Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e362e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          DiREgQX4MIgy+VsVFcFC8htKBY64JbYXf5NktUdfq9Q=
Subject key identifier:   48:9D:B3:8D:7D:0F:C4:46:FA:5B:C9:3D:B4:A8:1E:79:E3:53:BD:2A
Certificate issuer:       /CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Certificate serial:       58F99C1A6CF3E1CEA334E711796366A120D49DB6
Authority key identifier: 83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32342d3234203d3e20323638333038.roa
Signing time:             Tue 22 Apr 2025 14:28:09 +0000
ROA not before:           Tue 22 Apr 2025 14:23:09 +0000
ROA not after:            Tue 21 Apr 2026 14:28:09 +0000
asID:                     268308
IP address blocks:        45.238.6.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:9c:1a:6c:f3:e1:ce:a3:34:e7:11:79:63:66:a1:20:d4:9d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832B06F1B7DDB99E413147B2D786DA7B38425995
        Validity
            Not Before: Apr 22 14:23:09 2025 GMT
            Not After : Apr 21 14:28:09 2026 GMT
        Subject: CN=489DB38D7D0FC446FA5BC93DB4A81E79E353BD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:bb:18:de:c2:b9:3f:9a:ce:d7:1a:61:3d:a0:
                    f0:a3:39:d4:a7:d8:63:92:36:a0:90:21:a5:b1:d2:
                    af:68:45:91:ca:93:06:df:87:81:69:4f:81:47:63:
                    24:d3:c9:14:fe:32:00:ff:2b:70:ce:b3:ea:f4:40:
                    9d:83:ec:3d:58:a1:22:1e:2b:0e:33:a5:ca:c9:2c:
                    2a:7b:4e:8e:ce:4f:20:95:52:19:1e:3e:dc:6c:d3:
                    7e:b5:3b:4a:57:0f:f9:ef:c0:35:c7:a4:6c:24:8c:
                    1e:db:67:7f:5c:80:46:f6:99:84:6c:3c:4c:e8:3c:
                    f3:73:5e:f1:22:29:83:e6:33:ad:af:7e:8b:12:6c:
                    7d:b4:7e:15:15:e2:1e:f0:6d:a9:f6:d2:c6:e2:a7:
                    44:98:ea:d1:4b:8c:ac:95:93:ab:b0:1e:39:7c:4a:
                    82:ad:8c:de:fc:db:08:7e:6e:1e:ca:e9:a2:f9:75:
                    67:c6:ec:ae:96:48:18:55:66:9e:c8:e3:b3:ef:9f:
                    d0:0c:ae:6b:8a:e7:cb:c9:17:82:d4:65:87:bd:73:
                    49:12:78:23:a0:cf:94:18:99:5e:15:f9:c7:50:5f:
                    e4:86:a9:30:d2:3c:24:13:d1:c4:50:36:0b:38:5f:
                    87:df:56:9b:6a:24:bd:87:a5:b7:bf:b8:0f:18:1f:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:B3:8D:7D:0F:C4:46:FA:5B:C9:3D:B4:A8:1E:79:E3:53:BD:2A
            X509v3 Authority Key Identifier:
                keyid:83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e362e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:27:65:4e:b4:3e:69:c1:24:de:75:ee:c1:2e:51:c6:bf:16:
         f0:bf:44:46:29:a6:eb:2a:6a:6b:d1:14:80:32:6f:bd:6d:de:
         d0:77:b0:54:11:3c:72:bb:cd:f6:e0:d3:b5:93:97:d2:12:cf:
         93:6d:ef:ab:5b:39:1b:8c:cd:81:cc:1f:08:8b:09:07:cf:f5:
         7c:4e:0f:03:98:62:81:21:a9:01:8b:cc:2e:63:d2:30:ac:52:
         d4:18:e9:84:3d:37:1a:93:06:4e:3c:3d:8c:c3:57:70:ab:ef:
         18:31:12:d8:96:cd:98:d0:a1:66:81:d1:fa:36:94:6f:b4:09:
         07:06:ac:bb:53:14:71:2e:74:7e:78:92:f7:93:ca:4b:5e:fe:
         59:dc:7e:02:9b:32:91:50:fd:62:93:70:20:8e:fb:39:d0:8f:
         d4:a8:2c:a1:89:f4:3c:ea:cb:20:8e:15:4a:2d:7e:ba:09:3c:
         0c:5b:2f:b4:50:bb:79:b4:c1:38:3c:3c:36:8f:9d:4d:8c:fc:
         f2:ba:f4:2d:67:b6:96:1a:ed:fd:ca:3f:eb:61:e2:36:2b:02:
         08:57:b2:40:c0:de:1f:a1:7a:43:5e:50:cb:8c:3e:01:95:81:
         94:11:7e:3c:94:4f:e7:87:d3:cd:81:4f:2b:30:cf:90:8c:9b:
         ba:89:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net