Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132352e302f32342d3234203d3e20323633363631.roa
File:                     3136382e3230352e3132352e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          D0wmf8pcivS+jbXl7k3HKWfOUy+pLwitammyU7+1b2k=
Subject key identifier:   67:D3:58:AB:25:59:26:30:55:CD:F1:C3:87:B1:7A:40:82:31:29:86
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       6A99B2C1A926DF3FCB957517BA31031DADB3388B
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132352e302f32342d3234203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:55 +0000
ROA not before:           Mon 04 Mar 2024 21:17:55 +0000
ROA not after:            Mon 03 Mar 2025 21:22:55 +0000
asID:                     263661
IP address blocks:        168.205.125.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:99:b2:c1:a9:26:df:3f:cb:95:75:17:ba:31:03:1d:ad:b3:38:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:55 2024 GMT
            Not After : Mar  3 21:22:55 2025 GMT
        Subject: CN=67D358AB2559263055CDF1C387B17A4082312986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:39:2c:11:ac:7f:7a:2a:be:a8:a2:f3:b0:
                    53:2f:ea:b5:f9:88:5a:f7:8e:72:62:5f:d9:ce:09:
                    3d:4f:48:aa:b0:ea:26:36:81:a7:58:b2:8a:38:98:
                    8b:af:5b:6d:58:fd:6d:c1:4f:65:f7:d4:99:35:ab:
                    b1:80:9a:08:7a:aa:70:77:ac:39:fc:de:3c:ea:90:
                    d6:6d:e3:a1:48:41:25:a0:75:97:d3:03:d8:b2:fa:
                    bc:4b:36:d4:02:fd:c2:d6:65:a7:d4:e4:24:13:24:
                    04:2e:41:9a:91:eb:99:15:bb:68:f0:8a:89:88:45:
                    67:cf:37:c3:17:9d:b8:c2:c4:d9:68:13:b7:2f:c3:
                    62:fe:af:03:46:4a:13:36:6b:fe:57:ee:41:b3:20:
                    06:60:9f:a9:75:af:28:98:8e:be:44:cd:eb:a7:0b:
                    f0:04:39:dd:bc:6f:16:f2:8c:56:fb:32:e7:7c:9d:
                    f4:5f:58:3f:95:9a:76:2e:26:a2:92:22:78:11:bf:
                    41:84:b7:61:02:6b:27:6d:9d:a4:20:1d:ec:b0:da:
                    0b:30:32:98:f8:63:40:d9:75:22:bc:eb:54:a1:b6:
                    13:a6:e3:91:46:dd:14:72:3f:8d:16:5e:af:09:e5:
                    91:e3:be:d9:ed:1d:98:d3:29:20:1e:0d:e1:28:f1:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D3:58:AB:25:59:26:30:55:CD:F1:C3:87:B1:7A:40:82:31:29:86
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132352e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:55:1e:15:56:21:92:e9:d5:dd:c5:14:d5:5e:5f:26:54:95:
         0f:fe:21:95:78:7f:f3:0a:1a:1d:67:7e:59:db:32:ba:ec:0c:
         ff:a7:cb:26:15:52:64:8f:36:a7:d5:a6:8a:f0:be:64:22:69:
         38:02:d4:6c:83:7e:24:6c:81:aa:47:20:f5:aa:69:ff:f8:68:
         35:a1:a1:95:e6:73:7c:9e:d6:41:39:78:c7:21:f3:fc:74:5e:
         fd:c0:c5:50:0a:a8:53:c3:5f:6d:3d:56:8e:3d:70:ae:c2:95:
         c4:b0:21:b3:f3:87:79:16:09:87:dd:37:64:d5:bc:cc:a5:63:
         75:a7:a7:e0:2c:73:59:4b:6e:55:39:81:76:f3:26:86:8f:7d:
         d7:8a:e3:3f:f7:ea:f7:e5:ac:ab:67:ab:3a:22:bf:8a:37:c3:
         78:b5:81:11:46:69:79:ab:8b:13:91:52:e0:18:e0:42:44:a0:
         ab:c4:2d:27:88:69:52:f8:a5:ce:e8:b2:5a:2c:2f:1c:e6:0a:
         a9:b3:cf:47:6b:f6:d7:ca:cc:a6:40:97:ea:68:88:52:4b:74:
         f6:98:48:c7:7a:3e:85:2b:1f:c9:df:b5:47:d4:8c:d8:d7:07:
         2c:5a:2f:5e:5c:c0:cc:96:b4:0d:83:9d:14:e4:d3:d4:af:3c:
         40:20:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net