Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa
File:                     3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          xrdC5uqpwZm4XQS79PvXXaHSErA//Zot6PZz9oHBulk=
Subject key identifier:   F9:17:18:A3:3E:65:4C:AE:07:53:E9:4F:F8:2E:81:84:2C:0B:23:D2
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       0486CC84CE0BFBA0493099F57822DDFF148A0C90
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:23:00 +0000
ROA not before:           Mon 04 Mar 2024 21:18:00 +0000
ROA not after:            Mon 03 Mar 2025 21:23:00 +0000
asID:                     263661
IP address blocks:        177.221.58.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:86:cc:84:ce:0b:fb:a0:49:30:99:f5:78:22:dd:ff:14:8a:0c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:18:00 2024 GMT
            Not After : Mar  3 21:23:00 2025 GMT
        Subject: CN=F91718A33E654CAE0753E94FF82E81842C0B23D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:20:2d:d3:3d:42:65:db:af:2b:21:dd:e8:
                    a2:a7:0b:f0:3e:bf:6f:9d:22:ac:cb:72:34:e1:27:
                    e1:9a:22:77:a6:b9:8e:27:74:81:e0:c6:3d:97:66:
                    44:63:41:66:71:b7:3d:43:8c:c2:23:19:f7:46:93:
                    06:70:91:57:ea:39:52:df:81:a9:64:d8:82:bd:1b:
                    f1:6e:08:90:e6:7f:a8:75:3f:0d:e3:0c:7c:e8:85:
                    45:00:25:a8:b7:d0:ab:ee:06:2c:2d:0b:04:9c:15:
                    83:0f:55:05:8a:5e:fd:54:95:f5:9c:2c:9a:34:8f:
                    a7:ec:a3:9b:3e:4e:85:81:12:83:c8:fa:be:21:7b:
                    1c:4c:8d:f4:93:00:02:9f:a9:09:3d:68:fd:48:c3:
                    9a:a5:09:cc:73:88:94:9d:ed:22:be:29:05:89:4a:
                    ee:97:97:28:2a:d8:da:02:aa:52:6d:da:bd:fb:13:
                    9e:cd:cd:f0:37:ef:a5:50:9a:76:6e:b8:0d:5b:73:
                    8f:38:d9:a7:c3:9a:14:4a:18:67:f3:c4:ad:fe:fa:
                    93:04:a8:d9:6e:aa:ba:21:85:8c:03:95:53:10:c6:
                    70:95:ea:9d:13:f9:1b:68:1b:38:03:56:bd:d1:c3:
                    c6:7b:08:0a:da:34:5b:ce:a9:af:cd:66:87:49:e5:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:18:A3:3E:65:4C:AE:07:53:E9:4F:F8:2E:81:84:2C:0B:23:D2
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:66:a8:ce:3a:df:a2:9b:70:94:2e:b5:d5:76:54:83:99:84:
         00:7a:90:b8:d5:c5:1c:e5:3c:5d:4c:5d:c2:cd:ec:10:d3:34:
         8b:5a:fa:6f:93:33:84:bd:37:2d:2c:09:f3:76:6e:d7:de:13:
         cd:ff:f3:e8:6c:28:4b:7c:93:05:72:df:56:42:91:19:26:0b:
         e5:1a:c2:96:3a:5c:99:2c:d4:30:0a:c9:2c:64:c5:e4:61:0d:
         43:c4:0c:db:14:01:d4:76:a4:cf:40:2c:4e:71:49:88:6b:41:
         2d:1d:56:d4:3f:c6:d7:b2:28:1e:cb:5e:4b:c3:ba:f0:71:7a:
         4e:4c:f3:47:4d:57:1e:26:93:55:7c:35:19:f6:5a:b0:b8:25:
         5b:9a:4b:26:43:07:9b:4c:0d:01:28:90:31:47:c2:2c:d6:1e:
         80:99:f8:b7:d8:fe:35:82:67:d7:76:8a:97:96:5d:01:1a:e5:
         e4:24:0f:01:6e:01:0c:3c:fe:eb:70:66:48:2e:6e:ff:76:56:
         c3:60:6b:bb:84:c0:5a:c8:74:d1:72:b6:7d:8f:47:14:8d:cb:
         cc:38:01:09:43:87:b7:a1:41:15:c1:a8:8b:86:b8:a4:2e:13:
         ea:d4:88:a2:2f:4a:6d:fa:47:17:3a:54:a1:f0:e4:3c:cd:42:
         3a:22:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net