Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133342e302f32332d3233203d3e20323638363137.roa
File:                     34352e3136342e3133342e302f32332d3233203d3e20323638363137.roa (raw, json)
Hash identifier:          PV5cOYDKtN67uZrd68OD4vm02bcSnJns2cslatqYE+M=
Subject key identifier:   CC:7C:1D:6B:65:65:40:76:C4:94:7E:55:08:4C:74:59:FF:3B:92:37
Certificate issuer:       /CN=E1F724D25672BFA30941906405DCC099740BF6B5
Certificate serial:       5840DB5FC2A541090D4ACB3025E4F27D6E9E3314
Authority key identifier: E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133342e302f32332d3233203d3e20323638363137.roa
Signing time:             Thu 30 Jan 2025 16:22:45 +0000
ROA not before:           Thu 30 Jan 2025 16:17:45 +0000
ROA not after:            Thu 29 Jan 2026 16:22:45 +0000
asID:                     268617
IP address blocks:        45.164.134.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:40:db:5f:c2:a5:41:09:0d:4a:cb:30:25:e4:f2:7d:6e:9e:33:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F724D25672BFA30941906405DCC099740BF6B5
        Validity
            Not Before: Jan 30 16:17:45 2025 GMT
            Not After : Jan 29 16:22:45 2026 GMT
        Subject: CN=CC7C1D6B65654076C4947E55084C7459FF3B9237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:3a:3d:5d:c6:66:19:4d:21:fe:70:36:1e:
                    de:c6:6a:64:3a:17:d7:5e:87:a5:74:2c:96:f4:49:
                    d5:a9:42:42:11:6d:af:f0:b2:42:d4:b0:b2:90:6f:
                    07:66:30:f3:c2:0f:ec:3f:b9:48:99:cf:1a:d1:ad:
                    a1:14:52:68:d5:13:e8:71:8e:50:41:af:c1:c6:70:
                    69:e0:c1:19:ce:5a:62:1f:a8:e0:f9:c8:fc:0b:d2:
                    59:27:ad:c9:6f:23:42:48:e0:c9:b3:39:7d:49:8d:
                    97:bb:d6:13:0e:23:93:59:b4:69:32:32:ea:a0:e5:
                    8a:8c:07:c9:1e:49:1e:a6:30:d4:e6:d0:49:ad:a0:
                    a0:4c:d7:1c:d1:d3:34:12:0a:90:b6:19:ea:9a:c2:
                    eb:aa:2f:f0:1b:30:4e:01:01:e8:4c:42:49:10:c2:
                    36:5a:33:f5:15:44:1d:cc:17:48:9f:40:d3:a1:e7:
                    0b:93:bd:3c:b0:68:a9:bd:83:da:8c:5d:cb:42:17:
                    f4:e7:40:52:95:5f:1c:97:54:df:69:3b:dd:61:d8:
                    39:67:28:94:70:5e:d4:b6:73:b2:59:14:25:96:91:
                    3c:e5:ee:31:3f:c4:75:78:fe:93:a8:20:d6:0c:a4:
                    68:71:19:48:4d:74:d4:21:54:30:0e:ba:77:36:64:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:1D:6B:65:65:40:76:C4:94:7E:55:08:4C:74:59:FF:3B:92:37
            X509v3 Authority Key Identifier:
                keyid:E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/E1F724D25672BFA30941906405DCC099740BF6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133342e302f32332d3233203d3e20323638363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:32:34:ba:37:cf:79:7d:05:aa:79:82:58:16:74:fe:fa:
         6e:38:d3:3b:3d:80:d5:b3:e1:32:84:97:6b:3e:af:70:82:67:
         f9:1d:78:8f:c9:ed:46:5d:87:6f:1e:07:79:72:84:7a:44:5e:
         92:ef:8b:9e:5c:d2:f4:40:3d:b6:a1:84:c7:bc:bd:36:52:47:
         41:ee:97:f9:53:ca:40:f3:f6:8d:34:2d:7c:5a:2e:56:1f:03:
         34:8e:6e:4f:57:64:06:13:35:7f:18:e4:79:f4:64:1f:f3:74:
         a2:ef:8c:36:e6:01:02:2b:b7:af:69:5b:dc:8b:40:60:c0:8c:
         6a:74:41:fd:ba:0e:a6:0f:bc:f8:46:74:37:0d:d3:53:58:ed:
         a1:28:6a:77:a4:fc:43:a7:87:57:cf:54:e2:12:9d:db:e4:c2:
         97:cd:7d:1c:e9:6d:76:33:c3:52:56:7d:33:a9:3b:e9:c1:6b:
         96:4b:5a:d7:c1:6a:c4:3f:47:91:40:91:99:ba:ea:14:a5:f9:
         60:43:d5:ef:9a:64:f3:5e:65:81:f9:88:5c:4b:33:f3:ed:9f:
         25:75:54:79:0b:57:59:5d:5c:e7:4b:16:4a:77:1a:f2:45:86:
         53:72:a5:42:fe:7e:2d:0d:5d:86:7a:89:d9:a7:c3:03:d7:0c:
         31:9d:e9:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWEDbX8KlQQkNSsswJeTyfW6eMxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGNzI0RDI1NjcyQkZBMzA5NDE5MDY0MDVEQ0MwOTk3
NDBCRjZCNTAeFw0yNTAxMzAxNjE3NDVaFw0yNjAxMjkxNjIyNDVaMDMxMTAvBgNV
BAMTKENDN0MxRDZCNjU2NTQwNzZDNDk0N0U1NTA4NEM3NDU5RkYzQjkyMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJzo9XcZmGU0h/nA2Ht7GamQ6
F9deh6V0LJb0SdWpQkIRba/wskLUsLKQbwdmMPPCD+w/uUiZzxrRraEUUmjVE+hx
jlBBr8HGcGngwRnOWmIfqOD5yPwL0lknrclvI0JI4MmzOX1JjZe71hMOI5NZtGky
Muqg5YqMB8keSR6mMNTm0EmtoKBM1xzR0zQSCpC2GeqawuuqL/AbME4BAehMQkkQ
wjZaM/UVRB3MF0ifQNOh5wuTvTywaKm9g9qMXctCF/TnQFKVXxyXVN9pO91h2Dln
KJRwXtS2c7JZFCWWkTzl7jE/xHV4/pOoINYMpGhxGUhNdNQhVDAOunc2ZK6ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzHwda2VlQHbElH5VCEx0Wf87kjcwHwYDVR0j
BBgwFoAU4fck0lZyv6MJQZBkBdzAmXQL9rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3l4WVV4Q0daWlR1c1pYaWc2eFJlZXdEUmRpcG4zTEVFQ0VGYVlnNVpo
c3YvMC9FMUY3MjREMjU2NzJCRkEzMDk0MTkwNjQwNURDQzA5OTc0MEJGNkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxRjcyNEQyNTY3MkJGQTMw
OTQxOTA2NDA1RENDMDk5NzQwQkY2QjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N5eFlVeENHWlpUdXNaWGlnNnhSZWV3RFJkaXBuM0xFRUNFRmFZZzVaaHN2LzAv
MzQzNTJlMzEzNjM0MmUzMTMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpIYwDQYJKoZIhvcNAQELBQADggEBAB0QMjS6
N895fQWqeYJYFnT++m440zs9gNWz4TKEl2s+r3CCZ/kdeI/J7UZdh28eB3lyhHpE
XpLvi55c0vRAPbahhMe8vTZSR0Hul/lTykDz9o00LXxaLlYfAzSObk9XZAYTNX8Y
5Hn0ZB/zdKLvjDbmAQIrt69pW9yLQGDAjGp0Qf26DqYPvPhGdDcN01NY7aEoanek
/EOnh1fPVOISndvkwpfNfRzpbXYzw1JWfTOpO+nBa5ZLWtfBasQ/R5FAkZm66hSl
+WBD1e+aZPNeZYH5iFxLM/PtnyV1VHkLV1ldXOdLFkp3GvJFhlNypUL+fi0NXYZ6
idmnwwPXDDGd6Tg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:19:02 2025 by rpki-client on console.sobornost.net