Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          u5+kO0PfEWA2yFXVqbki85HPaVPAJFwptHmV9fF8QgU=
Subject key identifier:   8D:65:20:1D:14:27:DD:E2:DD:ED:70:D9:2B:CF:F2:0D:FA:30:A5:C7
Certificate issuer:       /CN=3073B425FD21597EA2229B04AED47720BF469CE6
Certificate serial:       476E134B85A449277B5D7D3FB4C6D3EBA6D585BB
Authority key identifier: 30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 09 Apr 2025 14:20:53 +0000
ROA not before:           Wed 09 Apr 2025 14:15:53 +0000
ROA not after:            Wed 08 Apr 2026 14:20:53 +0000
asID:                     262899
IP address blocks:        45.165.128.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6e:13:4b:85:a4:49:27:7b:5d:7d:3f:b4:c6:d3:eb:a6:d5:85:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3073B425FD21597EA2229B04AED47720BF469CE6
        Validity
            Not Before: Apr  9 14:15:53 2025 GMT
            Not After : Apr  8 14:20:53 2026 GMT
        Subject: CN=8D65201D1427DDE2DDED70D92BCFF20DFA30A5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:7f:f3:04:d8:43:36:ff:ef:9f:e6:3e:35:
                    42:c4:9f:73:cb:74:57:95:e3:8b:9f:4a:78:9a:e1:
                    00:3a:97:1f:b0:95:0f:f3:37:c2:d4:8d:c5:aa:28:
                    31:4c:97:cf:ce:2b:50:1f:ec:ed:b1:94:5d:8f:5d:
                    cf:6a:42:c6:2c:47:63:ef:50:4d:71:d2:7d:0d:a7:
                    e0:1f:4c:14:f3:77:37:17:ac:48:bd:f1:a8:a6:5b:
                    c9:cc:ba:60:38:2e:db:40:5e:d4:b4:a9:d5:9c:03:
                    38:4c:3d:5b:d8:8b:b0:6c:11:5a:44:ec:96:14:19:
                    5c:16:ba:0d:0f:fa:72:4d:d5:05:fe:be:74:91:e7:
                    f6:f1:b4:0e:07:58:ed:ca:01:3e:ff:4b:1a:72:c5:
                    ab:36:7b:fc:90:51:9d:86:a0:62:a9:3a:eb:ce:f8:
                    66:2c:14:cc:2c:d9:89:43:c7:78:5f:9b:70:8b:5c:
                    a0:8c:35:d1:86:f5:ba:9a:f1:41:41:12:02:4b:91:
                    c8:cf:62:62:34:95:15:b1:10:8f:0b:41:e6:a5:9e:
                    15:a2:b6:85:a4:51:a2:5a:45:2b:8e:67:f1:98:cb:
                    bb:79:11:38:a4:0c:fb:17:2c:c5:25:ff:ad:ad:9c:
                    95:13:27:8c:1f:5e:e1:d3:98:93:e4:32:75:51:75:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:65:20:1D:14:27:DD:E2:DD:ED:70:D9:2B:CF:F2:0D:FA:30:A5:C7
            X509v3 Authority Key Identifier:
                keyid:30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/3073B425FD21597EA2229B04AED47720BF469CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:54:fb:44:3e:3e:79:4a:fd:95:8d:c2:44:95:80:76:0c:55:
         9c:18:a9:e1:f5:92:12:c5:3b:bc:68:be:83:ab:09:83:9e:1c:
         75:f4:84:85:27:5d:69:05:2b:a8:cd:6f:fb:6a:97:cf:3d:a6:
         0f:ca:9a:51:39:4f:a3:d0:88:70:4f:b8:4f:6f:70:c7:79:8a:
         dc:1d:53:bc:ed:a6:bf:fe:ec:a3:2c:87:eb:3b:75:8b:65:9e:
         12:c8:cc:f7:10:90:57:15:99:f7:ef:37:b0:c6:9f:66:ea:8a:
         83:89:f0:27:2a:10:09:1e:8e:fd:88:4f:ac:8d:26:8d:d8:ed:
         bb:da:48:ed:df:b0:9e:35:e9:b7:f8:a8:90:8d:7c:3f:b9:72:
         88:7a:bb:69:09:7d:68:8b:98:d4:c1:76:45:f8:80:13:13:f9:
         29:79:a0:d9:84:3e:fa:6e:bd:7d:59:00:2e:b7:48:e5:a9:91:
         30:c7:f6:22:eb:c5:f7:1a:8d:15:c0:a2:cd:e1:85:fb:39:40:
         b1:6d:b2:b4:f4:9b:dc:22:35:0f:90:87:61:26:2c:e9:e4:b9:
         05:dc:02:cd:86:63:f9:f4:e1:9e:cc:fd:0a:34:25:9c:97:bd:
         e3:7d:a4:52:cc:70:75:01:0a:d6:d9:a6:8f:d4:15:b1:97:ed:
         77:af:a5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net