Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          ucZhBne/zQFFaIl5Ukm+Ukg12ts8jnzoLf32E9R1k/U=
Subject key identifier:   4F:B6:0F:0D:CF:7B:DF:DD:4D:CE:78:AA:A2:0B:29:F4:4F:35:17:A2
Certificate issuer:       /CN=3073B425FD21597EA2229B04AED47720BF469CE6
Certificate serial:       660A8844ACBF2AD19335C9D87B569493642849B8
Authority key identifier: 30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 09 Apr 2025 14:20:53 +0000
ROA not before:           Wed 09 Apr 2025 14:15:53 +0000
ROA not after:            Wed 08 Apr 2026 14:20:53 +0000
asID:                     262899
IP address blocks:        45.165.130.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0a:88:44:ac:bf:2a:d1:93:35:c9:d8:7b:56:94:93:64:28:49:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3073B425FD21597EA2229B04AED47720BF469CE6
        Validity
            Not Before: Apr  9 14:15:53 2025 GMT
            Not After : Apr  8 14:20:53 2026 GMT
        Subject: CN=4FB60F0DCF7BDFDD4DCE78AAA20B29F44F3517A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:5e:6c:24:ba:73:45:8e:86:5a:fa:87:dd:
                    3e:b5:4a:2a:5c:31:39:e8:51:d5:06:2e:c9:4c:13:
                    e5:fd:9c:2f:56:bd:20:cc:19:3d:be:a1:81:a3:15:
                    fa:7c:9c:2c:e2:81:48:14:d3:d6:d0:83:cd:e7:b3:
                    54:db:9e:e5:ee:ba:bd:00:7e:46:3d:19:53:29:28:
                    12:e9:23:ba:b9:d8:63:6f:60:d9:62:f8:09:d5:e9:
                    c9:56:91:6b:2c:39:e9:08:b9:c7:3e:8a:42:eb:b7:
                    a6:f5:b9:ac:9a:e4:e6:41:26:07:b0:9f:6f:e7:c9:
                    bb:3d:4d:1d:29:c2:16:4a:87:03:cd:ba:0d:4c:5b:
                    06:2d:a8:71:41:ce:21:5e:80:52:0f:ef:41:3f:69:
                    95:1b:38:48:bd:ff:c6:29:11:32:8f:11:14:c6:01:
                    0c:d0:40:5a:2d:5d:59:a8:ef:f5:dc:c0:ad:56:b9:
                    a5:4d:16:89:cd:57:18:b8:88:e9:ee:63:d5:f2:d5:
                    3e:12:5e:6c:f3:79:9c:16:e2:a7:88:a0:94:ae:36:
                    b3:82:8f:0e:59:ae:8e:85:32:ff:a5:a3:fa:94:21:
                    c7:67:d5:17:e5:83:27:c4:5b:f7:8a:48:22:b9:d4:
                    ba:3d:d5:ea:55:b3:19:04:7e:d1:b8:16:2a:f4:ec:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B6:0F:0D:CF:7B:DF:DD:4D:CE:78:AA:A2:0B:29:F4:4F:35:17:A2
            X509v3 Authority Key Identifier:
                keyid:30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/3073B425FD21597EA2229B04AED47720BF469CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:86:cb:57:45:7b:0d:36:e3:95:67:7f:a0:ef:7e:65:02:64:
         3b:ec:8e:52:a3:c2:08:20:cc:ad:c8:a3:fa:c0:74:3e:0d:ac:
         4e:42:46:eb:81:6c:83:3c:87:41:a0:bd:0a:b8:4c:4f:a0:1f:
         34:63:4a:ae:b2:5b:d9:96:bf:a7:8c:5b:0c:4e:f2:54:4d:d3:
         e6:d2:3c:54:51:c1:94:4e:26:8a:f1:94:98:83:01:46:ee:5e:
         da:79:88:c0:0f:d5:c5:b1:bc:a8:93:2e:42:f5:32:d3:fb:54:
         6a:65:09:56:d0:f7:b9:8b:10:5b:ae:52:26:f3:3f:b8:55:84:
         8b:6b:79:83:9b:22:ba:f9:5b:0d:2c:06:ba:ca:eb:b9:88:48:
         31:91:fd:62:d3:96:43:4c:58:1a:aa:52:e1:c3:81:78:8e:7f:
         ee:82:c3:3d:c7:ee:7a:3c:f5:9d:89:ea:24:6d:bf:93:b2:44:
         4d:96:03:00:67:db:f7:af:a5:46:a4:46:76:d6:3a:88:6f:96:
         38:01:a2:ed:0e:f5:97:ac:fb:7c:76:c4:c3:df:3e:ea:78:75:
         a0:f3:a3:7c:5c:7c:7d:23:0b:d8:bd:8b:e6:0a:e3:b9:28:53:
         56:62:63:44:8a:64:ff:8a:63:1e:ee:f0:3d:54:fb:30:58:d3:
         fc:83:b7:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZgqIRKy/KtGTNcnYe1aUk2QoSbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3M0I0MjVGRDIxNTk3RUEyMjI5QjA0QUVENDc3MjBC
RjQ2OUNFNjAeFw0yNTA0MDkxNDE1NTNaFw0yNjA0MDgxNDIwNTNaMDMxMTAvBgNV
BAMTKDRGQjYwRjBEQ0Y3QkRGREQ0RENFNzhBQUEyMEIyOUY0NEYzNTE3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDl5sJLpzRY6GWvqH3T61Sipc
MTnoUdUGLslME+X9nC9WvSDMGT2+oYGjFfp8nCzigUgU09bQg83ns1TbnuXuur0A
fkY9GVMpKBLpI7q52GNvYNli+AnV6clWkWssOekIucc+ikLrt6b1uaya5OZBJgew
n2/nybs9TR0pwhZKhwPNug1MWwYtqHFBziFegFIP70E/aZUbOEi9/8YpETKPERTG
AQzQQFotXVmo7/XcwK1WuaVNFonNVxi4iOnuY9Xy1T4SXmzzeZwW4qeIoJSuNrOC
jw5Zro6FMv+lo/qUIcdn1RflgyfEW/eKSCK51Lo91epVsxkEftG4Fir07ExLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUT7YPDc97391Nzniqogsp9E81F6IwHwYDVR0j
BBgwFoAUMHO0Jf0hWX6iIpsErtR3IL9GnOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k
OFgvMC8zMDczQjQyNUZEMjE1OTdFQTIyMjlCMDRBRUQ0NzcyMEJGNDY5Q0U2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNzNCNDI1RkQyMTU5N0VB
MjIyOUIwNEFFRDQ3NzIwQkY0NjlDRTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAv
MzQzNTJlMzEzNjM1MmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpYIwDQYJKoZIhvcNAQELBQADggEBABCGy1dF
ew0245Vnf6DvfmUCZDvsjlKjwgggzK3Io/rAdD4NrE5CRuuBbIM8h0GgvQq4TE+g
HzRjSq6yW9mWv6eMWwxO8lRN0+bSPFRRwZROJorxlJiDAUbuXtp5iMAP1cWxvKiT
LkL1MtP7VGplCVbQ97mLEFuuUibzP7hVhItreYObIrr5Ww0sBrrK67mISDGR/WLT
lkNMWBqqUuHDgXiOf+6Cwz3H7no89Z2J6iRtv5OyRE2WAwBn2/evpUakRnbWOohv
ljgBou0O9Zes+3x2xMPfPup4daDzo3xcfH0jC9i9i+YK47koU1ZiY0SKZP+KYx7u
8D1U+zBY0/yDtzs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net