Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32322d3232203d3e20323633363631.roa
File:                     3136382e3230352e3132342e302f32322d3232203d3e20323633363631.roa (raw, json)
Hash identifier:          y7uj4+R6WI57iv6a6/lOgj13N7/tNeFu1bx7rdFhY7A=
Subject key identifier:   67:12:71:5E:B7:7F:7D:2D:87:7E:85:D3:B5:23:86:71:FB:A0:89:CC
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       6D9B5077CC1A15E00F9594BCAA4C544E62E99BA8
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32322d3232203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:55 +0000
ROA not before:           Mon 04 Mar 2024 21:17:55 +0000
ROA not after:            Mon 03 Mar 2025 21:22:55 +0000
asID:                     263661
IP address blocks:        168.205.124.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9b:50:77:cc:1a:15:e0:0f:95:94:bc:aa:4c:54:4e:62:e9:9b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:55 2024 GMT
            Not After : Mar  3 21:22:55 2025 GMT
        Subject: CN=6712715EB77F7D2D877E85D3B5238671FBA089CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:d7:12:82:32:22:3d:6a:bc:b7:46:f5:ec:
                    04:bb:72:1b:35:d2:42:fd:99:1a:fd:f4:cb:7a:43:
                    4e:a6:0b:d1:4f:f0:8d:76:cf:e1:ac:a9:79:a9:ba:
                    ee:55:b0:32:aa:f5:b4:d5:56:05:4e:15:2e:78:af:
                    e0:55:f8:ba:53:2e:c1:6a:5b:12:da:e6:30:9e:59:
                    db:29:02:7c:d7:63:52:99:92:b5:14:ac:2c:47:e2:
                    91:db:e6:04:d4:7b:4a:0f:92:57:4a:eb:a6:57:ec:
                    f6:bc:f7:db:2c:b4:e2:a3:38:df:f7:a1:67:2a:17:
                    57:27:5f:87:7a:d7:34:5f:ee:6e:c2:cc:1d:32:20:
                    95:3d:62:6c:68:0a:a3:ba:6b:b9:4d:39:7a:30:71:
                    ff:4f:bd:e8:fc:bf:cf:84:f0:bd:b6:98:00:34:4c:
                    8e:7e:1f:da:b9:5a:8b:0e:76:63:2d:04:48:82:d7:
                    12:b7:52:2d:a1:5d:26:28:1c:3e:e5:4f:05:a1:9a:
                    23:62:e0:9c:6e:af:96:67:4b:05:8e:78:7a:87:e9:
                    7e:33:56:c9:f7:ca:18:86:1f:d5:f1:db:16:a3:4f:
                    a9:d5:ff:29:ad:69:f8:ac:d6:fd:b3:df:72:95:06:
                    11:a5:76:7b:e2:e2:79:ae:b2:b1:a8:c2:8c:92:02:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:71:5E:B7:7F:7D:2D:87:7E:85:D3:B5:23:86:71:FB:A0:89:CC
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32322d3232203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:3f:77:f7:f1:09:11:3c:5a:10:ea:97:ae:72:38:cb:2f:27:
         10:1b:89:fb:e8:ea:58:bd:9b:4c:bc:cd:b3:f1:39:11:55:5f:
         69:3f:92:09:d2:ac:92:34:75:08:e8:c4:c0:d0:b5:51:3f:e3:
         b1:fe:72:06:56:49:31:20:c6:f7:02:f9:fd:94:a4:c0:42:7e:
         19:71:bc:f5:1c:34:f3:75:8d:ce:25:f8:51:4e:5b:b1:14:90:
         1d:2b:ec:83:f7:97:29:d0:49:44:74:62:c3:4a:54:3f:de:0e:
         d4:55:4e:a2:c0:c8:ce:8e:e5:d8:3f:5e:c5:bb:71:9e:a3:df:
         43:ac:8d:c5:c7:ac:88:07:c4:46:c5:b7:a6:01:47:0b:8c:61:
         63:71:1a:67:ae:28:88:ea:a4:4a:f1:83:97:2c:ac:03:7b:9a:
         2c:28:45:c8:17:32:25:e9:69:ff:77:4e:2f:6a:1e:76:f7:96:
         da:79:15:3c:ec:53:ac:a0:b2:49:39:28:69:70:e9:21:0d:1a:
         9d:f8:d0:78:69:61:2c:9f:c2:1d:7e:dd:24:2f:42:ff:a0:fc:
         d4:01:71:7c:80:bd:d8:1a:a9:9e:e9:74:ea:a4:66:51:16:c2:
         ff:9e:53:f9:63:0c:cb:3c:40:c0:7a:02:be:95:59:06:72:cc:
         0e:20:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net