Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37362e302f32342d3234203d3e20323634333733.roa
File:                     3133312e3136312e37362e302f32342d3234203d3e20323634333733.roa (raw, json)
Hash identifier:          hwxCbTelRtcjxun1D9O6rGYV34/n5fAY7FXFvgmY0pA=
Subject key identifier:   01:97:C9:81:9D:08:5E:43:B0:12:54:98:9F:39:14:98:30:F6:B0:91
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       6C03CC202C29517FBE2C3A2C9F46AD9E7A320BF9
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37362e302f32342d3234203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:37:37 +0000
ROA not before:           Mon 16 Dec 2024 18:32:37 +0000
ROA not after:            Mon 15 Dec 2025 18:37:37 +0000
asID:                     264373
IP address blocks:        131.161.76.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:03:cc:20:2c:29:51:7f:be:2c:3a:2c:9f:46:ad:9e:7a:32:0b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:32:37 2024 GMT
            Not After : Dec 15 18:37:37 2025 GMT
        Subject: CN=0197C9819D085E43B01254989F39149830F6B091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:70:0a:09:47:45:1c:7f:ef:77:6e:ce:bb:
                    bd:6b:c6:15:93:b6:d9:33:19:68:82:fa:f2:43:e3:
                    68:c7:b8:55:94:c7:d8:f0:c5:9a:a8:6b:e4:cf:1a:
                    43:57:43:3c:4d:bd:1a:52:83:71:d5:c8:28:f6:5c:
                    62:97:cf:25:38:98:11:29:b8:1a:e0:1c:3e:ad:41:
                    23:77:c9:95:ad:03:70:4a:6e:83:18:fc:b4:1c:f7:
                    4b:b5:f6:c9:28:d2:47:e8:37:1b:c5:f4:6f:99:d5:
                    c3:e8:1a:43:ba:f8:a8:3d:9c:db:01:9e:61:4d:55:
                    dc:cb:27:03:73:c7:9a:c9:77:96:2f:59:29:d1:26:
                    cd:97:04:d3:16:66:4c:f0:3d:10:90:b9:c8:7e:d1:
                    8f:7c:2e:e1:19:9e:83:a3:cc:d0:53:64:b7:49:a1:
                    4a:79:3f:0c:9c:80:90:0a:4f:f7:55:95:16:91:75:
                    5b:c7:c5:47:2c:69:ee:06:0a:ba:b0:16:62:13:29:
                    78:10:f0:27:c5:70:61:0c:cb:fe:89:73:95:43:e3:
                    7c:92:48:a5:46:b4:92:96:08:d7:7f:cc:36:83:da:
                    08:b5:02:0b:f4:b2:e9:50:f8:6d:3f:fa:76:73:83:
                    bd:8c:8b:ab:50:e1:53:d6:5a:18:be:5d:16:36:47:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:97:C9:81:9D:08:5E:43:B0:12:54:98:9F:39:14:98:30:F6:B0:91
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37362e302f32342d3234203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:2b:a2:e3:d4:88:fc:80:50:36:9c:af:7b:8f:8d:da:62:0f:
         d9:31:95:83:7f:74:1e:63:6a:e7:35:6b:29:6e:a1:6e:1a:3f:
         f1:99:e2:c3:e4:fd:40:23:23:79:f7:a9:f4:96:6b:20:a2:49:
         18:3e:fd:78:81:49:ea:99:5a:22:68:fa:a2:c8:54:28:0a:00:
         26:f3:10:17:07:56:b7:52:63:de:38:c2:17:d0:7b:90:60:7b:
         0f:4d:72:3d:4c:53:fd:2e:88:94:2b:32:3c:ea:c4:44:d2:bc:
         7a:97:31:1d:9b:46:5c:3d:ff:db:c3:f0:aa:de:64:4e:67:8c:
         f1:4c:22:d8:17:9e:17:eb:49:b8:b7:51:01:7d:4a:15:87:3a:
         e9:af:58:5c:5a:93:d4:07:bf:e9:cc:7e:ef:8b:ab:eb:36:8b:
         7e:70:1d:3e:c6:69:f6:21:26:40:e8:c6:4c:18:50:a1:24:ec:
         60:a4:1f:a9:ac:42:47:25:5b:4f:6c:80:97:05:43:90:4c:e9:
         3a:3b:4f:80:15:18:65:77:cb:6e:46:84:c4:76:3c:7d:c0:e4:
         85:b2:17:94:46:c1:6d:69:5a:b3:82:d1:15:cf:d4:8b:c8:ea:
         93:6e:8a:11:70:e6:63:8f:99:ce:3b:d5:20:bf:54:12:a3:97:
         97:fa:7e:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbAPMICwpUX++LDosn0atnnoyC/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxMDNCOEU3MTc5MjQwQzNDMzg0QkY5MjU5NDA1MUVC
RDc0MjUwODAeFw0yNDEyMTYxODMyMzdaFw0yNTEyMTUxODM3MzdaMDMxMTAvBgNV
BAMTKDAxOTdDOTgxOUQwODVFNDNCMDEyNTQ5ODlGMzkxNDk4MzBGNkIwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xHAKCUdFHH/vd27Ou71rxhWT
ttkzGWiC+vJD42jHuFWUx9jwxZqoa+TPGkNXQzxNvRpSg3HVyCj2XGKXzyU4mBEp
uBrgHD6tQSN3yZWtA3BKboMY/LQc90u19sko0kfoNxvF9G+Z1cPoGkO6+Kg9nNsB
nmFNVdzLJwNzx5rJd5YvWSnRJs2XBNMWZkzwPRCQuch+0Y98LuEZnoOjzNBTZLdJ
oUp5PwycgJAKT/dVlRaRdVvHxUcsae4GCrqwFmITKXgQ8CfFcGEMy/6Jc5VD43yS
SKVGtJKWCNd/zDaD2gi1Agv0sulQ+G0/+nZzg72Mi6tQ4VPWWhi+XRY2R8W1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAZfJgZ0IXkOwElSYnzkUmDD2sJEwHwYDVR0j
BBgwFoAUwBA7jnF5JAw8OEv5JZQFHr10JQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01vV3M0a0pTNkxqaHRHdThwWFp4Rkw1QnFtSFJjZWZncmNQbjJZam1D
cU4vMC9DMDEwM0I4RTcxNzkyNDBDM0MzODRCRjkyNTk0MDUxRUJENzQyNTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMTAzQjhFNzE3OTI0MEMz
QzM4NEJGOTI1OTQwNTFFQkQ3NDI1MDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNb1dzNGtKUzZMamh0R3U4cFhaeEZMNUJxbUhSY2VmZ3JjUG4yWWptQ3FOLzAv
MzEzMzMxMmUzMTM2MzEyZTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDoUwwDQYJKoZIhvcNAQELBQADggEBAAQrouPU
iPyAUDacr3uPjdpiD9kxlYN/dB5jauc1ayluoW4aP/GZ4sPk/UAjI3n3qfSWayCi
SRg+/XiBSeqZWiJo+qLIVCgKACbzEBcHVrdSY944whfQe5Bgew9Ncj1MU/0uiJQr
MjzqxETSvHqXMR2bRlw9/9vD8KreZE5njPFMItgXnhfrSbi3UQF9ShWHOumvWFxa
k9QHv+nMfu+Lq+s2i35wHT7GafYhJkDoxkwYUKEk7GCkH6msQkclW09sgJcFQ5BM
6To7T4AVGGV3y25GhMR2PH3A5IWyF5RGwW1pWrOC0RXP1IvI6pNuihFw5mOPmc47
1SC/VBKjl5f6fhs=
-----END CERTIFICATE-----
Generated at Thu Mar 27 22:47:08 2025 by rpki-client on console.sobornost.net