Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32332d3233203d3e20323636323437.roa
File:                     34352e362e3231362e302f32332d3233203d3e20323636323437.roa (raw, json)
Hash identifier:          2bCGzcABRtGU/J+gn/wmBGGKJnsogIDBd/mKOAtZH24=
Subject key identifier:   91:1A:FA:C6:60:F8:9D:3B:AD:09:E4:E7:CA:CA:B2:0B:59:B8:5C:BD
Certificate issuer:       /CN=0FF897150A721E543538D1FB1C6A7C5017A68480
Certificate serial:       42473BAB8A906C65941FF19D6821C17DE7F20C80
Authority key identifier: 0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32332d3233203d3e20323636323437.roa
Signing time:             Sun 14 May 2023 17:10:45 +0000
ROA not before:           Sun 14 May 2023 17:05:45 +0000
ROA not after:            Sun 12 May 2024 17:10:45 +0000
asID:                     266247
IP address blocks:        45.6.216.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:47:3b:ab:8a:90:6c:65:94:1f:f1:9d:68:21:c1:7d:e7:f2:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Validity
            Not Before: May 14 17:05:45 2023 GMT
            Not After : May 12 17:10:45 2024 GMT
        Subject: CN=911AFAC660F89D3BAD09E4E7CACAB20B59B85CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:20:58:1e:34:ff:99:ed:67:c5:15:a7:a9:
                    79:f3:f4:18:09:a8:cd:c1:2a:61:2a:1c:51:1e:59:
                    21:22:14:96:cf:5a:4b:2c:de:20:84:00:4b:8d:d6:
                    83:ee:f8:8f:d7:56:5e:ed:5f:7b:77:c7:2a:e3:c5:
                    5e:c8:bd:62:1a:d1:4d:9a:6b:91:81:89:8a:91:74:
                    fe:bb:de:dd:d2:f1:95:4e:b1:af:b8:96:aa:cf:df:
                    63:07:32:18:af:f3:da:d5:52:9a:45:fd:32:44:ca:
                    68:18:c9:6e:c3:1e:e6:31:52:4f:7b:c7:01:55:72:
                    6a:63:2a:fe:82:66:77:ad:f4:88:f2:36:df:60:fe:
                    80:75:4c:b5:41:47:11:fb:0d:6c:07:4a:ad:89:dc:
                    0e:d6:81:bc:ce:80:18:5e:eb:5e:e8:ef:87:cb:5d:
                    8e:6e:99:f3:28:f0:96:97:19:80:7c:94:56:d6:7d:
                    a0:83:a8:df:14:39:e2:59:e4:a5:a5:2b:eb:df:0a:
                    18:83:ae:42:3c:25:9d:81:5d:4a:3f:bf:7f:b0:d2:
                    8a:bd:9d:d2:6c:7e:af:9c:7c:97:68:26:24:08:ab:
                    35:f8:b2:db:46:5c:3c:3c:29:e0:7e:7d:4a:87:ea:
                    cd:45:9b:dd:4c:0d:1c:c3:56:f5:31:2c:71:57:10:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1A:FA:C6:60:F8:9D:3B:AD:09:E4:E7:CA:CA:B2:0B:59:B8:5C:BD
            X509v3 Authority Key Identifier:
                keyid:0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32332d3233203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:4f:01:a8:60:90:14:70:c6:89:70:f6:44:c1:de:db:64:
         fe:c3:40:27:08:2e:57:e3:8c:42:e4:49:5e:98:61:73:78:f4:
         03:60:58:bc:3f:7c:2f:bb:77:bc:47:8a:c7:e5:c7:70:21:30:
         e4:7c:ae:6b:5f:50:e7:38:ad:e3:62:47:26:bb:25:78:52:5d:
         b8:f1:a5:36:6b:9f:e2:b3:bf:49:5d:fe:73:6d:94:5f:58:64:
         d0:d7:c7:1c:2c:0a:a9:4d:40:5e:64:32:f1:83:46:b0:5b:23:
         1f:9a:f1:c5:d9:08:a0:9c:90:8e:95:9e:ae:69:55:74:b3:2f:
         14:66:20:b4:5d:d6:03:d4:ee:1a:5d:0d:cf:b0:b1:89:3b:f1:
         b5:0b:12:13:1a:3a:54:21:a7:ea:fe:3e:ea:6a:ee:d3:44:d0:
         5b:f3:04:db:5a:1d:88:3a:66:87:15:fe:9f:0c:05:98:a6:01:
         4b:09:ef:a3:da:e2:b7:e8:ad:b9:29:b6:dc:72:f4:81:58:ca:
         2a:83:62:88:23:36:c2:42:6a:4c:b0:f8:54:8a:f9:3e:8e:0e:
         81:33:be:aa:be:6c:90:09:5e:8e:7c:7c:25:e6:b8:97:26:d7:
         ba:06:7a:0b:a7:f6:a8:00:17:b3:33:8e:da:3d:23:a6:25:c0:
         b1:29:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 13:24:34 2024 by rpki-client on console.sobornost.net