Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35302e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          iALdWgUS/I97AmR2396uMzzLq0rOEPxavnFYpePUfi4=
Subject key identifier:   DC:5E:95:F6:D3:41:39:68:8B:52:3A:B4:A7:FF:D3:81:F3:0F:DC:55
Certificate issuer:       /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial:       4C4676785FFCFAA5709E884B7A4B7784D5C57242
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
Signing time:             Thu 06 Mar 2025 18:59:19 +0000
ROA not before:           Thu 06 Mar 2025 18:54:19 +0000
ROA not after:            Thu 05 Mar 2026 18:59:19 +0000
asID:                     267256
IP address blocks:        45.232.50.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:46:76:78:5f:fc:fa:a5:70:9e:88:4b:7a:4b:77:84:d5:c5:72:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Validity
            Not Before: Mar  6 18:54:19 2025 GMT
            Not After : Mar  5 18:59:19 2026 GMT
        Subject: CN=DC5E95F6D34139688B523AB4A7FFD381F30FDC55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:ed:50:ef:25:ef:ed:cf:65:33:66:a0:ae:
                    fc:17:d3:cb:ff:19:de:d7:9b:6f:5b:c4:7e:b9:b2:
                    5f:77:f7:40:01:65:e3:2c:17:e4:18:b2:e6:11:fa:
                    e6:cf:6a:dd:e9:64:5e:a9:03:47:42:00:3c:9f:9e:
                    bc:a2:25:13:61:b3:38:9e:db:fd:77:99:c4:8f:d1:
                    70:d2:b6:06:4f:61:23:96:47:d6:a2:08:75:4b:19:
                    c0:b8:0f:55:d1:7f:98:85:95:d7:5b:4e:ec:22:50:
                    ea:d9:54:ce:3a:ba:fc:7f:33:b0:d0:38:b8:0c:82:
                    eb:1d:84:8b:3e:87:d7:b9:b8:b4:2a:8e:97:1a:22:
                    1b:d3:1c:45:71:3c:f7:af:da:a9:cb:39:7a:45:2b:
                    b9:6b:d6:71:78:47:21:ea:db:10:d7:36:0f:eb:9b:
                    1b:9a:b9:b6:db:6e:55:1c:0a:97:b3:76:66:2b:53:
                    f0:55:67:a2:73:b0:8a:df:b5:97:1f:ef:49:4a:56:
                    99:8b:69:93:df:07:9a:38:3c:fb:28:63:5f:80:23:
                    51:95:c2:68:b4:5b:45:a5:af:1e:55:fb:ee:f8:92:
                    f2:a8:2d:d3:d7:f3:8c:9d:b3:28:cd:5d:03:49:4a:
                    4f:60:3b:52:70:b3:c2:fb:c8:49:d6:d0:17:c5:26:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:95:F6:D3:41:39:68:8B:52:3A:B4:A7:FF:D3:81:F3:0F:DC:55
            X509v3 Authority Key Identifier:
                keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:13:07:0d:3a:bb:26:3c:b0:bc:54:e4:2e:d7:4f:cd:dc:
         2e:d1:04:18:93:b6:b5:df:db:b9:bb:9a:2d:c1:dd:78:34:a3:
         49:d4:4b:2c:d4:f3:83:0e:08:33:31:92:14:a7:a2:08:31:a9:
         a8:ac:09:67:e0:2f:5f:e8:1c:d7:d2:9b:11:04:d0:3a:20:43:
         15:66:59:b1:cc:89:54:b6:5f:73:f8:9b:29:96:ab:69:6c:42:
         90:da:54:14:3e:51:83:30:13:54:4b:10:99:b9:5e:7c:46:ec:
         bf:50:d4:a8:24:e7:d0:8b:f4:23:0f:8d:d5:d6:c0:11:b9:7d:
         db:a9:c8:6a:49:cc:10:c5:4e:7f:3e:fb:e5:69:7c:1f:d1:cc:
         8b:0f:13:b5:8f:f7:eb:f7:00:7c:db:4a:e8:e9:60:dd:78:36:
         b6:26:d2:72:fa:ab:1e:e4:7f:db:76:ff:64:6f:a5:38:77:9b:
         34:72:94:90:28:4e:82:45:1a:52:3f:5f:57:a8:68:e2:61:88:
         35:16:25:dd:2d:cc:ca:58:06:ee:10:a5:0e:20:45:d0:8a:f8:
         f8:65:9f:8e:5b:5b:15:15:4b:d9:a2:67:3d:9a:dc:1b:d9:00:
         1f:cc:37:94:54:d0:07:b5:0a:07:5b:42:a1:13:7d:00:d9:ff:
         de:0e:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:15:23 2025 by rpki-client on console.sobornost.net