Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa
File:                     3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa (raw, json)
Hash identifier:          PmarvvmcOGvflotc081jA/H4FKQ05eyaUnPE62H/t9w=
Subject key identifier:   24:4D:49:98:FF:9C:58:DE:74:9D:03:2D:4A:89:DA:49:EF:26:F0:A8
Certificate issuer:       /CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
Certificate serial:       2129C71790515825A12B8B102A391F2576403316
Authority key identifier: 70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa
Signing time:             Wed 19 Feb 2025 20:25:47 +0000
ROA not before:           Wed 19 Feb 2025 20:20:47 +0000
ROA not after:            Wed 18 Feb 2026 20:25:47 +0000
asID:                     270716
IP address blocks:        189.127.188.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:29:c7:17:90:51:58:25:a1:2b:8b:10:2a:39:1f:25:76:40:33:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
        Validity
            Not Before: Feb 19 20:20:47 2025 GMT
            Not After : Feb 18 20:25:47 2026 GMT
        Subject: CN=244D4998FF9C58DE749D032D4A89DA49EF26F0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:7f:0f:05:4a:15:1c:9c:0c:85:b3:67:99:
                    60:40:0f:e9:f3:e8:0b:83:5b:55:54:c6:5c:a8:aa:
                    c0:56:ac:98:40:82:63:f2:fc:6f:33:b2:59:91:36:
                    51:6e:70:48:ee:61:90:ab:3d:fb:29:75:00:51:a4:
                    07:9a:4d:0a:92:aa:d2:7e:55:9e:d0:81:bc:1e:6e:
                    71:70:21:fa:77:5a:84:4c:84:42:c4:81:54:ff:4c:
                    88:44:e0:21:be:e4:82:9b:d0:8b:71:fa:92:d4:93:
                    81:ee:3e:c8:eb:90:2f:36:9e:95:47:8f:ed:c2:37:
                    d7:b0:63:b4:91:28:ea:7a:56:20:bf:44:de:52:79:
                    25:36:77:71:0a:f3:b9:b8:88:c4:d4:10:d6:84:46:
                    f4:d6:f8:6b:f8:30:50:c1:4c:0e:64:3f:38:cd:cd:
                    25:71:5c:67:73:b5:47:5a:b5:31:9a:26:21:1f:6e:
                    a9:6e:98:de:b3:7a:67:68:33:b8:79:63:92:0f:32:
                    ed:78:d2:ee:5b:e6:55:10:e7:11:5e:21:2d:7e:6b:
                    ef:5d:59:a3:b1:0e:18:e3:4a:28:a0:0b:ce:34:56:
                    ab:df:da:14:28:bc:36:48:71:ff:68:5e:87:cf:c3:
                    d1:73:9e:82:d7:8e:1c:a2:ed:f0:fb:96:04:74:4c:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:49:98:FF:9C:58:DE:74:9D:03:2D:4A:89:DA:49:EF:26:F0:A8
            X509v3 Authority Key Identifier:
                keyid:70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:12:f2:93:b6:56:dd:d4:16:cc:20:75:22:9b:13:21:be:
         79:6e:ab:53:c6:67:0a:bb:0b:be:fe:f0:e8:55:f2:a3:5b:bb:
         62:91:5e:c3:d8:4f:7d:e8:25:b6:54:97:b6:54:18:55:80:2c:
         11:2a:ba:7c:fc:48:56:fb:bd:ad:cc:a1:5e:8e:fd:7a:16:20:
         e1:e4:6a:2f:df:a0:36:95:9a:35:3b:dd:fb:18:dc:87:03:de:
         97:a4:8b:9d:4d:6e:3b:6b:0e:22:46:80:b8:6a:61:4b:24:fc:
         b7:3a:13:d2:7a:4b:82:41:a9:4a:e1:04:ab:83:ce:e7:ee:d5:
         bb:06:fe:de:0b:0f:44:3e:e5:fa:60:b7:45:a0:54:a6:92:c6:
         0c:cd:05:9d:34:42:68:85:80:d6:45:46:bf:9a:f2:f2:2a:d0:
         c0:9b:7c:a6:ea:0a:d5:3a:00:1b:13:93:1d:3d:1a:d0:e7:cb:
         89:bc:69:6b:2e:c5:6a:79:2b:9f:fc:39:c7:4f:7d:43:d1:d7:
         4d:56:70:db:7d:1f:ad:d9:20:2d:c1:43:62:8f:b0:0b:fa:04:
         9a:1d:55:b1:06:ab:ad:ad:2a:73:8e:27:f8:c8:ac:91:3e:72:
         f0:ce:b3:2f:12:bc:00:e5:9f:34:76:37:98:14:76:32:cc:0e:
         d9:f9:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:11:59 2025 by rpki-client on console.sobornost.net