Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          M3W+8lwYF1ikjUcpWA6yTYmEgOqHpwjBOgQ1oohTgAg=
Subject key identifier:   D6:66:F3:34:54:8C:08:C0:C7:23:F2:27:81:09:80:8C:C1:B0:F1:1C
Certificate issuer:       /CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
Certificate serial:       401F37940B6C8B93CA7581F8F228BAFDE0ECDD3D
Authority key identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
Signing time:             Mon 07 Apr 2025 18:06:40 +0000
ROA not before:           Mon 07 Apr 2025 18:01:40 +0000
ROA not after:            Mon 06 Apr 2026 18:06:40 +0000
asID:                     271624
IP address blocks:        177.73.129.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1f:37:94:0b:6c:8b:93:ca:75:81:f8:f2:28:ba:fd:e0:ec:dd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
        Validity
            Not Before: Apr  7 18:01:40 2025 GMT
            Not After : Apr  6 18:06:40 2026 GMT
        Subject: CN=D666F334548C08C0C723F2278109808CC1B0F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:88:55:b2:57:cc:9a:5c:3d:16:7d:63:ca:
                    14:c8:54:8a:df:92:7f:40:44:94:54:2a:8a:95:8a:
                    de:40:20:6c:db:37:34:1a:a0:cc:39:84:22:b3:03:
                    70:e2:0f:10:06:b4:44:d0:51:77:1e:72:2e:a1:ac:
                    91:10:1f:f0:fe:b9:55:b9:2d:7c:05:9f:b3:87:85:
                    ba:bb:91:e7:48:fd:3b:47:eb:81:ef:29:7f:79:b4:
                    66:cd:8b:1b:28:27:1c:0b:01:35:03:28:85:0e:21:
                    49:3b:b2:56:76:84:5b:b6:bc:c1:c5:65:44:13:ed:
                    3e:51:34:ed:7d:00:b4:a5:ca:ef:30:57:d5:e5:81:
                    6f:7c:42:d9:7a:27:36:8a:0a:a3:2e:f1:ff:1c:ca:
                    cf:4b:c1:32:bd:e4:7d:6e:40:e2:11:4a:9f:8c:20:
                    ce:8f:42:97:92:0b:d9:6c:a8:ff:9b:00:1d:a4:97:
                    2e:62:38:0b:fb:fc:2a:71:15:a6:2e:26:87:24:91:
                    f3:d1:06:ab:cd:1b:1c:a2:14:e7:d9:96:77:12:d4:
                    cf:5b:61:c1:22:84:07:fa:99:39:e4:80:0b:43:48:
                    a8:6d:70:b5:0c:b6:ee:d5:fc:47:8c:4c:bd:64:b1:
                    bf:fb:89:9b:ca:4d:eb:74:da:e2:4f:5a:2d:ca:93:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:66:F3:34:54:8C:08:C0:C7:23:F2:27:81:09:80:8C:C1:B0:F1:1C
            X509v3 Authority Key Identifier:
                keyid:D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:91:e3:bf:7f:4e:c3:94:da:ee:96:3d:e7:0e:eb:1d:15:6f:
         c4:67:7b:45:5d:d2:ce:8a:9d:dd:9e:7e:a0:95:44:57:5f:ad:
         05:0d:90:9c:60:05:2d:bc:61:06:8b:b4:81:19:55:af:63:cf:
         a9:de:17:cf:fe:1d:85:29:38:fe:a5:6e:ec:f2:8d:2b:a3:11:
         52:dd:de:70:de:a7:ef:e3:a4:6e:85:ea:a0:c1:a4:a1:c9:76:
         e3:b5:f5:d0:c4:c1:d6:6b:90:46:66:86:4e:63:cd:86:50:6b:
         53:ad:e9:b7:3e:a3:e2:6f:5d:17:49:17:6c:d8:0d:3b:76:0e:
         2c:f6:6b:9f:c6:c2:2b:1b:3d:e3:0d:59:8f:de:52:79:ef:77:
         32:b8:fd:84:9c:19:4e:5a:4b:e3:32:ef:ac:63:83:c8:ed:66:
         3d:18:88:a0:7f:01:32:1e:68:86:1f:93:df:6e:b2:76:78:e4:
         9e:e1:c0:d5:14:29:e0:4b:9b:c7:e0:1f:73:6f:54:44:c7:26:
         2a:a3:a2:dc:f4:8a:4e:1f:e0:a2:ab:7b:9c:de:44:87:7d:fc:
         c5:c1:7e:26:60:ba:ec:93:ca:06:15:0b:d6:9c:be:bc:40:be:
         df:f4:b1:86:b5:d1:40:df:da:34:ed:5f:e8:20:c7:56:9d:90:
         48:61:80:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQB83lAtsi5PKdYH48ii6/eDs3T0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUxNTk3MEE5Njg0REE1Q0VFMkE5NzBEMjJDOUY3OUFG
QTUwMEY3OTAeFw0yNTA0MDcxODAxNDBaFw0yNjA0MDYxODA2NDBaMDMxMTAvBgNV
BAMTKEQ2NjZGMzM0NTQ4QzA4QzBDNzIzRjIyNzgxMDk4MDhDQzFCMEYxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPohVslfMmlw9Fn1jyhTIVIrf
kn9ARJRUKoqVit5AIGzbNzQaoMw5hCKzA3DiDxAGtETQUXceci6hrJEQH/D+uVW5
LXwFn7OHhbq7kedI/TtH64HvKX95tGbNixsoJxwLATUDKIUOIUk7slZ2hFu2vMHF
ZUQT7T5RNO19ALSlyu8wV9XlgW98Qtl6JzaKCqMu8f8cys9LwTK95H1uQOIRSp+M
IM6PQpeSC9lsqP+bAB2kly5iOAv7/CpxFaYuJockkfPRBqvNGxyiFOfZlncS1M9b
YcEihAf6mTnkgAtDSKhtcLUMtu7V/EeMTL1ksb/7iZvKTet02uJPWi3Kky/tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1mbzNFSMCMDHI/IngQmAjMGw8RwwHwYDVR0j
BBgwFoAU1RWXCpaE2lzuKpcNIsn3mvpQD3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp
N3IvMC9ENTE1OTcwQTk2ODREQTVDRUUyQTk3MEQyMkM5Rjc5QUZBNTAwRjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MTU5NzBBOTY4NERBNUNF
RTJBOTcwRDIyQzlGNzlBRkE1MDBGNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv
MzEzNzM3MmUzNzMzMmUzMTMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSYEwDQYJKoZIhvcNAQELBQADggEBAGKR479/
TsOU2u6WPecO6x0Vb8Rne0Vd0s6Knd2efqCVRFdfrQUNkJxgBS28YQaLtIEZVa9j
z6neF8/+HYUpOP6lbuzyjSujEVLd3nDep+/jpG6F6qDBpKHJduO19dDEwdZrkEZm
hk5jzYZQa1Ot6bc+o+JvXRdJF2zYDTt2Diz2a5/GwisbPeMNWY/eUnnvdzK4/YSc
GU5aS+My76xjg8jtZj0YiKB/ATIeaIYfk99usnZ45J7hwNUUKeBLm8fgH3NvVETH
Jiqjotz0ik4f4KKre5zeRId9/MXBfiZguuyTygYVC9acvrxAvt/0sYa10UDf2jTt
X+ggx1adkEhhgM8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net