Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37382e302f32332d3233203d3e20323634333733.roa
File:                     3133312e3136312e37382e302f32332d3233203d3e20323634333733.roa (raw, json)
Hash identifier:          46dEQcV15CDEZDK+IbeS1U3oeyPdUJ5jwy1nzJtQL2M=
Subject key identifier:   91:12:3D:E2:96:F9:6A:41:4B:FE:D9:8A:D4:CB:E7:7A:52:B5:3F:5E
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       47326F4CA1851175EC8D57524AFF684012F79B46
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37382e302f32332d3233203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:37:43 +0000
ROA not before:           Mon 16 Dec 2024 18:32:43 +0000
ROA not after:            Mon 15 Dec 2025 18:37:43 +0000
asID:                     264373
IP address blocks:        131.161.78.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:6f:4c:a1:85:11:75:ec:8d:57:52:4a:ff:68:40:12:f7:9b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:32:43 2024 GMT
            Not After : Dec 15 18:37:43 2025 GMT
        Subject: CN=91123DE296F96A414BFED98AD4CBE77A52B53F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:7a:69:bd:80:ce:50:26:9e:76:3a:1d:00:
                    b7:8e:41:5e:9c:42:61:36:67:df:6e:1c:17:03:37:
                    79:bf:dd:8f:60:68:48:d3:25:c1:08:4a:7f:7e:78:
                    e0:9e:48:78:2d:75:13:66:62:df:16:3f:cb:9f:96:
                    0e:04:6b:7c:28:20:bd:30:aa:3c:16:f3:90:9e:77:
                    21:0e:04:a5:b9:74:bc:1c:63:c5:36:79:f7:b2:34:
                    58:3d:af:54:01:30:84:74:32:fc:1a:bc:f7:27:58:
                    6d:60:73:03:c2:66:ef:7e:7c:99:25:da:71:7c:b2:
                    f0:f3:7c:06:d5:db:33:f8:c9:75:71:57:b1:51:82:
                    36:0f:83:3c:b6:bf:39:7c:87:aa:99:3e:18:72:26:
                    d0:c2:1e:3d:25:fc:ab:99:05:05:20:0a:d2:0c:47:
                    fd:98:28:7e:2c:2b:53:e9:c1:b0:db:c7:04:e9:45:
                    d2:60:eb:58:79:24:03:88:0e:06:91:bb:b5:51:ed:
                    af:43:42:4a:97:01:99:a6:bf:86:95:41:ef:29:51:
                    73:cd:fd:bd:0b:ad:87:62:16:3e:89:6b:5a:8c:01:
                    49:2f:ed:76:02:35:14:6b:d5:66:f7:02:e9:57:4c:
                    b4:42:17:d6:54:f8:67:0e:b3:19:e1:ca:13:85:11:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:12:3D:E2:96:F9:6A:41:4B:FE:D9:8A:D4:CB:E7:7A:52:B5:3F:5E
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37382e302f32332d3233203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:88:4a:62:75:e8:bc:64:4e:a4:99:c9:99:f0:74:99:9b:ad:
         a0:39:7c:2f:d0:47:4a:60:d8:01:04:82:89:5c:4b:c9:92:00:
         aa:3b:eb:ff:56:d6:75:8a:3f:2b:cb:49:0d:92:18:4b:ce:b3:
         b0:c7:5d:48:24:0e:07:d7:5a:b8:9d:5b:09:c7:75:87:5f:f2:
         7f:71:3c:76:b9:c2:86:db:4a:5a:1a:ce:02:0c:c5:f2:f5:4d:
         34:be:11:7d:58:49:77:e0:9c:89:bf:91:24:44:d2:f2:da:90:
         51:de:d4:eb:ae:d0:a5:2e:ac:a3:87:ac:bc:f2:23:5e:02:b3:
         12:60:e7:c5:33:3d:1e:9b:a8:dc:cf:da:51:f5:8f:73:68:67:
         f3:9e:0d:78:5a:06:eb:5a:45:45:d0:08:7f:92:20:22:d3:db:
         90:b4:43:65:ea:43:21:ae:73:5d:e8:74:f5:3e:d4:fa:43:c1:
         fb:e6:69:92:c6:16:d6:82:d6:01:fa:e9:c2:f4:fa:82:63:1c:
         d3:ac:a2:38:f0:6e:c4:78:93:18:52:53:5b:6b:49:8e:64:df:
         9c:ec:6b:ea:77:56:1f:d3:80:1c:9c:9e:3e:0e:e0:a6:87:dc:
         6c:f6:32:a3:15:e4:ab:7c:10:9d:76:78:76:cb:9a:d6:85:3b:
         63:81:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 27 22:47:08 2025 by rpki-client on console.sobornost.net