Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32322d3232203d3e20323638303530.roa
File:                     34352e3136372e34342e302f32322d3232203d3e20323638303530.roa (raw, json)
Hash identifier:          Tq9wC1LErjyUFbQTxs92+YCc2YT4uw2NmqoMlAaCIV4=
Subject key identifier:   3E:78:E8:7F:B1:2B:AA:45:BB:12:06:7A:ED:01:D5:3C:84:F6:18:27
Certificate issuer:       /CN=506CC65B21BFE93D560253F21B1558960E15E4B4
Certificate serial:       4CA612FCAC9DE7E3D32DF5E3DCE381F2D709D7B0
Authority key identifier: 50:6C:C6:5B:21:BF:E9:3D:56:02:53:F2:1B:15:58:96:0E:15:E4:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC65B21BFE93D560253F21B1558960E15E4B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32322d3232203d3e20323638303530.roa
Signing time:             Thu 10 Apr 2025 18:33:55 +0000
ROA not before:           Thu 10 Apr 2025 18:28:55 +0000
ROA not after:            Thu 09 Apr 2026 18:33:55 +0000
asID:                     268050
IP address blocks:        45.167.44.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a6:12:fc:ac:9d:e7:e3:d3:2d:f5:e3:dc:e3:81:f2:d7:09:d7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506CC65B21BFE93D560253F21B1558960E15E4B4
        Validity
            Not Before: Apr 10 18:28:55 2025 GMT
            Not After : Apr  9 18:33:55 2026 GMT
        Subject: CN=3E78E87FB12BAA45BB12067AED01D53C84F61827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:aa:3f:ae:d2:62:a0:53:0b:a3:14:50:d7:
                    3a:f2:ec:f8:1a:93:96:fa:2d:b5:eb:24:06:fa:6b:
                    92:5c:04:f0:74:65:30:49:8c:64:6f:44:1f:e8:7d:
                    95:58:8d:a1:ac:ae:42:ea:b2:c4:c8:62:ff:d7:54:
                    c7:09:2d:68:3e:b1:d1:fc:f5:40:7e:d9:41:90:12:
                    21:16:90:cb:a3:74:b2:82:6f:87:9d:3f:bf:42:bc:
                    4f:fe:a5:8e:11:38:eb:76:32:10:b7:e8:47:26:86:
                    3e:2d:7c:6b:b0:84:43:da:8d:00:6d:2c:21:88:fc:
                    b7:ae:26:5a:13:99:92:67:d0:74:9c:96:00:0e:37:
                    69:7a:8a:39:a5:18:f6:2c:9b:de:5a:08:b8:a5:65:
                    cf:f4:04:9a:a5:9e:f8:80:89:0b:44:55:93:45:17:
                    62:0b:7e:cd:fe:b4:7d:72:a0:65:b7:b1:d6:1f:63:
                    46:89:65:f4:7b:22:d7:93:fb:cb:e2:cb:83:fc:00:
                    18:ba:72:6c:0b:38:87:d6:0a:d5:db:8d:a7:ef:5a:
                    de:08:93:69:53:b7:dc:19:97:81:54:24:c1:e2:32:
                    bf:88:86:38:b4:75:ed:2a:68:9a:f1:0a:fd:d5:85:
                    43:b1:6a:52:1d:02:01:f7:66:c1:39:6d:16:9f:b0:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:78:E8:7F:B1:2B:AA:45:BB:12:06:7A:ED:01:D5:3C:84:F6:18:27
            X509v3 Authority Key Identifier:
                keyid:50:6C:C6:5B:21:BF:E9:3D:56:02:53:F2:1B:15:58:96:0E:15:E4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/506CC65B21BFE93D560253F21B1558960E15E4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC65B21BFE93D560253F21B1558960E15E4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32322d3232203d3e20323638303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:d6:bb:e9:70:79:f1:5f:63:f8:1c:cc:b6:bf:d4:8b:32:
         ca:d7:0c:0a:40:5b:44:d3:f3:6b:a1:fe:f4:21:cb:b7:db:97:
         28:61:3a:c5:80:3d:1d:9a:1f:d1:84:00:08:6b:51:54:b2:f1:
         2f:59:49:f9:59:28:64:83:9d:f8:af:32:b3:5a:77:98:14:5f:
         d1:8d:dc:bc:57:cb:c6:e4:29:72:85:0b:14:86:b5:d4:00:3e:
         92:f4:1e:f3:35:3e:a1:e2:5b:90:9e:88:ab:62:2b:c2:bd:83:
         9b:ae:66:d6:3f:1e:bd:6b:fd:06:2e:27:00:c8:ec:dd:d1:f9:
         c8:e5:2a:e4:7a:04:94:25:13:68:a0:d9:33:c9:59:b7:a5:cf:
         99:9b:de:ab:dd:21:b7:26:38:76:12:e3:4a:73:de:38:8f:07:
         e2:c1:79:d5:6d:eb:3c:ab:c5:02:a3:3a:1e:f9:a5:bc:1f:a2:
         9d:f2:81:2d:35:30:eb:93:be:57:f0:f0:a8:22:81:1d:aa:3a:
         ba:57:70:8a:c6:02:69:98:fc:08:77:8f:59:2e:61:ee:5a:59:
         0b:4b:c0:e8:8c:83:f1:bf:8d:28:f0:7e:e6:2f:6b:0b:09:d5:
         10:97:6a:d8:fb:b7:98:da:39:aa:ff:9f:b5:10:a8:c5:35:32:
         62:36:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net