Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa
File:                     34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa (raw, json)
Hash identifier:          Ar3e7UqTADwfhhoz9F4spCauOjlFOGUDuUKWLupdqT0=
Subject key identifier:   95:3F:AC:FF:CB:A3:3D:33:31:E2:5D:7E:35:73:43:13:0C:F7:87:9A
Certificate issuer:       /CN=D1FBE89D5F67043ED369B1D24B2F8A18C9131156
Certificate serial:       70AEDCDFF53C4B6E72B96F0568BB9767A901E6CD
Authority key identifier: D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa
Signing time:             Thu 26 Dec 2024 06:43:33 +0000
ROA not before:           Thu 26 Dec 2024 06:38:33 +0000
ROA not after:            Thu 25 Dec 2025 06:43:33 +0000
asID:                     268869
IP address blocks:        45.174.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ae:dc:df:f5:3c:4b:6e:72:b9:6f:05:68:bb:97:67:a9:01:e6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FBE89D5F67043ED369B1D24B2F8A18C9131156
        Validity
            Not Before: Dec 26 06:38:33 2024 GMT
            Not After : Dec 25 06:43:33 2025 GMT
        Subject: CN=953FACFFCBA33D3331E25D7E357343130CF7879A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:18:26:87:7b:22:2b:cf:89:28:19:07:65:
                    81:60:e5:25:a4:87:0c:eb:1f:56:a8:27:ca:13:fd:
                    46:c3:16:ed:76:a0:f6:20:c2:40:11:31:26:97:35:
                    b2:91:09:2f:36:da:12:1e:90:83:97:5c:22:13:53:
                    36:56:2d:49:75:37:35:d9:06:ba:ac:0b:3b:54:81:
                    f2:06:8c:0b:28:30:30:b8:48:b0:aa:b0:85:7d:77:
                    d3:cb:c6:18:a0:db:7c:66:5c:01:90:9a:dc:97:68:
                    43:cf:12:7e:75:be:37:3b:55:a2:b3:63:11:aa:ad:
                    31:71:76:ec:90:66:18:01:03:44:dd:00:3a:89:f5:
                    9f:26:8c:39:81:87:51:73:b1:da:70:87:bb:c3:67:
                    f1:54:3f:d7:77:7c:64:4b:22:12:a4:a6:05:ea:80:
                    45:b1:48:0d:87:fc:a3:bc:3b:29:f8:8f:86:fb:bd:
                    22:bf:7d:97:ae:7a:34:55:d0:b6:f4:53:b8:d4:55:
                    a4:ef:fa:f1:be:a5:82:aa:53:e9:0e:f3:4c:2e:3d:
                    b3:b4:64:3f:0e:91:fd:90:d2:c1:91:2e:38:0e:a7:
                    a1:6b:d2:1f:3c:2e:1c:8b:1a:21:33:d3:5e:b0:98:
                    6d:d2:fa:7c:50:6f:7e:85:af:e2:c5:ae:f7:c6:9d:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3F:AC:FF:CB:A3:3D:33:31:E2:5D:7E:35:73:43:13:0C:F7:87:9A
            X509v3 Authority Key Identifier:
                keyid:D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:90:1a:d8:51:10:64:bf:40:c8:c8:33:58:ad:6a:4f:32:
         34:8a:45:e0:c3:7a:72:5c:62:0a:49:08:39:d9:47:86:2e:58:
         51:cc:b4:61:7f:55:0a:e1:10:fe:f0:f5:34:00:96:7e:98:84:
         59:d3:08:fb:a7:5b:62:b4:bc:b1:71:04:ad:33:5b:a4:b9:06:
         5b:d4:9b:92:ea:c6:11:bf:97:43:d7:96:6f:45:88:b9:f0:b4:
         31:fc:f1:6a:9b:8b:51:43:3d:1d:16:95:63:b6:75:80:dc:59:
         70:35:a7:9d:26:87:a3:ea:71:19:66:54:b6:bd:3d:84:cd:2f:
         a2:54:58:c8:a0:f1:1a:18:f2:29:81:86:5a:81:f9:7b:28:52:
         4c:e1:cb:2a:86:1c:89:99:d1:b3:a6:72:72:fb:16:d3:74:c9:
         df:99:47:38:47:41:1d:c1:7d:4b:69:61:6c:28:fa:14:9a:9b:
         84:68:35:0c:0f:e5:32:78:cd:7d:13:50:d2:99:0d:6a:c2:67:
         4c:6c:33:12:44:49:8d:b7:b8:6f:7f:2f:fd:09:38:95:5f:a6:
         72:19:a6:72:18:10:ef:26:13:ff:69:a7:20:29:05:12:a2:b1:
         c1:38:cd:29:bb:27:50:ee:32:00:07:bc:b8:52:27:f8:c7:bc:
         9c:5e:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 12 20:17:36 2025 by rpki-client on console.sobornost.net