Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37382e302f32342d3234203d3e20323634333733.roa
File:                     3133312e3136312e37382e302f32342d3234203d3e20323634333733.roa (raw, json)
Hash identifier:          LuD1ZGMmJUL6XpPWHhm8MmFHJ+AwM+wYMxnf4QpSsQ0=
Subject key identifier:   11:E7:4B:94:28:27:3C:99:C5:7B:00:02:71:5D:1D:56:8D:F1:B2:2E
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       17F47F8660ADB4D9D886B49811AC7BAD24D8A6A0
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37382e302f32342d3234203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:37:46 +0000
ROA not before:           Mon 16 Dec 2024 18:32:46 +0000
ROA not after:            Mon 15 Dec 2025 18:37:46 +0000
asID:                     264373
IP address blocks:        131.161.78.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f4:7f:86:60:ad:b4:d9:d8:86:b4:98:11:ac:7b:ad:24:d8:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:32:46 2024 GMT
            Not After : Dec 15 18:37:46 2025 GMT
        Subject: CN=11E74B9428273C99C57B0002715D1D568DF1B22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:f1:05:ec:32:85:d2:0f:63:20:e0:84:f2:
                    56:be:5d:57:a7:d4:cf:2e:19:d5:d4:2b:22:ef:33:
                    e3:33:9c:07:19:f4:81:9c:94:b1:2f:28:64:d0:c4:
                    55:51:cd:7d:6b:d3:5e:65:d3:e4:a8:55:e6:81:fc:
                    e9:50:a9:de:8d:bb:e7:98:3b:a1:3b:93:c1:60:79:
                    13:e5:53:c0:3d:54:38:57:b7:65:11:d0:0e:d3:89:
                    66:b5:7a:35:57:06:25:f3:2f:de:10:7d:0b:c2:33:
                    de:e8:e0:da:9c:ba:c2:3c:27:9c:1e:4f:60:92:66:
                    75:08:26:38:ed:12:d9:bd:b5:04:74:f2:04:b2:3b:
                    13:eb:9a:f8:d4:d8:36:26:47:cf:c2:ab:83:be:7d:
                    a1:58:7a:9a:e6:c8:11:9b:ce:14:72:c1:e9:2d:ae:
                    3f:a4:dc:dd:80:01:c1:82:84:ff:0d:65:ef:ff:95:
                    22:f4:7a:6e:7e:b3:02:dc:7b:65:25:4a:81:a6:a1:
                    b6:01:21:f1:9c:a2:5e:5e:27:a6:03:d2:cc:50:7b:
                    ea:31:0c:55:d3:31:cf:17:96:23:30:20:88:ea:ee:
                    47:76:07:cc:de:88:6e:8c:3d:ad:a0:95:aa:fb:55:
                    7c:df:9a:9f:6c:3f:d2:a3:6a:8c:31:ef:cf:ee:bb:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E7:4B:94:28:27:3C:99:C5:7B:00:02:71:5D:1D:56:8D:F1:B2:2E
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/3133312e3136312e37382e302f32342d3234203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3f:db:c8:ca:4e:00:f3:62:f6:c5:63:46:f0:6a:60:54:a5:
         48:7b:6f:33:d9:bf:ba:f2:e8:8c:9e:6f:2f:79:64:ad:57:12:
         5e:d1:7d:ee:11:97:67:81:ea:25:e3:a6:91:e3:97:f1:3b:25:
         e0:46:a6:a0:0b:bf:d7:24:78:0a:5b:74:1f:88:56:17:01:74:
         cc:f4:6d:bc:b0:17:bb:59:83:9c:73:82:fc:a1:ba:2b:2e:2f:
         a0:64:ef:a9:3e:81:34:b9:08:77:74:ee:1b:8a:9c:d4:8f:0c:
         16:60:fa:f5:15:eb:90:ac:a0:26:73:d1:93:56:6a:99:03:e9:
         34:2b:d6:42:80:87:fc:a9:b1:9b:b8:d3:c3:58:34:cd:8b:0a:
         11:62:93:f1:b7:8d:1f:8e:f1:7e:4a:12:90:30:26:83:51:7b:
         7e:ca:ca:d9:eb:51:fe:d2:d1:b2:ab:e3:65:0e:fc:14:e6:12:
         99:92:ce:97:fc:7b:c2:20:02:d5:35:e9:3f:28:36:2e:26:c4:
         cf:fd:ad:a4:1b:07:94:8b:c6:bf:43:f9:fe:90:61:14:fd:11:
         c0:02:04:92:e9:48:4f:eb:9c:cf:5f:c0:4a:22:ee:6b:d2:97:
         e8:ae:6c:e8:bc:c1:37:be:a8:d4:fe:4c:76:06:1d:2a:f1:b3:
         ca:75:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 27 22:47:08 2025 by rpki-client on console.sobornost.net