Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133322e302f32322d3232203d3e20323638363137.roa
File:                     34352e3136342e3133322e302f32322d3232203d3e20323638363137.roa (raw, json)
Hash identifier:          jioHnQWYsYHBI3dW1kIDj/qK6bbr7L0H+JtDjA/a+es=
Subject key identifier:   2D:BD:AC:BC:1C:92:BB:C3:03:F7:60:EA:BD:74:33:05:FC:D0:C8:31
Certificate issuer:       /CN=E1F724D25672BFA30941906405DCC099740BF6B5
Certificate serial:       732B4E115BD3E40A93D4FAEC0FE100C7CE872028
Authority key identifier: E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133322e302f32322d3232203d3e20323638363137.roa
Signing time:             Thu 30 Jan 2025 16:22:44 +0000
ROA not before:           Thu 30 Jan 2025 16:17:44 +0000
ROA not after:            Thu 29 Jan 2026 16:22:44 +0000
asID:                     268617
IP address blocks:        45.164.132.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2b:4e:11:5b:d3:e4:0a:93:d4:fa:ec:0f:e1:00:c7:ce:87:20:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F724D25672BFA30941906405DCC099740BF6B5
        Validity
            Not Before: Jan 30 16:17:44 2025 GMT
            Not After : Jan 29 16:22:44 2026 GMT
        Subject: CN=2DBDACBC1C92BBC303F760EABD743305FCD0C831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:fd:59:27:84:b9:04:70:f1:86:15:9f:98:
                    40:8d:8b:e2:12:e2:14:93:64:17:cd:00:b6:8a:98:
                    3e:b6:97:d6:c0:11:8d:71:34:fe:7d:7d:59:d8:41:
                    7d:a7:1c:f4:13:f1:cb:51:a3:77:bd:15:25:01:1c:
                    67:21:56:f3:6b:7c:52:b4:59:ec:85:a4:9f:b5:45:
                    2f:98:41:de:67:8b:d0:86:4c:a0:a0:b5:38:a2:ed:
                    e1:00:f7:5c:8f:a6:64:51:49:64:de:84:de:47:50:
                    33:7b:ba:b8:f7:d6:c0:b5:4a:f0:cc:3d:3d:32:71:
                    0d:a8:e1:8e:ab:6e:24:2b:07:95:e0:99:dd:a4:7a:
                    5d:e6:2c:fe:b3:b7:94:27:36:a7:de:0d:6b:1b:97:
                    5b:fb:13:0b:00:74:39:84:64:1d:64:5b:62:2a:ec:
                    48:e1:11:71:c1:27:d8:7c:36:fa:14:1d:a9:00:70:
                    14:d1:48:91:a4:d6:93:53:b4:59:40:64:f0:87:23:
                    f2:f4:bd:0f:c8:00:ec:91:6f:63:4f:fa:ed:0e:84:
                    48:2c:4e:40:63:f6:6a:35:77:49:c3:7c:59:41:6c:
                    5f:d3:25:21:29:5e:22:8a:67:a5:15:26:5e:b7:f2:
                    11:db:10:da:02:93:49:56:8a:df:80:77:0c:38:1c:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:AC:BC:1C:92:BB:C3:03:F7:60:EA:BD:74:33:05:FC:D0:C8:31
            X509v3 Authority Key Identifier:
                keyid:E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/E1F724D25672BFA30941906405DCC099740BF6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133322e302f32322d3232203d3e20323638363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:3b:28:ad:67:38:ca:d8:03:8d:49:5a:9b:6b:5e:2d:6c:
         89:98:8e:a6:6e:05:24:22:3a:07:c9:bb:75:b9:0c:3b:07:13:
         c8:26:08:2a:8a:5b:16:dc:5b:fc:11:17:6e:f2:f8:44:1e:00:
         6f:09:6a:ad:86:8e:f0:f9:74:73:60:75:12:fe:63:e7:f8:8a:
         3c:1c:c5:55:b1:93:e1:ed:1b:b3:bc:0c:96:75:2a:93:81:47:
         cf:da:54:61:cc:1d:73:b3:ee:f5:f7:a1:09:21:63:ac:a4:ea:
         36:de:d1:46:b4:11:2e:37:0a:92:d3:52:cf:40:36:98:97:58:
         fa:51:ee:f5:c6:dd:42:0a:bf:4c:9a:d3:15:f3:e4:41:70:6e:
         90:09:9c:f2:5b:47:ee:55:57:f4:55:87:20:d1:f6:17:b4:ae:
         58:dc:19:b4:aa:68:33:ac:9a:22:73:68:bb:e3:0a:2c:c0:ff:
         25:a0:a1:30:64:9c:f8:e1:c3:0e:16:92:6c:2e:82:d6:aa:e2:
         65:fc:9a:ef:a3:30:f0:2a:80:d7:ba:02:e7:d1:58:4a:79:2f:
         75:b4:e6:44:26:0a:f4:6b:56:1f:f6:18:d6:4c:a5:af:6e:f3:
         7f:32:78:ec:59:05:b0:e0:e1:d4:71:b7:52:5c:e4:1f:23:08:
         dd:79:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:19:02 2025 by rpki-client on console.sobornost.net