Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32332d3233203d3e20323633363631.roa
File:                     3136382e3230352e3132342e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          syhZeObsz2MAu2394GgBNpuLfdWxGegnN8JbOejhaxc=
Subject key identifier:   86:FB:1A:20:26:2F:D0:CA:AE:E7:2C:5E:AF:D1:E5:FF:6C:07:A9:4E
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       121A340D171477B4AACC9A7EED9864E506D21C2D
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32332d3233203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:23:01 +0000
ROA not before:           Mon 04 Mar 2024 21:18:01 +0000
ROA not after:            Mon 03 Mar 2025 21:23:01 +0000
asID:                     263661
IP address blocks:        168.205.124.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:34:0d:17:14:77:b4:aa:cc:9a:7e:ed:98:64:e5:06:d2:1c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:18:01 2024 GMT
            Not After : Mar  3 21:23:01 2025 GMT
        Subject: CN=86FB1A20262FD0CAAEE72C5EAFD1E5FF6C07A94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:a4:c1:1a:e3:65:9c:9b:cc:97:d0:a1:82:
                    07:10:14:5f:92:05:58:5a:64:46:bc:e7:bc:23:ce:
                    0d:d5:40:88:4f:15:57:89:e8:e1:cc:42:89:c1:0c:
                    3e:0c:0f:a7:d3:30:1c:ca:9c:b3:12:6a:b1:77:77:
                    35:3e:3a:e6:27:b2:4f:ff:35:64:2d:b2:9e:45:5b:
                    3f:cb:9f:42:50:22:1b:de:2e:1a:e1:ca:83:43:bc:
                    af:39:13:24:b4:31:e4:8a:fc:69:6e:76:40:f2:de:
                    21:d2:c2:2e:14:a2:01:19:b8:1b:93:1d:3c:9e:f9:
                    ee:a6:d7:f4:29:aa:9c:60:ba:33:4b:1f:98:ba:16:
                    87:2a:8d:30:ab:ab:94:f7:cf:ba:f7:9c:ad:57:ca:
                    8c:38:2e:c2:e6:dc:b1:55:46:75:ac:81:8d:2e:f3:
                    bf:81:64:98:26:6b:97:73:4f:07:af:e4:7b:5d:75:
                    3b:e9:9f:64:f6:c1:ac:f8:64:bc:a5:66:1a:5a:b8:
                    2c:21:1f:78:51:ae:e5:e3:4f:12:37:49:2d:32:a3:
                    11:e4:4f:c6:8d:11:d0:48:1f:bf:55:c8:4f:33:f6:
                    67:3e:19:ac:b7:c9:ea:19:20:83:00:0d:a6:52:d8:
                    58:02:24:6b:87:4b:5e:4f:5d:16:cf:4c:24:b1:02:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FB:1A:20:26:2F:D0:CA:AE:E7:2C:5E:AF:D1:E5:FF:6C:07:A9:4E
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:f6:13:94:1e:f7:62:73:27:3e:35:8b:35:52:38:79:d5:22:
         aa:95:fd:96:41:fe:56:b8:20:85:e4:46:d1:28:4e:24:d6:9f:
         92:f6:fe:b7:2c:8f:2b:8c:58:8b:d6:08:28:8b:87:9e:9c:02:
         df:09:1b:65:d3:2c:d8:cc:60:33:d2:46:b6:f4:04:c2:ea:7b:
         b7:0f:37:40:94:eb:29:c2:75:04:9e:10:dc:1f:d7:f1:3c:5b:
         a1:87:78:a0:f4:d2:3e:3b:91:de:bd:ee:91:c9:5d:3f:28:f4:
         d8:5c:09:3f:f4:6b:b4:da:51:29:3c:64:dc:bd:b9:e7:bf:98:
         91:6a:46:a8:56:3b:8e:2e:16:b1:6a:88:cf:33:17:41:99:a2:
         53:06:eb:96:82:e1:4e:af:da:f5:e4:20:a2:d9:e2:dc:60:75:
         ce:8d:39:2e:03:9e:e8:72:83:44:24:df:43:cb:2a:d0:6d:7f:
         38:f7:d6:13:37:9b:e5:13:7a:a6:78:a7:5f:ed:63:98:8c:cc:
         cc:c3:33:92:1f:90:8f:cc:84:4e:16:6b:dd:d7:15:d4:63:e7:
         ee:cb:f3:e8:81:a3:a7:2e:43:d1:4c:87:e6:50:f9:15:f2:06:
         89:be:0d:e4:eb:03:23:41:9a:e3:2a:b1:88:5c:2a:71:7f:a4:
         e7:cd:c1:fa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEho0DRcUd7SqzJp+7Zhk5QbSHC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU5NTI2QURCRUI5NzM5QkQ3NzMyRjMxODNDRThFNDc4
MTBCNTMwMzAeFw0yNDAzMDQyMTE4MDFaFw0yNTAzMDMyMTIzMDFaMDMxMTAvBgNV
BAMTKDg2RkIxQTIwMjYyRkQwQ0FBRUU3MkM1RUFGRDFFNUZGNkMwN0E5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgk6TBGuNlnJvMl9ChggcQFF+S
BVhaZEa857wjzg3VQIhPFVeJ6OHMQonBDD4MD6fTMBzKnLMSarF3dzU+OuYnsk//
NWQtsp5FWz/Ln0JQIhveLhrhyoNDvK85EyS0MeSK/GludkDy3iHSwi4UogEZuBuT
HTye+e6m1/QpqpxgujNLH5i6FocqjTCrq5T3z7r3nK1Xyow4LsLm3LFVRnWsgY0u
87+BZJgma5dzTwev5HtddTvpn2T2waz4ZLylZhpauCwhH3hRruXjTxI3SS0yoxHk
T8aNEdBIH79VyE8z9mc+Gay3yeoZIIMADaZS2FgCJGuHS15PXRbPTCSxAk5BAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhvsaICYv0Mqu5yxer9Hl/2wHqU4wHwYDVR0j
BBgwFoAU/pUmrb65c5vXcy8xg86OR4ELUwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMC9GRTk1MjZBREJFQjk3MzlCRDc3MzJGMzE4M0NFOEU0NzgxMEI1MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFOTUyNkFEQkVCOTczOUJE
NzczMkYzMTgzQ0U4RTQ3ODEwQjUzMDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM2MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajNfDANBgkqhkiG9w0BAQsFAAOCAQEAFfYT
lB73YnMnPjWLNVI4edUiqpX9lkH+VrggheRG0ShOJNafkvb+tyyPK4xYi9YIKIuH
npwC3wkbZdMs2MxgM9JGtvQEwup7tw83QJTrKcJ1BJ4Q3B/X8TxboYd4oPTSPjuR
3r3ukcldPyj02FwJP/RrtNpRKTxk3L2557+YkWpGqFY7ji4WsWqIzzMXQZmiUwbr
loLhTq/a9eQgotni3GB1zo05LgOe6HKDRCTfQ8sq0G1/OPfWEzeb5RN6pninX+1j
mIzMzMMzkh+Qj8yEThZr3dcV1GPn7svz6IGjpy5D0UyH5lD5FfIGib4N5OsDI0Ga
4yqxiFwqcX+k583B+g==
-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net