Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3234203d3e203533313831.roa
File:                     3139312e3234312e36342e302f32302d3234203d3e203533313831.roa (raw, json)
Hash identifier:          l/vJe1nyVMt2waBumB7sw8Peuh+IqH+0N0FZ21dx7yw=
Subject key identifier:   EB:9C:D8:81:62:CF:91:BF:AF:C1:20:BF:C0:70:21:4A:AF:EF:CE:C3
Certificate issuer:       /CN=7382855FA8D8855302C055BA5BAC6FBA63BD783B
Certificate serial:       4D209ED030312F370CDAFB1129D8C93649B7F32C
Authority key identifier: 73:82:85:5F:A8:D8:85:53:02:C0:55:BA:5B:AC:6F:BA:63:BD:78:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7382855FA8D8855302C055BA5BAC6FBA63BD783B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3234203d3e203533313831.roa
Signing time:             Fri 04 Apr 2025 12:01:49 +0000
ROA not before:           Fri 04 Apr 2025 11:56:49 +0000
ROA not after:            Fri 03 Apr 2026 12:01:49 +0000
asID:                     53181
IP address blocks:        191.241.64.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:20:9e:d0:30:31:2f:37:0c:da:fb:11:29:d8:c9:36:49:b7:f3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7382855FA8D8855302C055BA5BAC6FBA63BD783B
        Validity
            Not Before: Apr  4 11:56:49 2025 GMT
            Not After : Apr  3 12:01:49 2026 GMT
        Subject: CN=EB9CD88162CF91BFAFC120BFC070214AAFEFCEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:b7:05:c7:1d:12:02:9e:3e:f6:2e:45:29:
                    26:97:96:1f:11:3d:61:76:01:f0:28:6c:c0:08:31:
                    71:98:9a:5a:a4:16:b7:3c:76:1e:3d:07:85:57:42:
                    49:dc:0a:69:35:8f:a7:18:35:a1:90:53:fc:bc:2a:
                    e9:72:70:f0:f3:ad:c7:d2:db:4d:88:2f:2a:df:bf:
                    8c:99:4e:69:5a:31:87:b6:f2:20:9e:9c:6e:96:37:
                    90:ff:18:6c:35:58:c5:29:06:b7:6e:bb:a6:a8:e4:
                    4f:a8:59:80:92:ff:78:43:73:b6:8b:5e:dc:1e:b3:
                    68:26:8b:d4:84:04:27:ba:2d:3b:7a:d7:44:b3:94:
                    a5:3c:a8:17:d1:61:e6:60:15:79:b6:b5:db:78:0f:
                    f8:35:28:8c:ca:f6:85:11:9b:7d:9a:44:a7:bf:ec:
                    4a:5c:45:3a:fd:c3:83:5c:71:d1:af:53:2a:36:3a:
                    18:ac:22:bf:25:f6:31:6b:ad:a4:41:7f:b0:f9:51:
                    84:b9:f0:9f:0a:d8:8b:de:63:e2:71:73:0c:09:ca:
                    1a:00:44:21:f6:8c:91:b1:59:51:bb:99:56:1d:cd:
                    13:68:48:58:e0:54:e7:83:0d:53:c1:ac:6f:d2:95:
                    62:93:f5:61:52:6f:cc:66:0c:b6:66:a2:82:70:2a:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:D8:81:62:CF:91:BF:AF:C1:20:BF:C0:70:21:4A:AF:EF:CE:C3
            X509v3 Authority Key Identifier:
                keyid:73:82:85:5F:A8:D8:85:53:02:C0:55:BA:5B:AC:6F:BA:63:BD:78:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/7382855FA8D8855302C055BA5BAC6FBA63BD783B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7382855FA8D8855302C055BA5BAC6FBA63BD783B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:be:fa:67:7f:ef:cb:3f:8c:9f:89:c5:24:2b:39:2b:f3:
         9c:c9:b4:27:d3:b5:0f:d8:ad:fa:ce:32:ed:8a:76:15:6a:f5:
         ca:50:4b:5d:89:96:59:60:d3:8c:2e:eb:76:2a:f8:34:ef:6e:
         cd:52:8e:ce:aa:58:6f:5c:99:e3:de:93:25:7e:2c:8c:ba:c3:
         87:96:02:f7:73:01:9d:99:f6:36:55:af:8b:65:de:c8:ae:4b:
         da:15:ea:d3:70:2d:63:0f:c1:29:18:dc:77:0f:63:1e:3a:b9:
         76:b3:7d:98:07:61:4e:9b:8e:ff:9c:4b:1d:7d:07:39:43:29:
         94:c7:e6:ec:5e:9c:c2:b1:c1:d1:e4:9f:f1:59:2b:e5:ed:6c:
         f5:84:e5:99:71:5c:4f:0a:a3:7d:17:78:2b:d3:fc:07:0a:e2:
         8c:88:f2:5f:eb:0f:37:e9:38:0e:1c:72:93:2c:a2:3c:80:f5:
         d4:a8:c2:a4:dc:bb:84:5d:9a:de:6e:83:43:0a:cf:4b:ee:78:
         4c:f5:0e:97:a6:6c:2e:d3:2c:3f:ae:e2:e1:31:02:30:47:59:
         36:2a:91:1c:40:04:24:fb:3c:9f:65:c0:2b:a9:29:ac:24:7d:
         d8:b2:c7:bf:f7:55:43:eb:37:48:a5:46:a3:cb:59:7f:e0:4a:
         7d:0e:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:41 2025 by rpki-client on console.sobornost.net