Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233362e302f32332d3233203d3e20323633363631.roa
File:                     3138372e36332e3233362e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          8iBOFpVK0aJ3NayZPnehEtsA22xzQj7Msy0Eft6tQNM=
Subject key identifier:   9B:AA:E2:86:59:2E:99:A7:9B:BF:B4:27:0F:7D:5B:F2:63:F7:3B:41
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       39E51D10B1EB81C4BCC25B51B560BC35E913F7E2
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233362e302f32332d3233203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:54 +0000
ROA not before:           Mon 04 Mar 2024 21:17:54 +0000
ROA not after:            Mon 03 Mar 2025 21:22:54 +0000
asID:                     263661
IP address blocks:        187.63.236.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e5:1d:10:b1:eb:81:c4:bc:c2:5b:51:b5:60:bc:35:e9:13:f7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:54 2024 GMT
            Not After : Mar  3 21:22:54 2025 GMT
        Subject: CN=9BAAE286592E99A79BBFB4270F7D5BF263F73B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:1e:37:6b:dd:ba:20:51:46:8e:5d:30:bb:
                    9d:2e:f1:01:03:a6:30:06:14:b8:67:16:41:05:72:
                    31:35:f6:d9:fb:15:65:82:fe:fa:dd:fb:71:13:64:
                    4a:fb:af:b3:0f:a5:fa:85:35:4e:99:9a:b0:c2:7f:
                    4c:bd:68:eb:b3:0f:91:6f:02:3c:a4:41:0a:c7:44:
                    59:e7:4f:37:22:e3:ae:b0:ab:69:4b:e4:48:21:39:
                    ff:01:61:4e:3d:15:22:63:17:da:16:7c:1c:a8:40:
                    b7:f5:42:79:8b:11:d9:71:71:41:07:0f:c4:36:5e:
                    25:c9:7f:b5:5f:a9:89:87:ae:c3:71:65:eb:b6:37:
                    8b:80:1b:e0:07:8a:d8:9a:68:89:92:cc:b4:1f:1d:
                    f8:f5:6c:9d:c5:ff:e5:8b:5d:f3:23:69:b0:bf:0e:
                    c7:14:66:38:41:7e:30:27:73:63:97:6c:f5:a9:5b:
                    97:e0:73:5b:46:c9:2a:3a:9e:29:7d:ae:22:2a:d2:
                    98:00:d4:e9:8d:a4:08:38:f2:27:c3:5a:c5:36:41:
                    fc:bb:09:c9:8e:f3:71:c3:72:8d:6e:23:9e:e2:3b:
                    94:8b:a5:45:65:bf:46:8a:ee:cd:bb:bd:97:93:38:
                    49:07:43:9a:a7:80:15:96:00:4a:d7:60:f3:3e:32:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:E2:86:59:2E:99:A7:9B:BF:B4:27:0F:7D:5B:F2:63:F7:3B:41
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233362e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:a3:8c:3b:1d:54:a0:4f:71:23:da:81:63:f6:6e:b5:d7:
         5f:69:6d:50:7f:eb:d9:65:ba:d3:f8:28:b3:b8:14:98:3c:cd:
         99:5c:6a:e9:f5:34:fb:74:96:20:40:8b:56:9b:2c:ec:42:51:
         69:9d:6c:e8:6b:85:2b:8a:ca:4d:a9:ed:eb:8c:05:41:e2:98:
         a6:43:c4:21:4c:25:3c:8e:f2:b8:ac:44:f2:64:a5:6c:2f:07:
         8d:37:4b:f8:0c:9e:e9:0e:fc:9e:4f:5c:03:7a:b5:f0:16:de:
         fe:7a:1a:67:13:f1:ee:6e:c9:de:5f:76:85:98:84:91:ee:76:
         ee:b7:e7:fd:93:e5:b2:f2:6d:76:38:8f:19:fd:90:7c:74:ef:
         09:fd:46:f4:72:45:c8:b8:dc:dd:f1:1a:ae:d7:c4:fd:b9:f1:
         53:69:d8:01:81:63:4d:61:5d:d0:21:dc:58:cc:e2:7f:35:12:
         a0:8d:2e:5a:a7:2b:01:9a:ff:9d:0a:73:79:23:21:ad:12:06:
         ef:f6:0e:b1:59:a3:bd:0b:48:47:8c:ba:ac:e7:ea:5c:f9:fe:
         c2:52:74:9a:5b:c8:b3:28:62:12:d6:be:1f:11:95:a2:c8:9b:
         e0:8e:a2:77:42:bf:8d:9a:4b:1c:fc:f3:2d:c8:c6:8a:f0:f0:
         8a:dc:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net