Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa
File:                     34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa (raw, json)
Hash identifier:          NDUg5sI/4wsWwPYDUNk6/nfel2YhRxQ8JkIbwoVbVKM=
Subject key identifier:   D5:AD:59:74:BE:1A:28:90:6A:DF:7E:49:63:44:3E:8C:05:FD:66:9E
Certificate issuer:       /CN=92286F97AD00EA0B407B4DB541652D934AEB7536
Certificate serial:       6B33D6D1BF4B9D922CE3AD41008BF0BFFAAE1700
Authority key identifier: 92:28:6F:97:AD:00:EA:0B:40:7B:4D:B5:41:65:2D:93:4A:EB:75:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92286F97AD00EA0B407B4DB541652D934AEB7536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa
Signing time:             Wed 23 Apr 2025 21:03:20 +0000
ROA not before:           Wed 23 Apr 2025 20:58:20 +0000
ROA not after:            Wed 22 Apr 2026 21:03:20 +0000
asID:                     267059
IP address blocks:        45.228.108.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:33:d6:d1:bf:4b:9d:92:2c:e3:ad:41:00:8b:f0:bf:fa:ae:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92286F97AD00EA0B407B4DB541652D934AEB7536
        Validity
            Not Before: Apr 23 20:58:20 2025 GMT
            Not After : Apr 22 21:03:20 2026 GMT
        Subject: CN=D5AD5974BE1A28906ADF7E4963443E8C05FD669E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:46:45:c9:92:8d:98:1a:c9:53:6e:31:92:
                    71:66:89:d1:ca:08:c9:5c:95:41:1b:3e:72:9c:80:
                    74:dd:b5:b2:ef:c4:cb:b0:bd:63:9f:f6:6b:08:76:
                    99:74:98:ca:f8:23:e2:dd:f9:bd:1a:f0:52:9d:b8:
                    20:0e:35:cf:cd:11:d6:29:7d:d1:b9:1f:ac:e0:d0:
                    a3:64:e0:e4:8d:52:63:50:fb:fd:2d:b0:b5:7b:6a:
                    69:2b:78:f2:c4:e7:02:20:4b:1c:01:bf:9d:86:a8:
                    b8:bd:7c:32:6a:37:5d:2f:6f:8b:45:12:8d:62:54:
                    11:0a:d7:07:5f:31:49:ea:b7:c8:7f:7b:54:c7:de:
                    f8:f4:a5:5a:3b:91:1a:f0:50:2e:1b:ca:e4:3e:2d:
                    ef:a8:fa:5d:8e:ec:3f:5c:67:98:95:1e:a6:26:56:
                    08:76:22:b6:62:00:a5:5f:53:13:27:81:42:5b:5b:
                    76:1f:3b:ec:7f:24:0a:04:fb:46:ed:6f:a2:92:e8:
                    90:3f:db:80:f4:89:03:18:57:fc:60:89:46:ac:55:
                    1b:15:a1:6c:58:0b:94:9a:68:b2:0b:79:dd:3b:56:
                    d3:76:d9:d0:e5:b6:af:47:aa:37:cb:81:c0:4a:21:
                    9b:9d:bd:2a:12:72:ba:d5:e2:ba:9b:92:c3:2a:65:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:59:74:BE:1A:28:90:6A:DF:7E:49:63:44:3E:8C:05:FD:66:9E
            X509v3 Authority Key Identifier:
                keyid:92:28:6F:97:AD:00:EA:0B:40:7B:4D:B5:41:65:2D:93:4A:EB:75:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/92286F97AD00EA0B407B4DB541652D934AEB7536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92286F97AD00EA0B407B4DB541652D934AEB7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:bb:26:75:37:1e:a7:63:52:51:ce:4f:8d:76:5c:fc:8c:c1:
         13:b0:ad:e7:5d:c7:2a:ff:b7:a5:80:97:a1:18:40:0c:7b:57:
         62:a7:06:24:d5:c3:21:70:7e:e2:52:b8:68:9d:f7:9d:c9:3a:
         1b:2a:83:a1:7d:89:a7:a2:ca:25:26:e9:11:2d:57:5f:ae:ec:
         76:e0:8f:e4:51:e6:4e:a0:f3:6d:22:03:3f:22:fc:dc:26:8d:
         94:36:93:28:c9:c7:db:47:83:02:dc:12:03:fc:01:17:20:63:
         12:6d:01:37:7a:d4:4d:47:82:a8:db:df:5c:76:b8:2f:26:47:
         b4:51:63:d2:6b:7e:9e:af:50:a4:fe:00:91:9f:2c:8a:a7:d1:
         07:e4:7f:66:78:a7:69:17:6a:36:b5:a3:bf:72:f9:fb:a9:1c:
         fd:28:c4:2e:d9:cf:c8:bf:7c:45:98:76:4f:fd:79:a4:56:94:
         bb:a3:3c:fa:36:e6:8c:bb:a2:bf:ed:7e:f9:00:75:13:07:d3:
         09:58:d7:1c:6b:83:0a:59:46:a9:e2:84:69:f2:1a:7d:d1:4c:
         3e:f3:10:33:67:ae:f3:b8:4e:f6:6a:1e:43:db:9f:5e:26:8f:
         77:14:69:f6:79:32:47:52:72:a4:0a:e0:de:36:6d:15:44:ca:
         a4:07:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net