Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34362e302f32332d3233203d3e20323638303530.roa
File:                     34352e3136372e34362e302f32332d3233203d3e20323638303530.roa (raw, json)
Hash identifier:          koHMy6DtKeTvrSQlA6uHkC3EHVf8qTBCxIvXZrwu7yA=
Subject key identifier:   94:4E:1E:6D:80:C0:64:85:94:4F:C1:7B:10:16:80:F6:45:71:CF:B2
Certificate issuer:       /CN=506CC65B21BFE93D560253F21B1558960E15E4B4
Certificate serial:       5419383C505995061062E0ECF3FB85B37EE60940
Authority key identifier: 50:6C:C6:5B:21:BF:E9:3D:56:02:53:F2:1B:15:58:96:0E:15:E4:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC65B21BFE93D560253F21B1558960E15E4B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34362e302f32332d3233203d3e20323638303530.roa
Signing time:             Thu 10 Apr 2025 18:33:54 +0000
ROA not before:           Thu 10 Apr 2025 18:28:54 +0000
ROA not after:            Thu 09 Apr 2026 18:33:54 +0000
asID:                     268050
IP address blocks:        45.167.46.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:19:38:3c:50:59:95:06:10:62:e0:ec:f3:fb:85:b3:7e:e6:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506CC65B21BFE93D560253F21B1558960E15E4B4
        Validity
            Not Before: Apr 10 18:28:54 2025 GMT
            Not After : Apr  9 18:33:54 2026 GMT
        Subject: CN=944E1E6D80C06485944FC17B101680F64571CFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:95:fe:c0:3d:bc:11:af:8b:f1:6f:1a:65:b5:
                    cf:aa:1a:8f:b1:5c:29:16:a7:44:51:c7:5d:e3:e8:
                    38:94:d2:d9:51:46:2c:18:f5:34:6d:06:b0:27:6e:
                    2a:d8:66:2d:7d:3a:1e:3f:ad:8b:a0:f2:59:3b:c5:
                    b3:0d:8b:a1:85:25:22:d1:54:06:e3:b8:c8:12:7c:
                    07:56:10:5f:db:91:c7:01:95:57:f7:f5:f9:e1:60:
                    77:36:d4:0d:d8:77:57:0f:ab:48:ed:16:5b:57:4a:
                    b4:12:b1:c2:a9:54:a6:62:69:86:55:1e:23:25:0c:
                    88:fa:41:cc:28:48:31:42:c7:65:50:60:bb:30:6f:
                    20:bd:a6:a1:5c:6a:1f:25:d3:5f:27:f0:98:ec:66:
                    bc:99:6f:d6:dc:e8:80:e4:7b:bc:64:dd:96:5d:49:
                    70:8d:c1:2d:54:c6:f0:7c:83:65:49:da:f7:fc:4d:
                    71:b1:01:59:a0:52:33:0a:ce:02:88:97:ac:45:59:
                    c1:42:ed:18:e2:b3:de:f1:9b:c6:e7:9d:ea:35:93:
                    80:93:c0:a3:13:d1:a7:19:6f:8a:83:0d:2a:17:85:
                    68:bd:84:87:4c:86:f1:b6:a7:1d:85:9f:66:50:39:
                    81:7b:c2:09:d3:0e:70:e3:06:2f:99:b0:77:5a:14:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4E:1E:6D:80:C0:64:85:94:4F:C1:7B:10:16:80:F6:45:71:CF:B2
            X509v3 Authority Key Identifier:
                keyid:50:6C:C6:5B:21:BF:E9:3D:56:02:53:F2:1B:15:58:96:0E:15:E4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/506CC65B21BFE93D560253F21B1558960E15E4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC65B21BFE93D560253F21B1558960E15E4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34362e302f32332d3233203d3e20323638303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:e4:03:d3:f0:6e:a3:ec:a1:f3:12:e3:84:96:08:60:91:
         8e:38:60:88:4e:86:2f:32:74:d7:92:bb:ad:15:0c:bb:83:45:
         2b:94:a7:1a:23:ee:98:bd:f7:38:d1:ed:4f:56:f8:94:25:ce:
         9c:0d:67:ba:b9:ec:18:e2:6d:1a:ad:7e:e0:23:72:89:b1:48:
         82:a4:2a:5e:c2:ca:f5:8d:4b:ad:69:54:cc:9f:b8:d4:6e:19:
         4e:e8:9f:90:f5:c5:4c:b8:f5:2d:19:c1:15:55:f9:53:1c:38:
         df:b4:2f:f4:b7:ae:fd:18:39:d3:a3:74:63:c9:b1:48:1f:a2:
         81:ec:0e:52:f5:84:6e:d1:f0:87:7e:34:0a:5b:89:2e:2d:1a:
         b7:2a:27:7e:8d:b3:b8:65:3f:7f:70:6e:03:ec:08:00:97:c6:
         fb:17:d0:f3:c5:1e:5d:7f:9e:dd:24:24:a7:9a:6f:97:31:cd:
         73:94:22:c7:cd:c5:f8:0b:6f:ca:34:b5:63:b9:35:6d:91:36:
         2a:22:ce:bd:7b:87:e1:ea:35:eb:c3:48:95:5f:82:76:c9:ee:
         ae:a4:04:7e:ee:ee:2c:59:3c:0c:36:0f:90:e1:b0:b7:80:36:
         fd:3e:90:36:f9:2f:4c:b9:96:f7:e6:94:ce:85:4c:1a:f1:71:
         8b:66:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net