Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32332d3233203d3e20323638303530.roa
File:                     34352e3136372e34342e302f32332d3233203d3e20323638303530.roa (raw, json)
Hash identifier:          prDOrYcHZfNxnSfmWUlrUFx9KK4ySJuUOl1+E/g5YIo=
Subject key identifier:   6E:E0:64:43:3A:6A:EE:1D:22:FF:50:56:D3:7F:F2:A5:50:0E:A8:A5
Certificate issuer:       /CN=506CC65B21BFE93D560253F21B1558960E15E4B4
Certificate serial:       1BC0F15951FEAE50425D6405691BEA37A741ABCC
Authority key identifier: 50:6C:C6:5B:21:BF:E9:3D:56:02:53:F2:1B:15:58:96:0E:15:E4:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC65B21BFE93D560253F21B1558960E15E4B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32332d3233203d3e20323638303530.roa
Signing time:             Thu 10 Apr 2025 18:33:54 +0000
ROA not before:           Thu 10 Apr 2025 18:28:54 +0000
ROA not after:            Thu 09 Apr 2026 18:33:54 +0000
asID:                     268050
IP address blocks:        45.167.44.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c0:f1:59:51:fe:ae:50:42:5d:64:05:69:1b:ea:37:a7:41:ab:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506CC65B21BFE93D560253F21B1558960E15E4B4
        Validity
            Not Before: Apr 10 18:28:54 2025 GMT
            Not After : Apr  9 18:33:54 2026 GMT
        Subject: CN=6EE064433A6AEE1D22FF5056D37FF2A5500EA8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:b4:77:be:8a:e0:be:24:f1:97:40:00:0a:
                    49:8f:dd:57:30:c3:ae:a3:26:71:e9:01:08:d7:a8:
                    14:a4:ea:1d:67:f5:73:cf:ad:04:94:bf:ae:56:99:
                    b0:02:4f:c5:38:73:d6:b1:ea:7d:dc:0a:45:36:05:
                    01:c8:e0:cf:4d:17:65:88:84:f4:11:a3:d8:9e:fa:
                    c9:d5:f1:5f:e6:06:23:72:27:0b:bd:42:c6:ec:50:
                    4e:b1:9c:73:26:37:cf:f2:38:e1:59:be:0a:fd:9d:
                    4d:47:9a:2d:68:74:49:7b:02:b2:5f:7d:52:31:0e:
                    5d:ba:d2:b1:2a:f4:72:d1:f9:2a:81:c4:b3:8f:53:
                    97:b1:aa:f3:6c:50:fe:96:d8:13:4b:d4:74:cb:cb:
                    16:14:de:48:85:1a:f0:cb:89:b5:78:da:67:8c:c3:
                    c1:3a:50:90:03:90:97:9c:1b:52:84:f1:74:b3:2b:
                    88:a9:a5:1c:cb:df:53:35:41:3f:4e:af:c9:61:35:
                    e7:90:d5:5a:76:96:a6:4d:9c:95:40:8c:eb:7a:dd:
                    ec:74:f9:68:2b:80:98:5c:73:6f:43:b2:32:98:f0:
                    b8:18:6a:2b:69:30:19:6c:28:e3:05:68:7f:33:b0:
                    cb:f3:2f:5c:8f:05:91:9d:22:15:82:27:cd:00:fc:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E0:64:43:3A:6A:EE:1D:22:FF:50:56:D3:7F:F2:A5:50:0E:A8:A5
            X509v3 Authority Key Identifier:
                keyid:50:6C:C6:5B:21:BF:E9:3D:56:02:53:F2:1B:15:58:96:0E:15:E4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/506CC65B21BFE93D560253F21B1558960E15E4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC65B21BFE93D560253F21B1558960E15E4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32332d3233203d3e20323638303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:9f:37:3a:6e:05:db:e4:91:98:5c:e8:16:56:cd:0f:87:
         c1:b2:cb:3d:69:2e:03:95:1b:45:d4:43:f0:c3:e2:8d:c5:c8:
         db:76:66:9d:e4:7a:1d:b6:a7:a4:b1:d5:63:f1:31:4c:e7:42:
         c9:3c:74:6f:fe:d1:24:97:0d:2a:b1:b5:b3:5d:ef:53:a7:d3:
         25:83:d0:9f:36:b4:92:83:ac:4d:f2:fe:4c:62:db:87:d1:56:
         79:37:c5:fe:ca:d6:61:c9:c0:a2:c1:18:99:51:e0:de:3c:9c:
         2a:a1:8e:3c:8c:f8:d8:e1:7c:2d:8b:db:7b:d8:1a:81:87:d0:
         d3:df:37:cd:b7:7e:90:fc:99:4f:94:cd:9a:2a:76:36:95:66:
         e8:f0:ff:97:be:6b:c1:eb:42:ac:c8:98:51:02:f2:cc:34:84:
         b4:02:f0:9f:47:9d:d1:02:5b:aa:f6:09:21:aa:72:f7:68:b0:
         e5:c8:b9:49:08:02:e8:90:dd:45:aa:c0:0b:18:86:6f:e5:63:
         9a:be:67:49:c5:44:ed:81:3d:71:c5:72:5d:9d:09:f3:76:98:
         9b:24:b6:96:1b:4e:1c:2e:44:61:5d:5b:c1:69:c6:14:90:96:
         05:0a:66:69:de:4a:57:76:c4:32:af:45:26:bb:d9:51:88:37:
         01:64:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net