Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233372e302f32342d3234203d3e20323633363631.roa
File:                     3138372e36332e3233372e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          yTa86syhxjavyzbmZDAvbYuVxtroT31ozqMJEBl2TKo=
Subject key identifier:   F8:8F:B3:6A:B2:97:E9:E8:12:CE:4A:CE:43:9A:74:F3:D6:1F:0D:50
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       59E02D164AD605080D90F81A0F75ACD6AB59C1C2
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233372e302f32342d3234203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:58 +0000
ROA not before:           Mon 04 Mar 2024 21:17:58 +0000
ROA not after:            Mon 03 Mar 2025 21:22:58 +0000
asID:                     263661
IP address blocks:        187.63.237.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e0:2d:16:4a:d6:05:08:0d:90:f8:1a:0f:75:ac:d6:ab:59:c1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:58 2024 GMT
            Not After : Mar  3 21:22:58 2025 GMT
        Subject: CN=F88FB36AB297E9E812CE4ACE439A74F3D61F0D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:69:70:fb:e6:86:96:02:e3:df:d8:c4:11:8f:
                    0b:56:44:22:4f:81:c0:a9:3f:03:90:85:9b:eb:13:
                    db:44:04:3d:37:19:86:9c:03:49:cc:9f:83:83:e0:
                    6d:14:6b:ac:f9:ad:3e:fc:cc:dd:22:77:92:94:44:
                    56:0a:a1:22:66:df:6a:6a:9b:ea:e9:2e:2c:e6:76:
                    ea:7b:fb:e8:4d:2b:7a:4b:4e:04:a1:74:65:33:01:
                    e5:0e:cf:27:26:f7:a1:3d:21:c5:97:f1:ec:24:09:
                    f0:15:4b:e5:da:f3:4e:df:15:49:2d:ca:23:ef:6c:
                    dd:36:8f:27:79:17:7f:06:c3:45:b6:a3:cd:7e:e7:
                    36:23:aa:73:3e:18:6a:ab:aa:44:ec:a7:9e:4b:36:
                    f5:79:db:35:f3:e9:bd:e4:ec:c1:1c:dd:04:e4:d6:
                    0d:22:d9:d1:90:d8:d4:37:16:35:54:c2:ac:c7:82:
                    fb:d8:7b:d1:c7:d1:aa:50:ac:4c:cd:4d:ca:26:f6:
                    a4:90:24:cf:67:73:cd:33:c4:6b:78:55:60:37:36:
                    29:8a:9d:a1:5b:27:94:84:ef:0f:9f:ca:86:8e:42:
                    44:ee:2e:5a:c1:e0:a0:70:d7:e6:41:91:ed:f8:c4:
                    30:5a:d6:df:b4:87:7f:35:fb:45:2a:4e:0c:61:b1:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:B3:6A:B2:97:E9:E8:12:CE:4A:CE:43:9A:74:F3:D6:1F:0D:50
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233372e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:a6:cd:b8:c8:8f:0a:db:d8:11:f9:69:ff:8d:9f:43:fc:
         50:9b:cd:84:8b:26:59:2c:89:b5:2f:ce:6f:c2:a9:9e:29:c8:
         38:0f:a7:84:6e:f8:e1:71:b0:6b:1b:ad:23:dc:df:34:c5:3c:
         b4:58:fa:f9:e3:96:e3:72:2d:b0:bd:49:7b:7a:45:b4:18:04:
         13:96:6c:19:ba:66:f7:41:d8:47:b3:6e:c3:f5:46:f5:3a:17:
         e4:cf:09:83:a3:ac:22:e5:a4:e0:7e:f7:4b:ce:67:06:12:e6:
         c9:1d:6f:64:e5:5f:4d:ca:55:b4:2f:a4:cf:9e:08:d2:6d:6b:
         01:63:98:b6:7d:e9:42:5e:15:ab:7e:2f:66:f6:30:ec:5c:3c:
         d6:ad:80:e8:2c:44:16:ab:1a:15:c2:01:99:d7:5c:b2:ed:e2:
         63:5f:4b:e7:de:90:ee:c0:4c:53:56:6b:e6:00:a8:be:51:db:
         48:ad:5e:f0:62:af:39:b8:64:48:22:41:71:43:01:3f:aa:01:
         21:a0:19:50:1b:dd:89:40:a5:37:de:11:52:09:92:14:73:d7:
         78:80:ff:cd:93:2b:bc:f4:22:fc:15:93:79:71:c3:50:33:e2:
         39:bb:96:0e:6a:27:62:f2:bb:f2:02:b6:48:38:35:c3:c5:1b:
         d7:7b:89:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWeAtFkrWBQgNkPgaD3Ws1qtZwcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU5NTI2QURCRUI5NzM5QkQ3NzMyRjMxODNDRThFNDc4
MTBCNTMwMzAeFw0yNDAzMDQyMTE3NThaFw0yNTAzMDMyMTIyNThaMDMxMTAvBgNV
BAMTKEY4OEZCMzZBQjI5N0U5RTgxMkNFNEFDRTQzOUE3NEYzRDYxRjBENTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzaXD75oaWAuPf2MQRjwtWRCJP
gcCpPwOQhZvrE9tEBD03GYacA0nMn4OD4G0Ua6z5rT78zN0id5KURFYKoSJm32pq
m+rpLizmdup7++hNK3pLTgShdGUzAeUOzycm96E9IcWX8ewkCfAVS+Xa807fFUkt
yiPvbN02jyd5F38Gw0W2o81+5zYjqnM+GGqrqkTsp55LNvV52zXz6b3k7MEc3QTk
1g0i2dGQ2NQ3FjVUwqzHgvvYe9HH0apQrEzNTcom9qSQJM9nc80zxGt4VWA3NimK
naFbJ5SE7w+fyoaOQkTuLlrB4KBw1+ZBke34xDBa1t+0h381+0UqTgxhsR/bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+I+zarKX6egSzkrOQ5p089YfDVAwHwYDVR0j
BBgwFoAU/pUmrb65c5vXcy8xg86OR4ELUwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMC9GRTk1MjZBREJFQjk3MzlCRDc3MzJGMzE4M0NFOEU0NzgxMEI1MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFOTUyNkFEQkVCOTczOUJE
NzczMkYzMTgzQ0U4RTQ3ODEwQjUzMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzAv
MzEzODM3MmUzNjMzMmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7P+0wDQYJKoZIhvcNAQELBQADggEBADbGps24
yI8K29gR+Wn/jZ9D/FCbzYSLJlksibUvzm/CqZ4pyDgPp4Ru+OFxsGsbrSPc3zTF
PLRY+vnjluNyLbC9SXt6RbQYBBOWbBm6ZvdB2EezbsP1RvU6F+TPCYOjrCLlpOB+
90vOZwYS5skdb2TlX03KVbQvpM+eCNJtawFjmLZ96UJeFat+L2b2MOxcPNatgOgs
RBarGhXCAZnXXLLt4mNfS+fekO7ATFNWa+YAqL5R20itXvBirzm4ZEgiQXFDAT+q
ASGgGVAb3YlApTfeEVIJkhRz13iA/82TK7z0IvwVk3lxw1Az4jm7lg5qJ2Lyu/IC
tkg4NcPFG9d7iaY=
-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net