Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235332e302f32342d3234203d3e20323633393430.roa
File:                     3133382e3138352e3235332e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier:          h832nTFcxaHudMOLx06MvYbcfqWNTozpl7D02wBX7yM=
Subject key identifier:   5B:FA:F6:42:61:E7:8A:BB:67:E3:BD:4E:19:ED:6F:EA:F1:61:AB:44
Certificate issuer:       /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial:       1924BED5EFB234DDF2D27A682C5DCF88C751BA5B
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235332e302f32342d3234203d3e20323633393430.roa
Signing time:             Wed 09 Apr 2025 14:26:37 +0000
ROA not before:           Wed 09 Apr 2025 14:21:37 +0000
ROA not after:            Wed 08 Apr 2026 14:26:37 +0000
asID:                     263940
IP address blocks:        138.185.253.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:24:be:d5:ef:b2:34:dd:f2:d2:7a:68:2c:5d:cf:88:c7:51:ba:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
        Validity
            Not Before: Apr  9 14:21:37 2025 GMT
            Not After : Apr  8 14:26:37 2026 GMT
        Subject: CN=5BFAF64261E78ABB67E3BD4E19ED6FEAF161AB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:6a:b6:94:2b:be:51:aa:fa:8d:df:22:4b:
                    d1:87:a4:86:12:cf:82:1c:b4:d1:e7:b2:ea:c3:b0:
                    c1:81:6f:1c:12:6b:ad:53:26:80:3e:6b:35:31:4c:
                    a0:96:f3:e8:9a:ba:a4:84:b1:96:25:4c:37:4b:19:
                    45:64:e7:a3:e9:a6:84:43:2b:7f:8b:9e:56:b9:40:
                    58:be:b9:d0:d5:4b:08:5e:f8:5b:84:25:66:99:54:
                    35:c2:b3:ff:24:7d:2f:3e:24:57:86:4b:c6:5c:40:
                    81:8d:0c:bc:7f:79:44:19:89:37:70:1c:06:8d:58:
                    57:ab:fd:21:fa:7b:b1:7c:d6:d4:e1:3d:0d:33:8f:
                    2d:cd:8c:ad:35:19:cc:2d:66:fd:58:18:77:83:ae:
                    76:0b:70:76:a4:08:2e:8f:40:73:0f:3e:45:b9:dd:
                    fd:1b:1b:d3:5d:2f:c9:06:17:9e:82:e8:b1:86:1a:
                    68:1c:1b:9f:e4:f4:df:89:82:37:f3:a0:23:25:25:
                    39:3e:ae:20:87:90:54:ac:60:45:a4:94:13:8c:93:
                    ab:93:9f:92:00:b8:f6:61:08:0c:ad:fc:75:3f:7f:
                    08:13:34:2b:ce:7e:34:42:06:cc:66:0e:8f:a5:42:
                    1d:a1:5e:fc:87:6e:37:b3:cb:32:70:ee:60:46:e1:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:F6:42:61:E7:8A:BB:67:E3:BD:4E:19:ED:6F:EA:F1:61:AB:44
            X509v3 Authority Key Identifier:
                keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235332e302f32342d3234203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:9c:81:19:7f:a4:be:5d:17:91:32:24:8b:d4:06:23:bc:
         2b:80:b4:a1:8e:b5:97:69:0c:36:d8:32:72:5d:55:0a:6c:2a:
         1b:90:20:7d:76:68:1f:8e:50:9d:a5:eb:a7:09:e6:25:a9:b4:
         98:28:af:10:99:04:09:0e:a5:21:5f:d7:54:11:54:0e:b7:a3:
         b6:35:0a:0a:63:f8:13:f0:e4:3b:84:1e:67:8e:4b:83:35:dc:
         01:84:19:6a:40:f2:49:04:b7:f0:a2:03:de:56:cf:fc:f3:c9:
         7a:40:5f:f9:9a:ab:5a:20:1e:0f:57:3d:31:78:ed:36:cc:e5:
         61:e0:22:4b:78:a7:9c:93:98:cc:38:60:3a:6d:ce:07:47:f5:
         4b:17:30:43:bc:ba:47:13:33:a2:cd:97:d5:de:56:8c:c8:ca:
         f8:e3:ce:45:77:f7:16:e9:2a:ee:6f:9f:6a:79:16:46:e3:14:
         44:59:f0:f6:06:23:70:26:8f:07:af:d8:86:b1:80:0b:37:1b:
         17:f8:28:b2:9a:92:a2:13:11:7a:58:81:02:df:a9:cb:fb:16:
         18:fd:4e:04:d4:5c:6a:29:6a:63:eb:48:68:ab:b7:78:68:05:
         8e:03:a6:e2:0d:bf:d7:b7:8e:f6:de:37:52:2e:35:00:1d:8e:
         3a:65:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net