Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133332e302f32342d3234203d3e20323638363137.roa
File:                     34352e3136342e3133332e302f32342d3234203d3e20323638363137.roa (raw, json)
Hash identifier:          HKtdnlMYSOol99zAFyI5xKBxcYoTgFsL1Ir7RT9S/3I=
Subject key identifier:   C8:1E:C5:08:45:2F:90:C8:F5:EC:BE:D6:A4:26:19:F1:A6:BF:A0:4B
Certificate issuer:       /CN=E1F724D25672BFA30941906405DCC099740BF6B5
Certificate serial:       7B4AB3F80989330FAAED3991E0EB90A825DA8109
Authority key identifier: E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133332e302f32342d3234203d3e20323638363137.roa
Signing time:             Thu 30 Jan 2025 16:23:26 +0000
ROA not before:           Thu 30 Jan 2025 16:18:26 +0000
ROA not after:            Thu 29 Jan 2026 16:23:26 +0000
asID:                     268617
IP address blocks:        45.164.133.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:b3:f8:09:89:33:0f:aa:ed:39:91:e0:eb:90:a8:25:da:81:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F724D25672BFA30941906405DCC099740BF6B5
        Validity
            Not Before: Jan 30 16:18:26 2025 GMT
            Not After : Jan 29 16:23:26 2026 GMT
        Subject: CN=C81EC508452F90C8F5ECBED6A42619F1A6BFA04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:cc:70:92:d1:8b:76:5d:65:d4:51:a6:af:
                    83:bf:cf:a0:a0:dd:14:bb:9c:30:1e:30:2d:c6:2d:
                    a0:4b:36:54:e3:eb:26:16:ec:ef:da:38:f6:e6:be:
                    f6:8f:c8:79:e0:03:51:eb:9b:d3:ca:b4:d8:41:20:
                    20:ad:b6:d4:69:a8:38:78:b4:92:14:e4:19:62:84:
                    24:73:67:40:45:d5:e8:a6:40:1c:b9:b2:63:7a:36:
                    1f:a2:84:5d:fc:54:f2:a9:0b:af:fc:7c:0e:6b:44:
                    ca:df:df:d8:be:3a:59:91:e2:2e:0c:36:6b:8e:64:
                    e3:cd:e7:1c:03:c2:c7:9d:73:10:48:92:35:14:2b:
                    5c:5a:11:06:17:6c:1e:c2:82:3e:a1:ec:6b:da:dd:
                    f8:e2:5f:c7:5b:2a:e6:95:7f:e6:69:a3:c3:d9:17:
                    fc:16:a9:53:08:4d:0b:b9:b0:95:83:32:d7:85:be:
                    8d:ce:0d:bd:0c:24:b6:78:8e:cc:3d:69:23:0e:6c:
                    ba:41:66:b1:7c:06:cf:ff:9c:5d:f9:d9:74:bd:f0:
                    13:09:2c:c5:2e:b6:d5:10:9c:b8:77:d8:d9:8f:03:
                    de:83:09:e0:9d:82:00:c4:7e:3d:0a:ae:2a:ac:53:
                    5a:72:ae:eb:b8:97:1d:1e:ca:5a:f8:fd:af:9c:b5:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:C5:08:45:2F:90:C8:F5:EC:BE:D6:A4:26:19:F1:A6:BF:A0:4B
            X509v3 Authority Key Identifier:
                keyid:E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/E1F724D25672BFA30941906405DCC099740BF6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133332e302f32342d3234203d3e20323638363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:e5:54:14:39:c6:2a:31:5f:3f:95:85:eb:94:1d:77:25:
         ee:ba:12:01:63:7a:3e:91:04:c9:09:6b:5a:c3:6d:00:80:ae:
         27:87:36:47:6e:5d:b4:55:0e:38:e9:24:cf:b1:6d:14:7d:c6:
         a8:95:f0:c3:35:cd:d4:58:cc:99:bb:7c:83:9a:23:7b:b6:d5:
         42:2d:fe:a5:f4:67:73:0a:f7:89:88:ce:38:ef:dd:62:b2:05:
         67:19:3b:e6:cd:19:ec:db:ec:d8:1c:b9:1f:10:a7:79:37:aa:
         36:17:d9:59:31:f7:61:a4:2d:4a:f8:b4:7f:36:84:ec:46:88:
         ca:3e:34:d4:73:81:eb:1b:19:93:63:88:3a:bc:be:88:83:72:
         ba:c6:98:59:1e:d7:98:9a:77:a3:22:9a:c7:81:af:4a:ca:b7:
         16:f4:2b:e9:dd:5a:09:89:da:63:2c:ca:61:7b:b6:3d:d3:22:
         4a:e5:93:fa:be:d0:bc:8b:eb:6e:75:40:5e:ef:80:df:6b:91:
         6f:92:40:ea:10:41:ca:b5:97:48:cb:e6:40:ec:55:98:0d:fd:
         0f:f0:75:f8:7a:2b:e4:11:09:b9:19:c1:d2:1e:30:cf:85:88:
         4e:fb:8f:b7:82:41:f3:11:d9:5f:b8:cd:30:9c:24:04:b2:5a:
         a4:f9:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:19:02 2025 by rpki-client on console.sobornost.net