Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137342e302f32332d3234203d3e20323632353930.roa
File:                     3137302e3233312e3137342e302f32332d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          4efdDa37E5eXXypOtcHUsZCgC9U0MDvbXGzl2k0/27s=
Subject key identifier:   2D:18:62:81:EA:D8:67:5A:23:7C:AC:03:4F:02:A1:4D:CA:59:B5:CD
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       2CA401321768D62D034403187AD054608BED8F1C
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137342e302f32332d3234203d3e20323632353930.roa
Signing time:             Tue 18 Feb 2025 01:51:47 +0000
ROA not before:           Tue 18 Feb 2025 01:46:47 +0000
ROA not after:            Tue 17 Feb 2026 01:51:47 +0000
asID:                     262590
IP address blocks:        170.231.174.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a4:01:32:17:68:d6:2d:03:44:03:18:7a:d0:54:60:8b:ed:8f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb 18 01:46:47 2025 GMT
            Not After : Feb 17 01:51:47 2026 GMT
        Subject: CN=2D186281EAD8675A237CAC034F02A14DCA59B5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:a1:2f:ff:fb:87:b3:c9:32:6a:28:bf:62:
                    15:70:89:84:ac:3d:8a:a7:d6:8e:79:6c:ec:18:bb:
                    c8:3d:1c:cb:83:34:0e:7e:2c:e3:74:31:1c:9c:08:
                    f8:20:dc:22:d5:ca:c7:15:be:7d:65:c5:75:c6:d0:
                    d4:09:29:c7:9b:b4:63:84:f2:19:ea:99:2a:cc:0e:
                    e6:d7:6e:1e:a5:9c:6c:7d:2c:55:3e:d4:cb:a6:d3:
                    a9:07:44:2d:17:20:54:f4:26:d2:5c:81:00:b3:1e:
                    fb:36:21:dc:7f:94:d2:e8:8e:2a:59:69:a8:fe:f7:
                    5d:f5:db:05:01:54:ad:44:6a:49:97:81:7c:95:3b:
                    22:8f:02:cc:01:e9:91:96:86:b8:ab:3b:2a:7a:61:
                    52:00:a7:1e:e1:38:84:7f:c7:58:0a:97:76:25:a1:
                    d4:bf:03:3b:eb:8f:3d:20:6b:f9:fe:31:19:70:59:
                    fa:7e:f8:a2:25:24:de:08:4a:a0:76:28:7f:a5:01:
                    2e:8b:84:b1:b6:37:f8:8f:34:6d:32:9d:b3:e0:a7:
                    8f:3c:82:6d:93:da:41:48:e3:0b:b7:a2:74:0b:5e:
                    83:c7:a7:5c:08:e5:c7:f1:ed:55:bd:dd:fc:66:a7:
                    25:09:94:85:6d:73:14:2b:62:f6:e3:0c:f6:de:f9:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:18:62:81:EA:D8:67:5A:23:7C:AC:03:4F:02:A1:4D:CA:59:B5:CD
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137342e302f32332d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:47:14:03:ba:33:f7:62:59:b4:bb:b5:3c:26:43:d2:5d:
         6c:17:ee:02:ab:20:34:46:36:a2:47:98:ea:67:e7:a7:f5:20:
         07:ae:51:e7:a2:a3:22:c4:05:de:a8:ab:42:b2:9c:14:ed:b3:
         e0:a7:38:86:cd:b9:68:6f:ec:94:ef:bf:6d:18:ee:1f:72:1d:
         04:28:e2:95:ac:57:b3:48:55:79:9a:d1:36:9e:8a:7c:69:f2:
         0b:a9:47:49:89:c6:65:60:34:a3:ea:2c:14:e0:07:5c:96:15:
         4f:b2:66:da:2d:e5:0c:0a:4c:f4:97:a2:83:eb:31:36:52:65:
         09:af:a9:54:f8:2a:38:97:1c:04:ac:99:2e:58:90:b8:d0:5f:
         25:a6:d2:d8:18:c3:1b:2d:12:3f:37:e5:24:48:d7:0a:28:ce:
         c9:da:a2:96:00:98:7b:9c:40:23:0d:50:bd:64:31:03:17:25:
         69:c0:a2:15:29:d5:43:1c:0e:66:1c:42:97:9e:3a:0f:af:d2:
         e9:20:c5:d6:3f:36:f3:60:7c:ec:c3:07:b1:34:f8:39:3f:44:
         de:75:61:00:89:ee:c7:b1:c9:97:6e:74:57:3e:50:2e:e0:42:
         52:a0:0d:19:f2:37:7b:7e:6f:63:7a:40:4e:c8:45:cd:86:07:
         b1:81:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 27 03:43:20 2025 by rpki-client on console.sobornost.net