Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32332d3233203d3e20323638333038.roa
File:                     34352e3233382e362e302f32332d3233203d3e20323638333038.roa (raw, json)
Hash identifier:          Dn+J9AGP6rJFBVdrXvm5JZWn5xVM+3DQE+c3IJ7tt+M=
Subject key identifier:   03:C0:E1:04:00:CC:C3:A4:B1:07:33:6A:00:70:F2:B2:10:63:EB:B6
Certificate issuer:       /CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Certificate serial:       7A6B5B293EEF65F0AC521E4354BBA1C2A8456837
Authority key identifier: 83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32332d3233203d3e20323638333038.roa
Signing time:             Tue 22 Apr 2025 14:28:08 +0000
ROA not before:           Tue 22 Apr 2025 14:23:08 +0000
ROA not after:            Tue 21 Apr 2026 14:28:08 +0000
asID:                     268308
IP address blocks:        45.238.6.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6b:5b:29:3e:ef:65:f0:ac:52:1e:43:54:bb:a1:c2:a8:45:68:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832B06F1B7DDB99E413147B2D786DA7B38425995
        Validity
            Not Before: Apr 22 14:23:08 2025 GMT
            Not After : Apr 21 14:28:08 2026 GMT
        Subject: CN=03C0E10400CCC3A4B107336A0070F2B21063EBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:5a:11:14:4d:76:e8:b9:ff:da:d0:d8:ff:
                    7b:df:fe:c1:ce:fc:42:8d:54:2c:7b:76:6c:b2:e4:
                    25:0e:6f:cf:be:94:2d:f0:f7:5c:78:7d:4b:7c:c6:
                    06:88:5a:05:90:bb:f5:2c:04:73:d1:0e:da:d9:e7:
                    78:6f:20:0f:b6:90:43:d0:1b:86:e6:43:8c:d5:99:
                    bc:88:fd:4a:70:fe:1d:b1:2e:89:37:eb:e5:d1:71:
                    16:15:26:91:69:1e:e3:98:2f:0a:01:d5:8f:6e:b1:
                    75:d9:3c:93:9e:61:ca:4b:10:7c:25:66:89:87:93:
                    14:bd:d8:16:5b:d9:5e:9b:af:58:3c:3d:53:0d:8b:
                    e4:a1:e7:7c:59:58:05:08:01:d9:ac:e1:85:98:bc:
                    61:01:80:f2:ea:46:29:65:1f:7b:6b:0f:93:f6:0b:
                    65:24:5c:d2:d9:3a:ae:b7:27:2c:13:59:16:dd:65:
                    55:6a:e8:20:01:8b:24:29:89:ba:a9:ef:5f:4e:2c:
                    84:d7:f2:5a:48:91:67:5a:9c:d1:66:33:41:d3:ba:
                    e0:f8:84:ce:22:a5:1a:c8:56:b4:0b:5b:0d:d8:d2:
                    ce:83:90:f7:9e:54:b9:71:b2:c2:b6:9a:41:29:16:
                    f7:80:b5:63:77:b4:b9:21:11:9d:7e:78:d3:ac:94:
                    93:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:E1:04:00:CC:C3:A4:B1:07:33:6A:00:70:F2:B2:10:63:EB:B6
            X509v3 Authority Key Identifier:
                keyid:83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32332d3233203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:ef:df:3f:9e:15:06:99:1a:88:ba:c2:ca:cf:9e:8f:46:
         d3:90:d4:8f:2c:34:86:28:84:3c:94:1e:a1:e2:f3:ef:dc:e3:
         df:3a:42:37:a1:b3:43:87:2c:9b:eb:24:1c:20:a6:6c:74:ad:
         e5:4e:2b:4d:d1:87:2d:45:a5:10:c9:ad:4c:75:9d:68:05:d5:
         72:d1:91:84:5b:b9:6c:b1:18:fd:d2:8d:85:4e:dc:29:40:91:
         4f:fe:e1:0f:21:83:0b:85:1b:a0:06:fd:ee:95:3f:76:e5:ca:
         13:15:48:d8:73:c3:8d:bf:a2:b8:32:f9:9e:07:a4:a5:47:e5:
         a7:df:7e:8a:cd:1a:2d:26:91:5e:13:0b:28:1f:0b:c7:15:df:
         4a:f4:23:8a:f9:1a:23:44:95:aa:96:0c:a7:ea:7e:9c:73:49:
         e4:86:4c:5e:0b:db:f0:87:a4:79:ac:15:db:c9:6b:ea:f4:f1:
         59:31:9f:30:a4:cd:f4:4e:5c:2a:05:77:96:6f:00:7a:01:3b:
         ae:5f:56:93:61:69:84:ed:59:0b:fc:82:db:7e:b8:af:08:ae:
         fd:a5:d4:8f:d1:04:5f:61:d4:fe:8c:24:81:a1:8b:e9:5c:13:
         4a:82:66:cf:b1:dc:54:7b:51:66:79:b4:47:0e:13:0e:ca:ec:
         f9:2c:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net