Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          thTEV9x4K81qJU24q5KvaqVFnwk9W8sIBhICgQILApU=
Subject key identifier:   DB:C2:5A:CB:39:96:37:11:F2:19:D1:59:6A:18:DA:2B:7F:18:32:69
Certificate issuer:       /CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
Certificate serial:       4DF9A79CA77EF2D141E11CE3703EF3157DE19B2C
Authority key identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
Signing time:             Mon 07 Apr 2025 18:06:39 +0000
ROA not before:           Mon 07 Apr 2025 18:01:39 +0000
ROA not after:            Mon 06 Apr 2026 18:06:39 +0000
asID:                     271624
IP address blocks:        177.73.131.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f9:a7:9c:a7:7e:f2:d1:41:e1:1c:e3:70:3e:f3:15:7d:e1:9b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
        Validity
            Not Before: Apr  7 18:01:39 2025 GMT
            Not After : Apr  6 18:06:39 2026 GMT
        Subject: CN=DBC25ACB39963711F219D1596A18DA2B7F183269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:2a:8c:bd:69:fa:7b:d2:91:3d:8d:32:5e:
                    f2:69:38:74:ae:d2:32:7e:af:c6:20:08:af:e6:9b:
                    96:9e:d2:6c:21:28:eb:aa:84:cc:22:7f:4a:5a:f3:
                    45:dc:0d:74:7c:1e:ff:20:b7:a2:c9:a0:29:0c:41:
                    e5:8c:b2:7d:2d:f4:5e:f0:fa:ff:50:4c:4b:af:22:
                    aa:04:27:dd:20:0a:2e:a3:28:c6:62:dc:75:c7:ba:
                    41:4f:f7:78:10:81:97:c5:e8:0c:ef:9b:a3:48:4d:
                    11:f8:53:cd:6c:2b:69:7d:65:74:be:53:b6:40:84:
                    5d:d0:85:b0:5b:c0:bc:c1:f8:69:8f:fe:f5:88:b9:
                    6e:10:79:0f:96:17:97:1b:8a:07:cf:0c:06:9e:ca:
                    9f:d5:e4:bb:9e:58:f1:67:9c:c5:56:2b:29:98:12:
                    30:3d:71:77:0d:93:9f:b6:28:46:55:e6:29:9d:22:
                    33:50:1d:86:a6:7f:f7:23:c1:d4:3f:e2:54:38:5f:
                    13:97:a6:1f:0d:af:1f:1d:11:a9:a0:56:02:a4:4f:
                    2e:51:16:c8:e0:29:0f:6c:26:95:d5:35:fd:13:68:
                    c6:ee:44:62:b4:c9:93:2d:ad:98:ca:9f:8a:12:ec:
                    57:1b:ac:76:e9:a4:cd:01:87:8a:09:23:55:bb:81:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:5A:CB:39:96:37:11:F2:19:D1:59:6A:18:DA:2B:7F:18:32:69
            X509v3 Authority Key Identifier:
                keyid:D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:2d:6c:fa:1d:6a:ec:37:82:fb:84:ea:79:37:e8:ef:54:
         30:36:60:ab:ce:30:e3:71:a9:5b:8b:e7:bf:5e:3a:d8:31:06:
         d9:61:66:80:70:24:1a:6f:0f:34:ac:c6:3c:54:04:71:49:40:
         1a:3d:7b:cc:b7:ed:cd:2c:35:f9:54:75:5b:a2:fd:d3:b9:0a:
         62:77:69:76:0d:94:b4:e0:01:9a:95:63:c8:92:52:8f:b7:63:
         3f:5b:43:90:28:77:1f:23:6c:a2:c2:14:2a:5a:27:62:55:37:
         66:83:cc:73:4b:a6:4e:a2:f9:a0:ae:6a:b6:20:8b:c9:53:8d:
         45:52:79:c0:ce:e5:e0:b0:de:0b:2b:df:39:05:52:f5:64:83:
         b9:9b:1c:b5:dc:a0:18:38:ca:12:6c:05:37:07:73:d8:23:c1:
         b2:6b:4a:c7:d9:51:26:dd:2a:7a:99:48:f7:ce:0c:80:d2:e6:
         8a:e8:80:70:20:66:20:28:41:74:1d:0c:73:b6:2e:79:b7:b6:
         dc:87:e0:02:81:0d:e1:13:ee:de:82:a5:5b:15:f0:45:e3:16:
         47:b1:aa:7f:28:4f:15:ea:b6:9c:1e:41:ed:ca:10:33:fa:fa:
         58:5a:8f:69:a7:b5:b2:cd:5c:62:9a:a0:9c:dc:5a:d6:f1:55:
         9d:85:6c:45
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTfmnnKd+8tFB4RzjcD7zFX3hmywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUxNTk3MEE5Njg0REE1Q0VFMkE5NzBEMjJDOUY3OUFG
QTUwMEY3OTAeFw0yNTA0MDcxODAxMzlaFw0yNjA0MDYxODA2MzlaMDMxMTAvBgNV
BAMTKERCQzI1QUNCMzk5NjM3MTFGMjE5RDE1OTZBMThEQTJCN0YxODMyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0yqMvWn6e9KRPY0yXvJpOHSu
0jJ+r8YgCK/mm5ae0mwhKOuqhMwif0pa80XcDXR8Hv8gt6LJoCkMQeWMsn0t9F7w
+v9QTEuvIqoEJ90gCi6jKMZi3HXHukFP93gQgZfF6Azvm6NITRH4U81sK2l9ZXS+
U7ZAhF3QhbBbwLzB+GmP/vWIuW4QeQ+WF5cbigfPDAaeyp/V5LueWPFnnMVWKymY
EjA9cXcNk5+2KEZV5imdIjNQHYamf/cjwdQ/4lQ4XxOXph8Nrx8dEamgVgKkTy5R
FsjgKQ9sJpXVNf0TaMbuRGK0yZMtrZjKn4oS7FcbrHbppM0Bh4oJI1W7gVqVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU28JayzmWNxHyGdFZahjaK38YMmkwHwYDVR0j
BBgwFoAU1RWXCpaE2lzuKpcNIsn3mvpQD3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp
N3IvMC9ENTE1OTcwQTk2ODREQTVDRUUyQTk3MEQyMkM5Rjc5QUZBNTAwRjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MTU5NzBBOTY4NERBNUNF
RTJBOTcwRDIyQzlGNzlBRkE1MDBGNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv
MzEzNzM3MmUzNzMzMmUzMTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSYMwDQYJKoZIhvcNAQELBQADggEBADQNLWz6
HWrsN4L7hOp5N+jvVDA2YKvOMONxqVuL579eOtgxBtlhZoBwJBpvDzSsxjxUBHFJ
QBo9e8y37c0sNflUdVui/dO5CmJ3aXYNlLTgAZqVY8iSUo+3Yz9bQ5Aodx8jbKLC
FCpaJ2JVN2aDzHNLpk6i+aCuarYgi8lTjUVSecDO5eCw3gsr3zkFUvVkg7mbHLXc
oBg4yhJsBTcHc9gjwbJrSsfZUSbdKnqZSPfODIDS5orogHAgZiAoQXQdDHO2Lnm3
ttyH4AKBDeET7t6CpVsV8EXjFkexqn8oTxXqtpweQe3KEDP6+lhaj2mntbLNXGKa
oJzcWtbxVZ2FbEU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net