Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa
File:                     3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa (raw, json)
Hash identifier:          cov4ufSGHOoi9sfIFSVfSN1JgaJbVm2L3IdxBR0jqbE=
Subject key identifier:   EC:71:DB:D4:2B:F6:FE:83:5C:96:3E:E2:96:F7:97:59:26:D0:BB:19
Certificate issuer:       /CN=55194EA75A1DD805416750CBD3EEAB9439C6E207
Certificate serial:       60B83AF7CAAFCE435C74BF1131D7703EDC5EC1C6
Authority key identifier: 55:19:4E:A7:5A:1D:D8:05:41:67:50:CB:D3:EE:AB:94:39:C6:E2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa
Signing time:             Thu 06 Mar 2025 08:02:51 +0000
ROA not before:           Thu 06 Mar 2025 07:57:51 +0000
ROA not after:            Thu 05 Mar 2026 08:02:51 +0000
asID:                     264209
IP address blocks:        138.97.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b8:3a:f7:ca:af:ce:43:5c:74:bf:11:31:d7:70:3e:dc:5e:c1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55194EA75A1DD805416750CBD3EEAB9439C6E207
        Validity
            Not Before: Mar  6 07:57:51 2025 GMT
            Not After : Mar  5 08:02:51 2026 GMT
        Subject: CN=EC71DBD42BF6FE835C963EE296F7975926D0BB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:2f:d6:ed:f8:26:f0:26:f9:42:82:ab:e6:
                    e4:ed:89:ab:46:93:de:3a:32:9f:a1:a0:10:15:fc:
                    63:aa:92:7b:78:9a:de:dd:25:b2:04:a3:b7:fc:55:
                    a6:2d:30:91:96:e7:29:32:27:ea:56:bf:39:67:1e:
                    c0:3f:9c:a7:5d:68:f9:90:fe:30:50:13:12:05:a1:
                    78:1a:a0:7d:4e:67:73:7c:aa:4a:06:50:4c:ba:98:
                    73:68:21:dc:06:f2:87:10:a6:dd:af:70:9b:e5:4a:
                    de:9f:e1:5a:41:2a:4e:71:35:5a:43:5e:bc:ae:0e:
                    0a:1c:f3:3a:d0:56:2b:69:d5:33:e9:90:1a:0e:29:
                    34:fc:50:55:fa:4f:4a:51:7c:8d:bb:a2:94:52:97:
                    0f:15:76:7a:c1:75:39:55:28:43:ee:91:dd:bc:ae:
                    7f:20:9e:01:9f:56:a6:0c:07:49:50:95:dd:c3:59:
                    84:eb:6a:0f:af:aa:ab:cd:fd:53:80:7c:04:8c:be:
                    e2:e2:dd:ac:05:4b:75:47:9f:17:c4:8e:cd:48:7f:
                    7c:e0:4d:bd:06:6f:4f:91:2a:69:fa:71:80:32:e3:
                    f1:a1:cd:03:8d:bc:17:cf:0b:f5:cc:3b:00:75:7e:
                    6e:77:87:61:4f:ac:6c:f3:2d:3a:8b:8c:00:dd:40:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:71:DB:D4:2B:F6:FE:83:5C:96:3E:E2:96:F7:97:59:26:D0:BB:19
            X509v3 Authority Key Identifier:
                keyid:55:19:4E:A7:5A:1D:D8:05:41:67:50:CB:D3:EE:AB:94:39:C6:E2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:19:f9:79:44:73:bf:45:db:3e:e5:80:6f:85:0e:b6:cb:
         03:38:68:ce:c7:45:f3:ec:42:17:fe:02:97:ea:ba:ac:8d:4f:
         f6:99:9f:8d:1e:9c:dd:bb:7b:ce:88:59:07:40:6a:5b:2d:6b:
         39:d0:13:52:76:42:9a:30:18:59:be:47:2a:bc:a2:08:46:1c:
         96:30:17:fb:c6:52:08:8d:0b:d2:35:5e:e4:0f:f8:ba:c6:8c:
         7f:7c:c6:62:8a:c5:ce:33:e4:b7:a5:32:6c:ef:9a:1f:96:f6:
         a4:d8:f4:ee:48:d7:43:67:8e:2e:04:ef:bd:c2:53:94:dd:2b:
         ea:62:af:4b:81:0f:bd:01:f0:65:0a:41:e9:61:95:1f:52:28:
         20:64:30:b3:1a:51:0c:31:da:94:9e:b7:cc:2b:23:e7:80:55:
         40:a3:91:e6:ae:88:13:39:09:99:66:98:2f:fd:f8:23:47:27:
         67:d2:48:41:53:4c:54:56:24:f6:d0:1e:ad:37:56:af:5e:b7:
         3d:30:e9:51:58:b7:b7:7f:ce:4f:57:83:c9:b6:07:fb:7a:c1:
         ee:a6:0a:67:76:c5:0c:cf:84:df:8f:fa:81:fa:f3:12:8e:a9:
         ed:43:75:33:21:f9:22:54:ce:99:6e:dd:c5:39:36:65:e7:1e:
         95:5c:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:54:53 2025 by rpki-client on console.sobornost.net