Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          770BVhekIKrBlOPX5yYYZcgCDyuKA+MbMDolNomttVw=
Subject key identifier:   20:33:2A:DB:99:C9:31:25:E1:E1:DB:26:60:C5:FE:6A:07:DE:1A:DF
Certificate issuer:       /CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
Certificate serial:       2D171C1265B0737D0F9BC8DB0670E17EF1F064D5
Authority key identifier: 1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
Signing time:             Mon 07 Apr 2025 19:53:09 +0000
ROA not before:           Mon 07 Apr 2025 19:48:09 +0000
ROA not after:            Mon 06 Apr 2026 19:53:09 +0000
asID:                     269024
IP address blocks:        45.178.102.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:17:1c:12:65:b0:73:7d:0f:9b:c8:db:06:70:e1:7e:f1:f0:64:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
        Validity
            Not Before: Apr  7 19:48:09 2025 GMT
            Not After : Apr  6 19:53:09 2026 GMT
        Subject: CN=20332ADB99C93125E1E1DB2660C5FE6A07DE1ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:56:ef:ba:88:05:34:64:bf:3a:bf:b1:4e:
                    be:e1:78:e0:14:83:6e:9e:30:b2:c2:b1:b2:98:8a:
                    04:37:ce:15:da:ee:93:ed:c2:8d:38:08:18:1a:d2:
                    72:5b:62:38:a9:56:e3:1b:82:ed:6c:75:7f:db:47:
                    48:68:03:d2:58:f0:25:f7:be:0e:c7:82:65:99:8a:
                    5c:ae:ef:5a:63:59:1a:f8:c7:3f:79:42:a2:fe:ed:
                    fc:cd:d8:4b:ba:5d:cd:f4:02:40:81:4b:7a:df:c8:
                    e0:2a:aa:d5:13:0f:f2:51:39:9f:02:44:9e:4b:96:
                    1d:7b:bc:ac:5d:0e:54:35:fd:34:f9:00:e1:3a:d6:
                    2a:66:01:3d:0d:44:24:03:06:02:7e:58:6e:60:2b:
                    ca:28:89:9c:f5:7c:6c:54:c3:9b:93:82:bc:0c:5e:
                    d1:99:01:b0:be:31:73:47:20:80:cb:50:ad:61:9a:
                    92:3e:70:76:a2:57:48:0b:b6:1e:7d:3a:fc:98:3b:
                    95:3c:9a:5e:22:89:90:11:27:e1:c5:87:68:58:bc:
                    0e:31:b8:39:aa:58:d5:73:3e:3a:1d:f1:18:cd:0e:
                    4a:95:e0:61:be:ea:03:49:b0:22:c2:71:6b:f9:99:
                    0a:f1:32:ad:6f:f5:aa:ae:a3:20:19:7b:71:0a:72:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:33:2A:DB:99:C9:31:25:E1:E1:DB:26:60:C5:FE:6A:07:DE:1A:DF
            X509v3 Authority Key Identifier:
                keyid:1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:6c:4d:43:da:8b:7c:de:04:90:91:bc:3e:e6:03:0a:81:c6:
         21:34:c6:02:83:93:2c:10:7a:41:fd:f1:34:ef:7b:53:2e:1c:
         a9:17:68:83:60:af:ac:b8:f3:30:cc:32:b7:52:6d:69:20:df:
         90:1f:db:26:46:d4:87:45:ee:37:97:2d:dc:b1:28:98:b4:54:
         ab:99:64:8e:ae:d2:84:a0:1a:8a:cf:22:8d:28:e9:cd:07:44:
         d1:82:48:bc:19:62:20:66:95:be:f4:e0:41:5a:bf:aa:fd:6b:
         09:b0:f8:90:ff:57:05:21:07:ae:9e:e7:4f:06:3a:ca:ca:dc:
         8b:56:2c:c9:ac:08:87:55:d0:35:1a:96:d9:6a:78:63:ab:2e:
         aa:8d:a1:27:6e:ce:dd:3e:c2:8c:87:a6:79:dc:08:fa:6a:13:
         f4:72:97:a5:8e:4f:ff:53:62:dd:4f:5c:00:06:d5:74:c8:fe:
         fd:e7:a4:c0:f0:4d:e5:18:20:92:58:87:d5:e9:5a:15:b4:91:
         3a:68:f4:2c:41:51:f6:c5:b0:6d:6a:62:bf:2a:0b:f1:35:61:
         78:14:a4:d5:27:51:d1:3c:c9:54:51:50:3f:0c:95:0a:89:11:
         9a:61:ac:d3:0a:15:eb:34:12:46:1e:e1:a4:7b:17:5e:04:75:
         d7:3b:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net