Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39332e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          8lhFuA3oKv3O072CGKVE4SV5rwSRmc53IoZmKt1YpxM=
Subject key identifier:   3A:45:65:74:FE:C3:F0:8B:C0:C3:DC:BA:2F:A3:32:DA:AE:AC:78:DC
Certificate issuer:       /CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
Certificate serial:       1F82FE55644688C766321BC0B0A6AE63D123C8F4
Authority key identifier: A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
Signing time:             Wed 05 Mar 2025 13:43:52 +0000
ROA not before:           Wed 05 Mar 2025 13:38:52 +0000
ROA not after:            Wed 04 Mar 2026 13:43:52 +0000
asID:                     265500
IP address blocks:        170.78.93.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:82:fe:55:64:46:88:c7:66:32:1b:c0:b0:a6:ae:63:d1:23:c8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
        Validity
            Not Before: Mar  5 13:38:52 2025 GMT
            Not After : Mar  4 13:43:52 2026 GMT
        Subject: CN=3A456574FEC3F08BC0C3DCBA2FA332DAAEAC78DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:7d:cb:b9:41:4c:55:11:e6:f8:05:ab:c3:
                    f1:22:55:75:24:0a:5a:50:a8:d0:64:cb:8c:d7:52:
                    cb:38:bb:a8:ac:8b:15:e1:73:f4:33:2c:6d:ae:5a:
                    70:7f:98:4c:e1:10:ef:32:23:d7:25:e9:dc:e4:28:
                    f8:dc:48:83:a7:f7:25:0f:95:36:20:e5:8b:1a:5f:
                    94:e1:70:d4:39:cf:ce:63:11:d7:a6:f8:1c:8d:86:
                    e4:61:05:de:ff:58:e6:2b:08:b1:9c:77:a7:c0:1d:
                    05:b0:32:e3:f9:55:92:0b:da:4b:89:e9:79:02:04:
                    83:d3:c8:dd:f5:66:3f:b7:75:20:8b:cc:d1:44:7b:
                    43:8b:ea:61:36:09:88:9e:f9:df:70:0c:64:f8:a3:
                    58:5a:da:19:04:60:f2:3b:59:6d:25:95:55:d0:20:
                    d2:26:6d:91:2d:37:55:65:dd:9b:58:cc:a5:91:bb:
                    a7:8c:2f:23:0f:bd:82:cd:e0:3d:5a:1b:4c:cd:e6:
                    2e:01:92:73:ba:6d:e1:0d:74:56:57:ae:43:d7:03:
                    9d:75:46:85:45:9e:a5:cb:25:96:02:c8:9a:58:4b:
                    99:80:82:1d:29:d4:0f:56:e4:ee:28:e6:7f:ab:86:
                    bb:0c:db:70:b8:df:5d:d4:43:df:fb:90:a3:83:bc:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:45:65:74:FE:C3:F0:8B:C0:C3:DC:BA:2F:A3:32:DA:AE:AC:78:DC
            X509v3 Authority Key Identifier:
                keyid:A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:9f:30:f1:28:c2:51:ee:98:83:81:ef:87:26:40:3f:8c:
         64:04:ae:6c:85:d8:80:33:2b:51:92:91:a6:c6:1b:83:c3:d6:
         44:fe:f5:27:d7:33:ba:3d:a7:12:d9:75:05:f3:73:ac:ac:b4:
         38:f1:b7:c8:98:d5:76:17:e3:fd:98:f9:99:7a:26:42:12:49:
         39:bb:92:4c:58:09:c2:bc:f2:47:3a:55:27:02:f6:37:89:5d:
         c6:4e:89:e4:46:25:0e:ce:42:5e:6c:7d:ea:9a:e9:3e:b5:79:
         d3:c0:a0:7c:6b:aa:cf:c2:88:cf:18:54:08:df:01:33:da:0f:
         f7:f6:e1:14:e4:1c:03:cc:c4:3d:b1:6c:06:fc:fa:a1:a3:cb:
         8c:ff:e3:c1:4f:74:8e:fa:05:0b:71:66:1e:cd:70:3c:5f:22:
         ef:14:17:d5:1b:2b:62:a2:58:8c:f2:9e:f0:b5:c7:02:cc:24:
         b0:b6:66:0f:87:38:f5:9b:b4:d3:73:d7:20:b7:2d:65:18:eb:
         28:7f:2d:72:cc:b7:10:a0:e7:45:a5:89:00:70:cb:45:97:27:
         bc:a9:dd:6c:f2:2c:6d:a4:cc:93:87:7b:83:41:a5:b2:90:81:
         6d:57:29:fa:74:93:fc:88:5a:3c:07:8e:ae:0c:e2:4e:81:19:
         0c:aa:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:50 2025 by rpki-client on console.sobornost.net