Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa
File:                     34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa (raw, json)
Hash identifier:          TDdkfFYq2iZvXYsLTFXU/r0P/tPFz3099FgzZ6B+e0U=
Subject key identifier:   3C:1A:06:36:AB:58:B3:EA:ED:14:42:32:77:F4:01:08:BA:28:69:C7
Certificate issuer:       /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial:       6ECA94A1B19CB8E666940F271B135C7168031AFD
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa
Signing time:             Thu 10 Apr 2025 12:10:31 +0000
ROA not before:           Thu 10 Apr 2025 12:05:31 +0000
ROA not after:            Thu 09 Apr 2026 12:10:31 +0000
asID:                     266983
IP address blocks:        45.226.140.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ca:94:a1:b1:9c:b8:e6:66:94:0f:27:1b:13:5c:71:68:03:1a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
        Validity
            Not Before: Apr 10 12:05:31 2025 GMT
            Not After : Apr  9 12:10:31 2026 GMT
        Subject: CN=3C1A0636AB58B3EAED14423277F40108BA2869C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:22:ce:dc:8f:84:b6:cb:1d:58:08:d4:40:
                    50:1d:48:4d:42:e2:5c:ee:d4:b2:22:ae:ab:52:e8:
                    4b:c7:7b:c4:07:c1:a1:8e:ea:7f:6f:0d:83:ef:dd:
                    b6:fb:7d:ab:6d:8d:93:a6:4f:5f:75:78:6f:c5:02:
                    0b:1b:7a:b9:de:bf:fd:2b:f0:2a:f5:3e:62:7c:8e:
                    e1:97:a4:db:97:ca:18:21:a9:6d:51:1c:aa:3b:4a:
                    42:e8:d5:0a:a8:88:6e:6e:50:9f:a8:5b:87:b0:c5:
                    77:33:c6:51:45:73:9a:9f:96:8e:3b:6a:d4:48:50:
                    ef:01:f6:d3:fb:3f:60:4a:93:90:5d:5d:e6:72:72:
                    19:c6:f9:0b:34:f4:30:a0:ba:78:cf:6d:c3:51:39:
                    e7:b6:03:a9:17:33:70:a2:4d:ed:02:79:d3:58:c1:
                    08:41:44:da:fb:0a:9d:aa:3a:06:c0:90:06:51:c6:
                    f7:d1:ad:a9:5e:1b:39:81:46:30:70:a0:69:db:1a:
                    91:ea:a7:54:bf:f2:d1:d1:a3:46:d5:60:06:69:05:
                    24:f1:0f:50:9c:97:e8:52:e9:3d:a4:84:05:e8:50:
                    bd:f1:1e:e1:99:6e:35:29:6d:a4:97:19:d2:42:1c:
                    b7:92:42:52:ce:a6:0d:65:46:a0:34:57:0d:b1:59:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:06:36:AB:58:B3:EA:ED:14:42:32:77:F4:01:08:BA:28:69:C7
            X509v3 Authority Key Identifier:
                keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:06:8e:c9:b7:09:4b:7b:36:e4:24:5a:47:dd:7d:37:94:
         df:6b:92:6a:1b:e5:6b:44:97:75:c0:7b:86:d3:6d:cc:ad:f1:
         db:18:cf:c7:98:ef:d1:2b:85:b2:f1:b0:42:2d:39:37:78:4e:
         42:7e:a6:72:21:7d:8c:c7:49:26:ab:96:23:4d:9c:43:c5:92:
         13:0f:dd:ee:39:3c:7d:cb:b4:02:a2:6e:39:f1:57:81:e8:ca:
         af:06:a2:93:88:ba:60:e9:85:b8:a7:17:db:2a:e3:47:d1:76:
         63:3c:4e:77:eb:aa:1c:f8:36:55:3e:76:6e:74:eb:a6:0c:42:
         3e:87:44:3e:96:40:d1:95:7a:dd:34:8e:fe:0a:e0:c3:a7:a0:
         c3:a6:14:41:7e:aa:bb:ee:ea:5a:71:a2:8f:90:4f:28:62:7f:
         31:d2:25:5c:e8:4f:67:97:46:36:4e:68:72:38:f6:6b:8c:6c:
         e7:16:aa:b9:b9:96:c6:37:5f:a2:b4:51:a7:29:5c:57:8c:bd:
         9e:ef:da:d6:02:32:8d:fa:b2:a3:43:29:71:c9:f0:ac:b3:9e:
         34:f3:ac:d8:b9:d4:e8:0f:6d:7e:29:1a:38:42:8b:ac:f6:46:
         50:53:d4:09:51:f9:09:79:c3:8c:22:8d:99:11:d3:d8:17:76:
         0e:e1:7f:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbsqUobGcuOZmlA8nGxNccWgDGv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM3QjY1NUM2MzcyQ0I3M0Q3MDhCNDJEODNGRTJCNjJC
M0VFRjE3RDAeFw0yNTA0MTAxMjA1MzFaFw0yNjA0MDkxMjEwMzFaMDMxMTAvBgNV
BAMTKDNDMUEwNjM2QUI1OEIzRUFFRDE0NDIzMjc3RjQwMTA4QkEyODY5QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZyCLO3I+EtssdWAjUQFAdSE1C
4lzu1LIirqtS6EvHe8QHwaGO6n9vDYPv3bb7fattjZOmT191eG/FAgsbernev/0r
8Cr1PmJ8juGXpNuXyhghqW1RHKo7SkLo1QqoiG5uUJ+oW4ewxXczxlFFc5qflo47
atRIUO8B9tP7P2BKk5BdXeZychnG+Qs09DCgunjPbcNROee2A6kXM3CiTe0CedNY
wQhBRNr7Cp2qOgbAkAZRxvfRraleGzmBRjBwoGnbGpHqp1S/8tHRo0bVYAZpBSTx
D1Ccl+hS6T2khAXoUL3xHuGZbjUpbaSXGdJCHLeSQlLOpg1lRqA0Vw2xWYQnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPBoGNqtYs+rtFEIyd/QBCLooaccwHwYDVR0j
BBgwFoAU/HtlXGNyy3PXCLQtg/4rYrPu8X0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01KaHRWOE5kbUdYcXRYWnlaTHVoQXdRWmtYTk1vQlBQaTJDN2N4SFlW
WWgvMC9GQzdCNjU1QzYzNzJDQjczRDcwOEI0MkQ4M0ZFMkI2MkIzRUVGMTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDN0I2NTVDNjM3MkNCNzNE
NzA4QjQyRDgzRkUyQjYyQjNFRUYxN0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNSmh0VjhOZG1HWHF0WFp5Wkx1aEF3UVprWE5Nb0JQUGkyQzdjeEhZVlloLzAv
MzQzNTJlMzIzMjM2MmUzMTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzOTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4owwDQYJKoZIhvcNAQELBQADggEBAGk6Bo7J
twlLezbkJFpH3X03lN9rkmob5WtEl3XAe4bTbcyt8dsYz8eY79ErhbLxsEItOTd4
TkJ+pnIhfYzHSSarliNNnEPFkhMP3e45PH3LtAKibjnxV4Hoyq8GopOIumDphbin
F9sq40fRdmM8Tnfrqhz4NlU+dm5066YMQj6HRD6WQNGVet00jv4K4MOnoMOmFEF+
qrvu6lpxoo+QTyhifzHSJVzoT2eXRjZOaHI49muMbOcWqrm5lsY3X6K0UacpXFeM
vZ7v2tYCMo36sqNDKXHJ8KyznjTzrNi51OgPbX4pGjhCi6z2RlBT1AlR+Ql5w4wi
jZkR09gXdg7hf74=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net