Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa
File:                     3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          oRHtulkM7N9vC0n6P2vPdaQpQ2+ypvyDWpTJBdShu1A=
Subject key identifier:   A8:94:09:38:49:13:11:87:E5:4A:8C:47:75:58:C7:DF:42:2B:E6:68
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       7B79018AF230060504CF652F9BE90AD439E40141
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:57 +0000
ROA not before:           Mon 04 Mar 2024 21:17:57 +0000
ROA not after:            Mon 03 Mar 2025 21:22:57 +0000
asID:                     263661
IP address blocks:        168.205.124.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:01:8a:f2:30:06:05:04:cf:65:2f:9b:e9:0a:d4:39:e4:01:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:57 2024 GMT
            Not After : Mar  3 21:22:57 2025 GMT
        Subject: CN=A894093849131187E54A8C477558C7DF422BE668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:02:82:3b:83:bc:19:b4:57:09:e9:0d:bc:
                    06:5d:e0:0a:90:bf:d4:cc:0a:c7:4e:31:d0:b8:62:
                    c2:8e:b2:0b:9d:a3:27:c7:d1:76:8d:f4:8d:3e:a4:
                    48:b7:31:4c:8e:c2:bb:d6:b6:66:54:9c:27:17:19:
                    12:19:ab:e7:a2:d7:ab:a5:71:34:47:8c:6f:4d:08:
                    ee:d2:50:bb:8d:10:ef:1c:fc:05:21:0d:8b:6e:1f:
                    b8:0d:bc:f1:e3:7f:af:a4:da:51:99:b6:cc:88:37:
                    b0:17:76:b1:b8:d0:92:2f:7f:0c:ad:9c:64:70:ea:
                    4a:b7:08:7e:19:39:15:2f:19:aa:d8:6f:47:db:99:
                    39:79:ea:e6:31:ca:41:09:e4:4e:92:f9:37:98:99:
                    be:c5:4e:91:4f:52:57:07:45:c9:08:02:78:e5:ee:
                    70:da:57:7e:15:8b:81:c0:35:8e:78:0b:41:8e:f7:
                    e9:4f:cd:2d:da:1f:8a:9d:64:82:1c:40:f4:d1:b8:
                    f5:48:4c:41:c0:89:43:bb:d2:c2:5e:b8:aa:d2:8a:
                    b0:6b:bd:03:b3:e9:5e:46:cb:04:0d:79:38:82:e3:
                    f1:4f:8e:7a:f6:97:bf:40:a6:8c:e8:48:4c:ab:6f:
                    0d:a5:f7:a4:a0:6e:ac:40:9d:4b:83:5b:52:45:b5:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:09:38:49:13:11:87:E5:4A:8C:47:75:58:C7:DF:42:2B:E6:68
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:c3:2f:28:d5:22:ef:df:05:1b:2f:cf:79:b4:ba:6e:36:79:
         c9:72:08:96:8a:76:3c:7d:2a:5c:a5:e1:1b:ef:e3:ac:bf:e7:
         55:9d:82:b4:3e:5a:75:59:df:71:be:8f:1c:be:d6:cb:8c:ea:
         ef:02:5b:18:1c:78:ad:9e:cb:7a:b5:fe:b2:54:b1:fd:36:a3:
         1c:25:b9:52:86:9c:5e:3f:d2:c1:fe:53:4e:a9:57:74:33:30:
         23:c7:5d:29:c7:8e:a4:03:54:60:e4:7c:c5:87:e0:0c:2c:87:
         b7:12:3a:a3:54:3b:4a:96:30:10:df:2e:a9:31:a8:c5:f4:02:
         8f:47:78:69:f1:35:f7:95:b3:5f:29:7d:90:bd:92:d1:80:81:
         8c:44:bd:4b:0d:cb:91:ef:33:d4:46:cc:3c:bc:90:94:95:c5:
         94:f0:25:b4:87:28:f7:1c:ea:e6:b9:b5:bc:3f:1d:3c:77:e4:
         fd:7c:29:77:49:22:8b:48:ea:98:e4:65:ef:3a:e9:a5:17:2e:
         c8:cb:97:40:21:ea:ed:6f:65:6c:df:2b:9e:fd:db:9e:ec:fa:
         1c:89:5c:22:72:32:32:4d:3e:2e:2c:f3:8e:77:02:99:4a:f4:
         b3:b5:50:9a:31:a5:66:53:d8:91:0b:37:8a:ec:88:6b:c3:a2:
         bd:80:74:35
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUe3kBivIwBgUEz2Uvm+kK1DnkAUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU5NTI2QURCRUI5NzM5QkQ3NzMyRjMxODNDRThFNDc4
MTBCNTMwMzAeFw0yNDAzMDQyMTE3NTdaFw0yNTAzMDMyMTIyNTdaMDMxMTAvBgNV
BAMTKEE4OTQwOTM4NDkxMzExODdFNTRBOEM0Nzc1NThDN0RGNDIyQkU2NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cQKCO4O8GbRXCekNvAZd4AqQ
v9TMCsdOMdC4YsKOsgudoyfH0XaN9I0+pEi3MUyOwrvWtmZUnCcXGRIZq+ei16ul
cTRHjG9NCO7SULuNEO8c/AUhDYtuH7gNvPHjf6+k2lGZtsyIN7AXdrG40JIvfwyt
nGRw6kq3CH4ZORUvGarYb0fbmTl56uYxykEJ5E6S+TeYmb7FTpFPUlcHRckIAnjl
7nDaV34Vi4HANY54C0GO9+lPzS3aH4qdZIIcQPTRuPVITEHAiUO70sJeuKrSirBr
vQOz6V5GywQNeTiC4/FPjnr2l79ApozoSEyrbw2l96SgbqxAnUuDW1JFtSidAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqJQJOEkTEYflSoxHdVjH30Ir5mgwHwYDVR0j
BBgwFoAU/pUmrb65c5vXcy8xg86OR4ELUwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMC9GRTk1MjZBREJFQjk3MzlCRDc3MzJGMzE4M0NFOEU0NzgxMEI1MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFOTUyNkFEQkVCOTczOUJE
NzczMkYzMTgzQ0U4RTQ3ODEwQjUzMDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjNfDANBgkqhkiG9w0BAQsFAAOCAQEA4cMv
KNUi798FGy/PebS6bjZ5yXIIlop2PH0qXKXhG+/jrL/nVZ2CtD5adVnfcb6PHL7W
y4zq7wJbGBx4rZ7LerX+slSx/TajHCW5UoacXj/Swf5TTqlXdDMwI8ddKceOpANU
YOR8xYfgDCyHtxI6o1Q7SpYwEN8uqTGoxfQCj0d4afE195WzXyl9kL2S0YCBjES9
Sw3Lke8z1EbMPLyQlJXFlPAltIco9xzq5rm1vD8dPHfk/Xwpd0kii0jqmORl7zrp
pRcuyMuXQCHq7W9lbN8rnv3bnuz6HIlcInIyMk0+LizzjncCmUr0s7VQmjGlZlPY
kQs3iuyIa8OivYB0NQ==
-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net