Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37372e302f32342d3234203d3e20323634333733.roa
File:                     3133312e3136312e37372e302f32342d3234203d3e20323634333733.roa (raw, json)
Hash identifier:          j84J3E3ITrnzJkfREngt9IhI9+79J4MVt54txH1C3+4=
Subject key identifier:   5A:22:89:D9:9E:95:99:73:13:00:5C:82:2F:E5:8E:F2:48:51:22:17
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       4D7AF3FF904B84C5F117E72A5E041566DDF3D0AF
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37372e302f32342d3234203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:37:40 +0000
ROA not before:           Mon 16 Dec 2024 18:32:40 +0000
ROA not after:            Mon 15 Dec 2025 18:37:40 +0000
asID:                     264373
IP address blocks:        131.161.77.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:f3:ff:90:4b:84:c5:f1:17:e7:2a:5e:04:15:66:dd:f3:d0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:32:40 2024 GMT
            Not After : Dec 15 18:37:40 2025 GMT
        Subject: CN=5A2289D99E95997313005C822FE58EF248512217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:f9:80:88:7c:32:66:2a:e2:0d:12:49:00:
                    8e:f7:5f:4c:36:5c:ff:00:7b:cf:7f:96:dc:18:c9:
                    38:67:78:91:95:7f:2a:c1:96:77:14:05:f0:83:48:
                    2e:e3:be:b0:f5:3b:d2:de:0b:78:87:cf:a2:dc:fa:
                    af:05:04:85:22:87:55:77:78:26:d6:d8:03:ec:15:
                    ef:42:1a:17:dc:06:f0:a7:2b:f5:cf:01:3f:29:dd:
                    97:55:c4:c0:fb:46:d7:fb:4d:ee:e9:82:0e:04:1c:
                    38:a7:dd:23:fc:fa:94:b4:d1:ff:c1:a6:0f:15:eb:
                    80:86:ef:80:3c:b3:88:3a:e9:56:95:87:15:d6:f7:
                    7f:78:53:08:cd:8b:ab:bb:59:64:08:9a:ac:d4:0a:
                    f6:3c:3c:1e:d7:70:ea:7a:cd:7f:e2:06:0c:c8:e5:
                    17:5a:0c:3a:1d:5b:f2:bf:7d:c7:97:21:db:bb:6f:
                    c8:e7:e0:51:fa:10:95:89:43:9e:58:cc:aa:af:3c:
                    89:00:c3:a4:d5:29:69:2b:51:09:9c:4c:0e:b0:0d:
                    23:3e:aa:1e:01:69:db:28:b8:5e:89:75:54:d2:e3:
                    83:3e:06:83:6c:c5:64:98:20:dd:8f:e4:a9:05:f8:
                    3a:b6:dc:b7:52:c0:38:e5:28:42:92:56:1f:0e:69:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:89:D9:9E:95:99:73:13:00:5C:82:2F:E5:8E:F2:48:51:22:17
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37372e302f32342d3234203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:a7:2c:b9:26:ef:91:8c:eb:07:c4:b0:e7:ed:f9:11:f2:
         c2:ba:f2:f1:92:86:b0:4e:49:d5:6d:8d:48:7b:b1:96:b6:48:
         b4:18:89:48:3a:ad:b0:3e:6a:f6:da:09:35:cc:60:15:2d:59:
         70:5f:e5:e9:ed:10:02:de:7e:3e:63:ce:28:de:3f:d7:f4:9d:
         b1:73:55:87:4f:c4:98:ad:d0:9f:c3:a1:22:cc:14:e5:1d:b9:
         a0:37:0e:a4:a9:e4:51:09:f1:ba:99:42:69:2d:27:a1:41:b2:
         be:86:3e:d6:da:9b:2a:1d:00:b6:b4:d5:03:34:0c:be:f4:b8:
         aa:6f:dc:11:a6:ad:cc:76:4f:24:63:ce:c1:23:73:3b:aa:5f:
         ef:63:7f:e0:03:62:46:a6:8c:67:18:8d:75:66:ff:99:21:f9:
         7c:4b:a0:f5:bc:ad:39:7f:f5:c6:e0:3b:1b:5e:2b:e1:57:de:
         b4:8e:03:aa:b5:32:8b:5d:e6:38:9b:d7:db:3d:88:62:64:01:
         dd:51:3d:ed:7c:83:79:da:66:f7:55:55:0f:40:c2:97:2f:49:
         52:33:b0:91:c7:cb:fd:c7:8d:8b:05:78:0b:29:38:d3:e8:03:
         23:e4:40:b2:49:28:0e:7f:d4:84:54:f7:7b:e7:ea:e9:c4:e0:
         0a:19:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 27 22:47:08 2025 by rpki-client on console.sobornost.net