Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa
File:                     34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa (raw, json)
Hash identifier:          zzKksDnoEfrswOXhspImQjQPZvuBmhXiDXv4lTEr6oA=
Subject key identifier:   36:65:D7:8D:9F:8F:62:43:49:40:6D:96:2B:DA:7E:A5:D7:72:55:69
Certificate issuer:       /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial:       03577F799790E04063414C15F483470686327581
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa
Signing time:             Thu 10 Apr 2025 12:10:33 +0000
ROA not before:           Thu 10 Apr 2025 12:05:33 +0000
ROA not after:            Thu 09 Apr 2026 12:10:33 +0000
asID:                     266983
IP address blocks:        45.226.140.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:57:7f:79:97:90:e0:40:63:41:4c:15:f4:83:47:06:86:32:75:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
        Validity
            Not Before: Apr 10 12:05:33 2025 GMT
            Not After : Apr  9 12:10:33 2026 GMT
        Subject: CN=3665D78D9F8F624349406D962BDA7EA5D7725569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:5c:06:07:de:94:f1:05:f9:51:5b:23:24:
                    40:7c:52:11:a2:ea:73:37:9c:d2:c0:27:1e:6f:ab:
                    e2:9e:56:ab:a9:37:f3:e6:5b:fb:59:6d:d9:50:14:
                    dc:00:73:02:dd:40:c0:6e:43:70:f5:74:5c:09:42:
                    78:8a:58:4b:64:01:b8:83:db:c3:14:77:c3:29:15:
                    f2:45:b9:84:5e:12:4e:3f:f9:66:04:ef:50:40:7d:
                    be:ca:5e:d5:2b:1f:ef:66:c8:b8:6d:8e:88:c3:83:
                    3f:ab:fb:01:35:50:ca:74:1a:8c:f5:96:90:93:7b:
                    dd:b6:eb:dc:19:3f:b2:c5:25:d0:36:f7:c2:e7:d6:
                    aa:41:76:79:f5:a7:8b:75:d8:37:ab:be:ad:a3:d1:
                    15:99:b9:b9:1a:d0:4f:be:95:bf:6b:fd:aa:2c:5c:
                    3f:3b:d1:e0:2d:87:38:08:a9:0a:8a:a0:75:e9:54:
                    04:78:d4:b7:83:55:00:88:29:c1:e1:2e:a5:ee:95:
                    3b:34:64:90:9b:fb:a5:44:9f:58:55:b2:1a:28:d1:
                    60:d3:e7:2d:da:a9:b3:ea:da:c0:c3:f7:79:e8:97:
                    35:53:54:fd:90:26:7f:cd:64:94:a8:63:c4:ea:df:
                    0a:9a:d1:14:43:65:c5:93:5f:10:53:4c:ed:a8:20:
                    99:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:D7:8D:9F:8F:62:43:49:40:6D:96:2B:DA:7E:A5:D7:72:55:69
            X509v3 Authority Key Identifier:
                keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32342d3234203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:3a:26:d0:53:80:20:2f:f2:e2:4c:bd:44:cb:50:71:d2:7c:
         75:34:b9:76:98:67:b3:84:ae:60:dd:12:89:04:31:e9:0f:4a:
         dd:4b:41:f1:34:e0:2a:fb:4e:6e:9e:87:4d:46:15:80:da:79:
         09:41:06:b9:34:93:bf:29:f3:57:fe:75:d7:36:8a:29:89:06:
         a9:07:5e:08:58:d6:36:5c:c9:6b:1d:bb:75:3f:35:e3:73:66:
         d5:f3:ac:87:86:1a:be:84:a7:83:12:d9:47:4f:53:95:db:29:
         d2:92:f7:c1:60:fc:87:86:cc:82:5a:1e:1a:e6:79:da:a7:59:
         94:5b:d9:f4:a8:97:34:4b:9b:70:43:47:9f:5a:ce:2d:6b:22:
         2e:b6:4f:75:8c:10:b0:d9:74:4e:63:a2:93:10:20:39:4f:23:
         26:30:a5:8b:10:9d:0e:46:2a:8e:83:ad:10:df:19:85:06:82:
         2c:7a:88:6d:cb:c0:ef:2b:cb:45:6e:26:64:01:4c:bf:67:86:
         0f:60:2a:d8:cc:0e:1f:33:17:72:d0:1e:42:dd:fe:7b:22:81:
         48:ff:1e:77:51:1e:51:9f:79:08:17:46:b2:59:80:97:a7:9f:
         1a:d2:5c:43:2c:fa:58:9d:97:32:49:f0:2a:5b:2f:3b:c6:49:
         b2:5c:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net