Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          veLf7T2kQxxN/q4Y+4SU7P1diarnLzt6TBLR31itBK4=
Subject key identifier:   01:0A:42:0E:D6:F4:6D:B1:A8:DA:51:B4:67:8D:AC:E1:84:76:40:3C
Certificate issuer:       /CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
Certificate serial:       7E7395966B01B0661ECCB3F6561A5E7AD205A76A
Authority key identifier: B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
Signing time:             Wed 11 Dec 2024 11:59:41 +0000
ROA not before:           Wed 11 Dec 2024 11:54:41 +0000
ROA not after:            Wed 10 Dec 2025 11:59:41 +0000
asID:                     267560
IP address blocks:        181.191.217.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:73:95:96:6b:01:b0:66:1e:cc:b3:f6:56:1a:5e:7a:d2:05:a7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
        Validity
            Not Before: Dec 11 11:54:41 2024 GMT
            Not After : Dec 10 11:59:41 2025 GMT
        Subject: CN=010A420ED6F46DB1A8DA51B4678DACE18476403C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:bc:93:6d:04:b8:e6:06:7b:6a:4f:65:21:
                    9a:1a:16:4f:54:74:bc:2d:fb:42:a0:5d:8d:ba:43:
                    ee:eb:70:4c:30:ca:2f:24:ea:53:5b:e9:7c:56:50:
                    04:2b:ed:b3:16:d5:4f:64:c2:d6:c4:b3:e9:41:05:
                    00:6e:e7:d6:ff:74:ee:b2:64:02:d9:3e:4d:b5:31:
                    72:49:51:0e:65:d6:e7:94:ef:c9:5c:f9:c7:79:ea:
                    57:f5:27:22:0c:ae:67:69:6c:1e:1d:68:d1:3a:7c:
                    fc:91:1b:aa:da:ef:44:37:c0:e0:9c:92:3c:f5:79:
                    a1:73:fa:2a:5a:6e:83:71:a5:9b:16:76:6c:02:a5:
                    bb:d7:c1:e6:e3:a0:73:e7:15:72:54:ce:b7:63:66:
                    f6:66:02:c7:d2:e5:17:a7:33:f3:50:31:fa:28:ed:
                    45:b2:2b:03:25:2e:70:68:93:c5:56:29:7d:0f:c0:
                    6d:e0:21:a2:42:1e:da:e5:64:dc:06:a1:72:02:f1:
                    a5:fe:74:f2:5a:ff:48:6e:f9:1d:85:6a:11:e0:83:
                    d0:a1:e9:c9:fe:a5:da:b4:01:13:7f:3b:35:1c:59:
                    79:1e:3c:67:dc:bd:fb:5d:aa:f5:1b:e9:23:67:ca:
                    6b:2d:b3:e7:f0:34:a8:ab:e8:10:ea:1f:8d:f9:e6:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0A:42:0E:D6:F4:6D:B1:A8:DA:51:B4:67:8D:AC:E1:84:76:40:3C
            X509v3 Authority Key Identifier:
                keyid:B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:e3:35:27:8a:26:0a:f0:fa:85:97:ad:ae:8e:db:b4:9f:
         c6:c2:ae:eb:e5:92:e0:2a:5d:31:6c:73:e7:29:6e:49:8d:80:
         59:e7:9b:e4:05:e4:e3:4c:64:60:b1:d0:6c:74:3e:5d:3f:2e:
         1d:ad:78:3f:37:12:03:e1:0d:2f:ca:ad:d9:fd:ae:1f:6d:86:
         d9:64:01:fd:b8:36:21:66:54:01:28:ec:76:46:1c:5b:5c:e9:
         2b:dc:97:61:aa:88:3b:13:6b:c1:c0:72:d7:d0:d5:d7:9e:94:
         c0:00:45:45:7e:b0:4c:3d:a1:51:6d:b0:a0:82:1f:5d:8e:10:
         71:66:36:3e:05:0b:d3:fb:94:eb:70:9f:ce:3c:d5:05:53:41:
         ff:e8:cd:38:dd:8a:3f:81:ea:43:e5:c7:d0:93:70:4f:f1:a3:
         aa:d7:95:f1:4d:cb:6e:e1:22:17:92:ae:16:25:a8:1b:23:76:
         cf:11:43:01:f3:11:7a:1f:37:7a:cd:66:0e:47:74:b2:7e:c2:
         b6:ea:9a:e6:c6:7c:bc:86:29:dc:eb:94:5b:e1:7b:e5:83:cd:
         67:5f:f0:7b:fc:65:75:10:fb:d6:92:34:4f:fd:6b:c0:0a:cc:
         5e:f8:43:3c:fb:f0:29:ac:a8:38:34:f2:b8:ab:2c:d1:92:8f:
         b9:10:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 29 04:53:26 2025 by rpki-client on console.sobornost.net