Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          GbfbgBe5fgDxoR/FpEXiCgfcnnIJ2W8+8uqpwGpo3zo=
Subject key identifier:   DD:A2:30:89:5D:2E:A7:D3:18:20:F7:0F:C1:1E:1B:99:22:E0:CF:EB
Certificate issuer:       /CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
Certificate serial:       6BDA8F1B54491B5BC4D60CFE7402F7048F70E80E
Authority key identifier: 1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa
Signing time:             Mon 07 Apr 2025 19:53:09 +0000
ROA not before:           Mon 07 Apr 2025 19:48:09 +0000
ROA not after:            Mon 06 Apr 2026 19:53:09 +0000
asID:                     269024
IP address blocks:        45.178.101.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:da:8f:1b:54:49:1b:5b:c4:d6:0c:fe:74:02:f7:04:8f:70:e8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
        Validity
            Not Before: Apr  7 19:48:09 2025 GMT
            Not After : Apr  6 19:53:09 2026 GMT
        Subject: CN=DDA230895D2EA7D31820F70FC11E1B9922E0CFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:12:4a:de:b3:0a:57:05:e2:9d:1e:c0:92:
                    0c:e9:f4:b6:6a:f4:35:8b:21:90:2d:93:f0:f8:45:
                    ba:be:75:b9:36:7f:60:f7:26:d1:46:61:7a:95:8c:
                    52:a8:49:72:72:60:f1:65:b3:b9:b0:ab:b4:9f:a0:
                    c0:d4:2a:ba:7e:97:39:6b:74:ef:6d:c7:e7:f8:32:
                    7b:7e:a6:32:0b:f1:19:fd:a6:4b:66:ea:7e:3b:cb:
                    2c:7b:27:11:40:db:4e:72:bd:7a:f5:50:93:69:3e:
                    24:ad:91:25:05:48:ed:7d:32:93:bc:64:de:9d:ac:
                    37:f2:9a:f9:a2:df:2c:64:2f:51:da:b7:94:48:2f:
                    4e:98:88:ff:17:79:4b:36:cb:db:7a:69:41:0d:fd:
                    f1:54:c3:ea:61:98:cc:ef:af:41:d4:9f:8d:80:e5:
                    b3:b7:13:a4:5a:3e:81:69:7b:11:80:79:97:a8:cf:
                    ee:a3:62:1f:bb:69:1c:d8:b7:19:f3:f3:24:72:7e:
                    92:92:c9:51:b1:8e:e5:4b:15:57:ca:7d:36:f7:77:
                    44:b4:ca:2e:29:58:c1:6d:00:03:82:e9:92:d7:64:
                    96:e8:81:b6:63:65:68:63:b4:ab:46:00:e0:3f:5d:
                    39:b8:61:9d:72:62:9a:89:e1:9a:1a:97:d9:e2:2c:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:30:89:5D:2E:A7:D3:18:20:F7:0F:C1:1E:1B:99:22:E0:CF:EB
            X509v3 Authority Key Identifier:
                keyid:1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:52:ef:18:e6:e3:6e:b4:88:20:66:b5:21:e9:81:dc:c4:5a:
         1e:64:57:f7:b0:5b:7f:09:39:1e:50:cc:86:85:e2:62:64:ad:
         36:2f:09:a0:b6:04:0d:7c:83:c2:b4:02:77:dc:05:6a:36:11:
         72:64:cd:6e:5b:7e:e2:95:cc:4c:23:fc:10:ba:d4:40:df:c4:
         f7:59:9a:12:2a:17:e0:98:91:f0:8f:10:76:2c:ab:4b:75:5a:
         57:8d:59:a0:e2:13:2c:6d:dd:2b:f0:f4:2d:57:1d:71:b8:c7:
         c0:b3:f1:cd:42:04:7b:7f:70:73:50:63:e8:47:e6:c3:df:e9:
         91:e8:fd:c1:1a:9b:a5:79:90:0a:32:85:3a:42:15:49:3a:9b:
         c2:09:4e:c2:f4:fa:fa:6a:ac:be:f4:56:11:d2:54:df:18:8d:
         cb:a7:48:bc:63:44:e3:d7:9c:20:51:c1:4c:d2:01:75:56:14:
         79:0c:ad:5b:14:93:a2:05:04:a1:1c:04:34:e5:02:82:fa:34:
         bc:57:51:a6:cc:21:77:77:4d:67:cc:ff:9d:85:b6:55:4d:52:
         a2:aa:4e:47:d7:9a:e6:59:3a:10:e7:0d:bd:08:f0:b1:4b:0d:
         b2:75:1e:5b:e2:c6:33:2c:f8:b9:35:72:0e:52:f9:bc:1d:d8:
         db:37:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net