Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa
File:                     3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa (raw, json)
Hash identifier:          xteK1+YvBh1l69dAAyiesqcyHwDdvsk0MsbPDLjnpD0=
Subject key identifier:   57:5F:96:1C:08:9C:F6:7F:A9:4C:AB:45:5C:05:B3:9C:73:7E:9E:56
Certificate issuer:       /CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
Certificate serial:       2C0A95A7F8C1089FC5A320C7739990789AE189F5
Authority key identifier: E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa
Signing time:             Mon 07 Apr 2025 21:00:21 +0000
ROA not before:           Mon 07 Apr 2025 20:55:21 +0000
ROA not after:            Mon 06 Apr 2026 21:00:21 +0000
asID:                     270980
IP address blocks:        168.196.198.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0a:95:a7:f8:c1:08:9f:c5:a3:20:c7:73:99:90:78:9a:e1:89:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
        Validity
            Not Before: Apr  7 20:55:21 2025 GMT
            Not After : Apr  6 21:00:21 2026 GMT
        Subject: CN=575F961C089CF67FA94CAB455C05B39C737E9E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:9d:14:13:68:d3:f0:c1:41:39:ef:ad:77:
                    09:50:dd:51:dd:7f:67:f2:fb:c0:69:32:93:f7:18:
                    3c:2f:44:a5:c0:27:e7:a1:08:0d:cf:19:11:c0:d8:
                    e6:d6:b9:f4:e7:e8:ad:5f:bc:46:3f:a0:61:a6:ce:
                    ee:78:8e:cc:df:fe:65:d4:f9:16:06:5f:ed:aa:58:
                    7e:4e:12:61:31:5a:81:b6:88:eb:e8:19:7d:5d:79:
                    14:9c:b3:bd:88:93:38:26:7f:95:fb:e3:b7:a4:5e:
                    ca:07:be:5a:a0:97:b5:31:32:bc:21:d2:cd:7d:8b:
                    be:28:bd:4d:c2:62:fd:5f:fd:8c:48:60:13:fc:56:
                    eb:26:c9:5c:e8:fa:54:05:a2:a0:54:e2:b1:e0:da:
                    bc:83:7c:67:6a:b4:21:62:0c:00:5a:e0:ae:8e:1a:
                    f4:88:ab:bf:3b:72:75:9b:4f:fb:91:6a:7b:c6:47:
                    f3:1a:b8:93:e5:a7:c4:49:72:81:de:cb:33:03:25:
                    7f:b9:9a:88:cc:5c:3b:6a:1f:26:a6:a1:0f:f6:16:
                    9e:eb:58:f8:4f:fd:85:72:ff:90:ca:9d:a1:20:92:
                    1c:81:6a:1f:f5:78:ae:11:7a:8b:65:1b:10:1a:d0:
                    a7:29:16:21:e2:b1:22:79:e0:85:9d:be:69:62:21:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5F:96:1C:08:9C:F6:7F:A9:4C:AB:45:5C:05:B3:9C:73:7E:9E:56
            X509v3 Authority Key Identifier:
                keyid:E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:d1:52:8a:65:83:18:b3:ae:d9:b4:c0:16:44:f2:d7:1b:d6:
         16:39:58:4d:70:1e:2e:0f:80:36:04:47:ec:2f:3e:ad:f8:3d:
         7a:f1:b1:4a:35:c1:08:23:d5:51:4e:d9:31:8c:e8:51:eb:8e:
         12:b1:0c:d2:f1:dd:3d:19:dc:47:bd:81:ef:79:52:02:11:e1:
         a5:72:bf:08:b6:7d:53:e1:b1:ba:6e:c9:75:2a:8e:7a:b3:72:
         57:0e:02:7f:77:69:76:57:fd:98:03:0c:8a:0a:5c:4a:ab:ee:
         55:71:af:f9:88:d5:00:b0:8d:00:a3:d2:fb:8d:d2:59:24:fb:
         48:6e:21:aa:44:05:ba:86:07:1e:0e:08:28:e6:4c:ba:75:90:
         59:03:6d:cd:a7:e8:aa:b6:85:68:df:5d:b7:68:34:8d:bc:bd:
         e1:1d:2e:22:1e:b5:85:d0:af:d7:a4:ba:b6:7f:a3:43:86:6e:
         98:2c:13:df:9e:d8:7b:2d:f8:8b:25:a0:a1:f7:e0:fb:ff:03:
         86:a6:65:8e:90:82:aa:c0:d7:9a:8b:37:c6:49:ca:cc:be:7d:
         93:95:a9:4e:4f:48:20:95:9a:d6:f7:f7:4c:f4:ed:ba:cb:4e:
         0c:c3:d0:bd:c5:71:b0:91:26:f9:32:72:b7:16:aa:60:1b:44:
         f7:c2:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net