Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa
File:                     3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          87WfTYwTVDJVhdl/Jo59j6k4vFUgoFKgjTGbvYuKu/c=
Subject key identifier:   69:C6:EB:96:61:C7:7E:04:B0:9C:CC:0D:68:EB:53:7B:17:75:E4:6C
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       175781F247F108922CAEF8C5B98FE0A7CFA84B18
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa
Signing time:             Sat 08 Feb 2025 00:51:36 +0000
ROA not before:           Sat 08 Feb 2025 00:46:36 +0000
ROA not after:            Sat 07 Feb 2026 00:51:36 +0000
asID:                     262590
IP address blocks:        138.122.248.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:57:81:f2:47:f1:08:92:2c:ae:f8:c5:b9:8f:e0:a7:cf:a8:4b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb  8 00:46:36 2025 GMT
            Not After : Feb  7 00:51:36 2026 GMT
        Subject: CN=69C6EB9661C77E04B09CCC0D68EB537B1775E46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:a3:b4:01:d4:82:e6:d2:34:69:0e:7a:19:
                    05:59:1a:7f:e0:ff:e0:05:fc:ad:cb:e1:7c:83:11:
                    3b:ea:0a:05:a8:28:c5:1c:87:42:8b:9a:29:cb:00:
                    58:9e:2a:52:62:b2:53:4a:b0:be:bb:d3:2e:de:9a:
                    47:ca:fe:20:ac:76:8f:e3:67:d7:88:83:95:d7:4c:
                    b2:87:3a:aa:79:4f:d5:68:1a:ff:20:67:82:7e:e3:
                    d3:44:dc:21:fd:95:b6:a5:0a:11:08:16:fc:e7:74:
                    72:6a:ba:5c:80:9a:29:95:c5:f4:a5:54:9d:3a:1c:
                    3a:1c:56:45:58:fc:e2:1b:70:c0:3d:72:03:bb:f1:
                    b4:b2:d6:fb:91:b3:67:3f:e8:36:6a:e6:62:09:0c:
                    ee:8e:46:90:fb:c8:fe:9f:27:a9:cd:d5:0c:44:8a:
                    6a:40:eb:06:8f:18:aa:89:5c:3a:e2:ad:d7:cd:60:
                    09:ee:1f:04:38:52:5e:23:bb:48:37:9e:da:95:15:
                    af:0f:ac:c3:4e:cb:36:6e:54:82:52:5a:2e:19:d7:
                    56:be:c0:b7:f1:f2:ad:c0:8a:8a:23:7e:10:f8:d6:
                    fe:66:9a:c7:14:4b:e7:7c:48:ee:46:fe:67:94:13:
                    b0:bc:e8:48:03:c6:e5:9e:ca:4e:fc:a6:e7:ba:6c:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C6:EB:96:61:C7:7E:04:B0:9C:CC:0D:68:EB:53:7B:17:75:E4:6C
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c9:5c:d0:e6:37:09:1f:51:0c:df:a0:b5:aa:c3:4c:2d:3a:
         4d:b2:0f:2e:ff:fa:76:bb:4b:47:03:aa:ac:8f:ee:dc:83:f7:
         23:48:1f:9f:c7:1f:65:60:08:cd:80:14:ab:cd:20:f0:37:59:
         3f:4c:7e:b4:14:40:67:d6:2e:34:a4:27:08:ba:f0:21:a6:11:
         17:03:c2:c1:30:3f:06:99:29:d9:d9:67:61:fc:97:b4:0c:1e:
         f5:d2:06:00:07:ec:79:bc:2e:65:dd:08:21:e6:00:39:ce:2a:
         24:85:56:0f:c1:5b:b9:0e:ad:f5:9e:dc:35:b7:b8:23:4d:51:
         fa:3c:4f:3d:05:be:ad:b9:fa:89:88:be:f5:d7:5d:12:92:d3:
         03:ad:29:69:3d:ec:cc:c4:de:ba:16:22:86:1d:5e:d9:a0:25:
         fa:f6:db:01:a8:01:26:97:b1:86:cd:da:fd:ef:8b:86:b3:28:
         b9:47:76:ae:f5:00:6c:31:a7:3b:53:f8:0a:47:bd:4d:22:b8:
         0c:a4:07:71:7e:fb:fa:57:20:57:78:d6:b4:b6:cf:86:68:79:
         46:9f:c1:9b:55:b9:2e:0f:91:8f:bb:66:50:3e:8f:7f:b5:a9:
         9e:f5:13:87:e4:b0:96:05:c9:4c:5e:e8:38:29:9e:bd:77:a6:
         a0:61:08:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUF1eB8kfxCJIsrvjFuY/gp8+oSxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVEQkM4QjE5NzRDMDYzMEI0RjcwNUEzRkMxNDQ5QjNG
NEZFQUMwMjAeFw0yNTAyMDgwMDQ2MzZaFw0yNjAyMDcwMDUxMzZaMDMxMTAvBgNV
BAMTKDY5QzZFQjk2NjFDNzdFMDRCMDlDQ0MwRDY4RUI1MzdCMTc3NUU0NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8aO0AdSC5tI0aQ56GQVZGn/g
/+AF/K3L4XyDETvqCgWoKMUch0KLminLAFieKlJislNKsL670y7emkfK/iCsdo/j
Z9eIg5XXTLKHOqp5T9VoGv8gZ4J+49NE3CH9lbalChEIFvzndHJqulyAmimVxfSl
VJ06HDocVkVY/OIbcMA9cgO78bSy1vuRs2c/6DZq5mIJDO6ORpD7yP6fJ6nN1QxE
impA6waPGKqJXDrirdfNYAnuHwQ4Ul4ju0g3ntqVFa8PrMNOyzZuVIJSWi4Z11a+
wLfx8q3AioojfhD41v5mmscUS+d8SO5G/meUE7C86EgDxuWeyk78pue6bCmvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUacbrlmHHfgSwnMwNaOtTexd15GwwHwYDVR0j
BBgwFoAU5dvIsZdMBjC09wWj/BRJs/T+rAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB
MUcvMC9FNURCQzhCMTk3NEMwNjMwQjRGNzA1QTNGQzE0NDlCM0Y0RkVBQzAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1REJDOEIxOTc0QzA2MzBC
NEY3MDVBM0ZDMTQ0OUIzRjRGRUFDMDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6+DANBgkqhkiG9w0BAQsFAAOCAQEAI8lc
0OY3CR9RDN+gtarDTC06TbIPLv/6drtLRwOqrI/u3IP3I0gfn8cfZWAIzYAUq80g
8DdZP0x+tBRAZ9YuNKQnCLrwIaYRFwPCwTA/Bpkp2dlnYfyXtAwe9dIGAAfsebwu
Zd0IIeYAOc4qJIVWD8FbuQ6t9Z7cNbe4I01R+jxPPQW+rbn6iYi+9dddEpLTA60p
aT3szMTeuhYihh1e2aAl+vbbAagBJpexhs3a/e+LhrMouUd2rvUAbDGnO1P4Cke9
TSK4DKQHcX77+lcgV3jWtLbPhmh5Rp/Bm1W5Lg+Rj7tmUD6Pf7WpnvUTh+SwlgXJ
TF7oOCmevXemoGEIiw==
-----END CERTIFICATE-----
Generated at Thu Feb 27 03:43:20 2025 by rpki-client on console.sobornost.net