31:3a:a3:9d:a9:cc:97:b1:76:bd:29:e9:99:
         bb:b1:9c:49:7c:cb:d5:4a:99:59:6e:d0:1e:ab:32:78:2c:f3:
         e6:ba:9f:2f:c0:16:ea:c8:d7:08:a2:ab:44:2d:2e:9c:8f:3d:
         4d:d3:62:16:34:5d:63:6e:43:57:21:48:0d:70:02:d6:31:08:
         29:8a:96:4e:55:cd:92:2c:32:8c:07:fd:c1:2a:07:d1:af:09:
         9d:b4:ad:b7:4f:f8:7b:42:49:1e:5b:cc:dc:0f:37:e2:2a:d4:
         5c:f3:75:16:bf:ec:c0:7d:f1:a4:3e:22:74:5e:22:c5:1c:af:
         2b:44:fe:4e:2e:fe:8a:71:d3:e8:b6:e2:4d:88:de:8c:04:59:
         6f:27:8e:3d:52:65:7b:e8:e8:cf:e1:b5:80:46:43:a0:1f:f2:
         fe:34:50:7b:c2:27:ca:ba:a4:2f:8b:9c:d8:fd:cc:d3:a9:92:
         b2:46:87:7f:87:e7:76:7e:ef:e2:0e:bf:92:9d:49:ca:45:1d:
         12:29:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 27 22:47:08 2025 by rpki-client on console.sobornost.net