Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          XbBoh3WAxI81O9d6goqqjy2B7C4sJ0IsVfG/Dp/hAL8=
Subject key identifier:   CE:ED:B5:1D:6A:40:04:A2:57:2D:B3:1A:D5:BA:98:F2:95:7F:71:85
Certificate issuer:       /CN=3073B425FD21597EA2229B04AED47720BF469CE6
Certificate serial:       3DE01EA0A31B90A280504C6B725F3F5E588790C9
Authority key identifier: 30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 09 Apr 2025 14:20:54 +0000
ROA not before:           Wed 09 Apr 2025 14:15:54 +0000
ROA not after:            Wed 08 Apr 2026 14:20:54 +0000
asID:                     262899
IP address blocks:        45.165.129.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e0:1e:a0:a3:1b:90:a2:80:50:4c:6b:72:5f:3f:5e:58:87:90:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3073B425FD21597EA2229B04AED47720BF469CE6
        Validity
            Not Before: Apr  9 14:15:54 2025 GMT
            Not After : Apr  8 14:20:54 2026 GMT
        Subject: CN=CEEDB51D6A4004A2572DB31AD5BA98F2957F7185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:19:54:60:d1:ce:af:36:55:76:6d:eb:cf:
                    cb:60:77:fc:94:cc:80:d8:6e:06:b6:b9:7e:f3:09:
                    83:7f:0a:a9:bb:bc:d1:8e:f8:dc:be:18:da:7a:b7:
                    f0:71:48:c9:03:a6:c9:2b:02:e2:53:2d:2c:7d:0c:
                    69:09:37:38:98:8f:42:6e:33:3c:43:81:c5:c3:6a:
                    1c:a7:b5:3f:f6:62:89:8d:2d:be:4d:9b:26:6e:8e:
                    43:aa:97:da:c1:64:65:02:6a:dd:4f:1e:c3:34:6b:
                    7b:84:a4:6a:c4:5c:12:12:60:83:8b:c9:49:42:7b:
                    cc:89:40:15:e4:43:25:7d:f8:a3:4e:8c:7c:41:f5:
                    de:d8:4b:e3:51:4e:a5:cf:37:f7:e4:ef:6c:e5:cd:
                    be:d5:12:fc:eb:ea:e9:53:92:07:d1:16:fe:7a:f9:
                    4f:9b:54:28:4c:b9:32:23:cc:be:05:b4:9e:1c:c6:
                    54:3f:3c:35:f6:b4:cf:57:ea:c0:49:62:fb:6e:86:
                    0a:1c:1e:8f:ed:0e:07:7e:bb:10:95:93:7e:5d:9e:
                    98:61:b4:3f:ac:bc:6f:47:9e:82:2d:b0:78:5f:01:
                    52:c0:42:23:34:af:74:05:63:61:16:8b:63:d3:18:
                    52:53:5d:89:76:bb:61:46:b4:dd:d5:78:8b:35:0d:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:B5:1D:6A:40:04:A2:57:2D:B3:1A:D5:BA:98:F2:95:7F:71:85
            X509v3 Authority Key Identifier:
                keyid:30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/3073B425FD21597EA2229B04AED47720BF469CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:84:15:d8:75:b8:02:b6:48:a8:8f:7e:ed:6d:9a:f9:26:
         4b:12:7d:29:7d:e6:74:09:7e:f7:47:dd:d1:31:0a:b4:12:9c:
         b6:05:4c:e8:4a:d8:80:d7:67:46:93:dd:45:7a:7e:d7:81:9f:
         76:cb:96:6c:54:f1:8b:34:cf:29:25:91:e2:fc:7a:bd:a6:20:
         cf:4c:c4:26:d2:3b:10:2a:69:51:bc:76:85:3d:3b:ff:b5:15:
         d5:08:c3:28:5b:2b:2a:cb:a8:79:38:a0:52:18:5f:a6:ab:95:
         8b:c6:38:70:9d:6d:a9:d9:ae:74:da:0e:a3:5e:84:8d:54:28:
         95:f3:a2:cb:f9:6f:70:a5:85:7f:77:fe:29:79:82:c0:eb:f6:
         4f:98:b9:4f:f4:51:9b:ae:75:39:d7:0c:06:c3:20:b2:15:69:
         ad:88:29:9d:44:36:dd:ce:9a:73:88:1e:6c:a7:05:af:03:29:
         6e:70:c0:25:fc:db:38:83:c3:13:6b:63:47:ae:a1:d2:80:9c:
         2b:ef:a3:d4:4d:7f:2b:ba:6a:e4:f5:76:0e:c6:ee:ec:d2:85:
         c2:a3:30:1b:c4:f4:05:17:85:f2:22:48:6b:b7:ab:fe:dd:8c:
         04:7c:c1:8d:02:5d:08:f9:9f:a4:ee:44:a7:53:0e:0e:c7:47:
         ac:49:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net