Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa
File:                     3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          h/++qByy1K7/kPTqyQSLZZfUS3Lru9SnRjW1cWCkp9s=
Subject key identifier:   92:E5:C0:4D:CA:82:F9:81:4E:7F:73:EF:5A:CC:D4:8B:FE:A7:8B:CA
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       7F34443F50E42424BE6599584AD218944A673616
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:58 +0000
ROA not before:           Mon 04 Mar 2024 21:17:58 +0000
ROA not after:            Mon 03 Mar 2025 21:22:58 +0000
asID:                     263661
IP address blocks:        187.63.236.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:34:44:3f:50:e4:24:24:be:65:99:58:4a:d2:18:94:4a:67:36:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:58 2024 GMT
            Not After : Mar  3 21:22:58 2025 GMT
        Subject: CN=92E5C04DCA82F9814E7F73EF5ACCD48BFEA78BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:6f:4d:1b:70:66:44:d0:8f:d8:5a:4a:c0:
                    a7:a6:a3:36:9f:9f:05:0b:21:cf:a8:e7:04:b7:18:
                    66:43:0f:44:df:c0:eb:d2:38:62:42:41:bc:71:d3:
                    a0:2b:00:50:1e:e5:18:db:71:69:48:b4:70:74:5d:
                    51:ae:ba:fa:ae:89:9a:7e:26:1b:f7:dd:70:e6:66:
                    4f:9f:df:ca:df:aa:73:66:9a:20:ed:82:d0:c2:69:
                    4d:7d:6c:a0:c5:be:34:27:9b:73:68:84:c2:28:12:
                    14:48:34:f7:1e:7e:31:80:72:47:49:7a:b1:c3:17:
                    72:58:9a:b3:a6:42:03:a1:48:b6:0f:2b:4b:d5:ad:
                    b5:09:94:b4:17:61:ae:20:92:ef:33:01:a8:1d:9e:
                    09:72:bd:c3:f5:b5:9c:c4:e3:93:eb:25:73:0b:ea:
                    ee:4c:a5:03:2e:d2:cc:4c:38:3c:65:09:c3:6c:0e:
                    90:38:a5:a3:17:e3:34:7d:ca:7c:46:80:e6:c0:75:
                    a8:91:7d:91:76:ab:26:50:3e:ad:83:e4:e6:51:ac:
                    95:b9:81:5e:3a:9a:58:6f:7a:da:f1:54:3a:72:d3:
                    59:b5:54:be:0f:a8:d6:8b:63:70:1b:fd:8f:9d:ff:
                    c6:cf:e1:71:d0:1d:ec:95:af:1f:51:bd:25:9a:49:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E5:C0:4D:CA:82:F9:81:4E:7F:73:EF:5A:CC:D4:8B:FE:A7:8B:CA
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:49:ca:33:d2:7a:d8:70:18:0d:5b:7b:ae:06:62:dc:f0:
         6f:bd:02:7e:4f:b7:65:ce:4a:8e:57:e4:2e:3b:f8:42:21:4a:
         a5:3b:10:2d:92:0c:e5:8f:c3:48:68:76:88:03:39:0f:33:e0:
         a6:12:a4:30:a2:86:34:f4:62:52:ca:48:b7:61:2d:d4:56:77:
         31:e8:3f:00:ec:d7:f0:b1:d3:1b:84:21:73:8b:95:a2:46:e1:
         2b:7e:dc:ea:ae:53:ae:03:ff:48:e9:73:df:e6:3d:c5:43:1b:
         9f:f5:da:77:06:1a:ae:25:f8:37:0a:0d:b1:03:fe:2c:12:72:
         ac:d7:ce:df:a4:38:79:b7:9c:a9:a5:b8:50:5e:a2:7c:b4:20:
         e0:42:68:11:1f:6c:d1:d4:95:41:6c:ef:3c:58:25:86:ce:bd:
         85:1d:49:32:6f:3d:6b:eb:26:e7:b2:20:07:69:19:6a:b7:4e:
         c3:91:00:fa:53:45:ec:dd:e6:e3:35:60:f5:12:88:b2:ad:59:
         af:51:8f:63:9d:05:46:85:b8:f3:8f:ff:1c:64:00:c1:c2:7b:
         7d:0d:3b:64:8a:41:9d:98:a8:52:dd:fd:0a:7b:5e:44:fa:c6:
         55:4e:9f:97:86:2d:9b:58:f8:8f:91:28:79:14:21:ad:4c:9a:
         44:e3:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net