Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa
File:                     3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          /6AptpT8Fp1mz8ftLTOkUWQctCg/XLSKKDQ3Qa22xTM=
Subject key identifier:   B1:E2:21:FB:82:A4:98:4C:B8:3B:EF:45:29:2B:0F:37:B5:A4:F1:F0
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       0774F2AADC31808A37224D524B027B98F0E1CDC1
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:23:02 +0000
ROA not before:           Mon 04 Mar 2024 21:18:02 +0000
ROA not after:            Mon 03 Mar 2025 21:23:02 +0000
asID:                     263661
IP address blocks:        177.221.56.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:74:f2:aa:dc:31:80:8a:37:22:4d:52:4b:02:7b:98:f0:e1:cd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:18:02 2024 GMT
            Not After : Mar  3 21:23:02 2025 GMT
        Subject: CN=B1E221FB82A4984CB83BEF45292B0F37B5A4F1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:41:31:a4:70:2d:82:71:53:9c:48:df:37:
                    c6:4c:3a:92:fe:0a:da:66:2d:f8:b4:bc:bf:4e:86:
                    7a:09:ae:0f:01:84:29:ff:02:df:51:0b:e8:7a:a6:
                    d6:bc:12:41:2c:1a:71:38:e9:a1:cb:51:83:df:36:
                    10:7a:53:da:5b:c0:7d:7d:02:cb:87:1c:52:24:dc:
                    1e:cd:cf:c0:4f:1e:92:81:9b:ef:f5:25:cb:ba:f5:
                    59:78:33:18:79:27:a6:65:03:81:b5:65:fe:d9:db:
                    f6:c6:8a:a4:e2:a3:d2:24:aa:5e:5c:53:df:ac:72:
                    2d:b4:b7:58:32:48:be:45:2d:bb:d0:7f:06:ad:51:
                    52:8e:a5:7f:0a:16:ba:af:0b:da:fa:d0:28:16:cc:
                    58:d9:7a:77:84:c8:87:25:c1:94:44:9f:9d:47:db:
                    57:93:9c:4d:e7:48:e5:05:a2:96:60:eb:3a:e2:c4:
                    3b:de:8a:eb:64:27:e5:04:13:73:e3:c8:94:b5:fa:
                    c1:ec:1f:d5:d1:5d:79:b6:f5:ea:49:ea:7d:ab:bb:
                    d2:cf:5f:3a:f9:c9:6e:7d:3b:31:28:1b:dc:7c:04:
                    22:42:c6:e5:23:cb:c8:d2:3b:01:41:b4:84:3c:48:
                    03:f4:e2:02:0d:ee:a5:2a:68:99:36:bb:50:90:f3:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:21:FB:82:A4:98:4C:B8:3B:EF:45:29:2B:0F:37:B5:A4:F1:F0
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:ab:28:f1:02:cd:04:ad:4d:a3:cc:1b:80:84:02:e9:27:dc:
         c2:49:c2:b0:75:8a:ae:26:a2:7b:e8:7f:93:b8:e7:15:d3:76:
         24:68:01:4d:3b:9b:ba:dd:e1:34:25:72:d0:a6:02:60:6f:c6:
         32:e8:76:e2:9d:19:4e:df:03:c7:dd:c9:b6:19:24:4e:6f:54:
         97:12:d0:d9:9f:f9:9c:36:a4:be:2f:f0:69:d6:32:a7:2a:ef:
         e9:e8:e9:d3:9e:46:69:25:22:0d:b2:a0:7f:44:4e:fc:a6:ff:
         d9:3e:51:f2:0b:da:81:b2:43:ab:48:e3:fd:69:58:69:58:9f:
         67:1f:59:67:4c:e8:49:1d:81:6b:d7:57:97:80:b2:09:91:1d:
         58:71:55:11:de:e0:f6:4a:71:bc:d7:19:04:65:fb:e2:ad:ac:
         ec:93:26:90:88:1e:cb:fe:1b:04:02:fa:3d:64:dd:c4:a8:d3:
         23:50:bf:04:0f:84:10:ae:7b:e8:97:10:8b:0a:9e:3c:f0:18:
         8b:25:80:7b:7d:cc:19:3b:1a:94:09:99:e6:f5:35:5b:e3:f1:
         91:1b:2f:76:49:95:e4:0b:a9:4a:ea:56:84:39:12:c4:53:ce:
         bb:f2:29:c8:9b:e5:d4:2c:ff:32:ed:22:de:5d:58:62:8b:b1:
         f8:51:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net