Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa
File:                     3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          SeJqOHBtkiTuTQMEwQQJRo1RUxwJf3mDuJhQQEk6/yg=
Subject key identifier:   A3:66:55:33:83:1E:F2:9C:AF:51:A7:51:A2:69:B5:12:33:22:58:D6
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       637A53CDCFEAC1F7E936AE46C545B556C083E3FC
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa
Signing time:             Wed 12 Feb 2025 18:54:39 +0000
ROA not before:           Wed 12 Feb 2025 18:49:39 +0000
ROA not after:            Wed 11 Feb 2026 18:54:39 +0000
asID:                     262590
IP address blocks:        138.122.249.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7a:53:cd:cf:ea:c1:f7:e9:36:ae:46:c5:45:b5:56:c0:83:e3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb 12 18:49:39 2025 GMT
            Not After : Feb 11 18:54:39 2026 GMT
        Subject: CN=A3665533831EF29CAF51A751A269B512332258D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:ff:02:f0:71:9c:71:cf:9c:a1:cf:e3:ac:
                    ae:ce:c1:ba:23:6d:5a:1a:34:3d:91:4b:26:32:f2:
                    33:88:86:82:9a:c0:8e:fa:2d:b3:28:86:95:bb:20:
                    a9:e7:63:52:0b:dc:c4:ae:08:0b:09:fe:6f:30:40:
                    a2:c1:5f:2b:d3:dd:f9:7c:50:d1:05:60:b3:65:ab:
                    a7:5e:61:2e:92:57:3b:2d:61:e2:bb:50:83:30:60:
                    81:63:cd:15:63:0c:94:49:7b:f6:04:c7:22:25:98:
                    4a:37:ab:35:aa:b2:49:95:b9:e1:f8:21:a8:bf:ad:
                    14:c2:dc:f0:1d:60:3b:70:0c:4f:85:84:7c:18:70:
                    77:55:18:84:71:48:66:d6:94:71:4e:87:5e:9a:1f:
                    8e:fa:a6:28:45:9f:9a:40:c9:25:4a:84:d2:4c:a7:
                    c3:22:5a:6c:66:66:94:2d:63:38:c9:04:88:57:7b:
                    e0:f6:e2:67:8a:45:da:90:d1:91:10:ba:36:14:c9:
                    6f:17:1f:58:43:8c:1b:6d:31:76:5b:5b:51:49:6c:
                    aa:91:11:73:2f:d6:84:6a:2d:ef:ed:f3:b6:12:58:
                    7b:8f:bb:20:f6:95:89:d4:a3:9e:8d:24:64:94:b7:
                    20:fc:59:15:3a:eb:97:b0:7b:1e:33:6d:3b:2b:f5:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:66:55:33:83:1E:F2:9C:AF:51:A7:51:A2:69:B5:12:33:22:58:D6
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f5:56:3d:c8:60:7f:f3:e5:cb:3b:1b:c3:0a:2d:e4:a6:b7:
         b4:bc:bf:37:fb:61:81:bf:01:22:bd:df:01:26:cc:0f:5f:d6:
         ec:4c:66:61:cc:d6:56:24:cc:c2:51:30:65:5b:4d:99:7a:cb:
         5c:28:f7:6c:be:81:39:75:14:55:a2:c2:4e:fd:81:e8:d8:4a:
         a2:5e:c9:be:69:c2:fd:07:33:6c:9d:cc:ca:dd:37:1e:a2:69:
         5b:97:bf:0b:34:37:70:30:d8:a8:3e:54:89:8f:c2:97:c8:2c:
         6b:28:a6:19:bf:69:ef:3e:b6:a3:32:af:4d:63:07:33:d8:ac:
         f8:65:54:80:dc:1c:86:78:32:7f:22:dd:03:4b:cf:db:63:7f:
         71:31:3f:14:b3:67:d4:8b:1a:21:39:76:88:d1:cd:56:41:00:
         9c:1f:fc:de:a3:6f:6d:91:de:82:e9:44:0d:17:30:cc:2f:23:
         c1:12:2e:0f:e1:23:38:34:47:74:29:48:e9:21:7b:58:70:d2:
         d8:4c:50:6b:c9:98:19:62:52:18:ae:21:81:bf:63:25:b3:76:
         0b:49:07:5d:03:d5:46:44:57:10:39:86:8f:68:28:03:f0:ae:
         19:5e:9c:81:73:30:04:f8:99:31:c8:85:bd:f8:1d:28:7f:31:
         73:24:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 27 03:43:20 2025 by rpki-client on console.sobornost.net