Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa
File:                     3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          k/ZK7Puhd7b+F1MAQpRAVx0QJ6iCO4jdR/RIYBaR3Fg=
Subject key identifier:   5A:44:28:76:5A:1C:FD:BB:14:83:70:13:46:9B:05:DD:02:A1:EC:65
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       360F5700F1AB0820F4F04E213F46B6DA5D037FB1
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa
Signing time:             Sat 08 Feb 2025 00:55:44 +0000
ROA not before:           Sat 08 Feb 2025 00:50:44 +0000
ROA not after:            Sat 07 Feb 2026 00:55:44 +0000
asID:                     262590
IP address blocks:        138.122.250.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0f:57:00:f1:ab:08:20:f4:f0:4e:21:3f:46:b6:da:5d:03:7f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb  8 00:50:44 2025 GMT
            Not After : Feb  7 00:55:44 2026 GMT
        Subject: CN=5A4428765A1CFDBB14837013469B05DD02A1EC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:3c:ad:3d:39:63:32:c3:6d:48:7d:c1:3b:
                    b9:ac:c6:01:9f:8b:33:d1:09:0b:41:f4:d5:48:bc:
                    83:8b:44:b2:c0:49:fd:0c:3f:9a:39:ae:fc:68:ee:
                    4e:94:cc:28:b5:aa:37:71:c3:db:c4:31:0e:17:3f:
                    20:6a:8b:84:a4:81:ee:39:24:64:be:21:96:50:bb:
                    57:bc:b2:f3:4c:8d:36:4d:00:3d:98:d3:fd:d6:7f:
                    2b:90:ee:b6:eb:d7:b0:7b:d0:0c:80:79:a9:26:87:
                    ba:ef:6c:50:51:3b:f5:4d:80:73:ff:68:74:92:4f:
                    cc:1b:ff:af:e4:17:47:ea:f9:c7:4c:e6:81:9e:da:
                    26:af:ce:a7:a6:de:39:9d:b9:44:1e:26:3a:3b:74:
                    6f:d2:3c:a7:ac:4f:91:88:12:4e:29:09:53:52:e4:
                    c0:c9:66:6b:6c:b9:38:55:97:c1:dc:39:ac:40:8f:
                    db:2e:8c:b8:db:4e:a5:52:d4:c2:5a:ef:37:ee:7b:
                    7f:d7:9e:5f:ed:dd:88:75:7e:6a:13:6e:4a:b2:d6:
                    89:e8:ec:c2:aa:b6:49:03:4b:bc:70:a8:60:4a:5d:
                    03:e0:cf:a3:29:a0:f3:ef:0e:b1:e9:8a:90:66:71:
                    e1:80:72:51:0c:68:d6:7b:54:ed:ac:eb:59:56:68:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:28:76:5A:1C:FD:BB:14:83:70:13:46:9B:05:DD:02:A1:EC:65
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:28:a7:d3:3b:18:11:73:e7:09:02:15:fe:b5:d0:22:ee:e4:
         5c:6a:ad:00:05:2b:2e:09:a6:63:5d:31:13:90:a9:36:2a:9a:
         bf:d7:d7:74:8d:28:6e:d7:49:d5:cf:23:73:eb:3c:f1:01:4e:
         be:4f:b5:1d:69:82:1a:eb:fe:29:6e:fd:c4:f7:f0:34:8a:7b:
         39:59:51:40:6d:b5:96:3e:b3:c2:09:8a:3c:d1:cb:fa:5c:96:
         ac:e3:98:c8:c9:ff:ac:ac:26:96:1a:a7:48:d0:fa:17:f1:d8:
         72:6a:57:ca:b1:ee:a7:0a:df:c5:26:48:cc:5a:a8:1d:04:63:
         d0:80:21:14:51:f8:05:83:a6:e9:77:d0:68:33:f9:5f:41:c2:
         4a:d2:b4:5d:ef:d8:1d:b1:06:fd:54:20:3a:84:db:20:b4:38:
         00:8c:0f:9c:5d:a9:6a:b2:6b:88:e1:67:78:f6:a3:d3:f8:92:
         e3:ba:12:18:20:54:c3:d1:51:70:02:65:db:5e:06:8f:64:16:
         eb:0f:b7:a8:f0:69:5c:dd:88:9d:f3:df:cd:8a:de:19:55:06:
         10:dd:51:0a:45:ff:3f:4c:e8:a2:7a:2b:22:16:47:d1:ba:1f:
         9d:62:87:9c:0c:f8:4f:2b:fa:b8:45:82:a6:21:8c:a2:08:2b:
         b4:bd:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 27 03:43:20 2025 by rpki-client on console.sobornost.net