Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133352e302f32342d3234203d3e20323638363137.roa
File:                     34352e3136342e3133352e302f32342d3234203d3e20323638363137.roa (raw, json)
Hash identifier:          L/MzV5E1hld6yhSJ2hxIJnYAA0rrk1cK/oIEUqxUiuk=
Subject key identifier:   25:0E:25:13:ED:E6:66:AD:A4:DA:29:51:92:D9:38:95:53:D6:8B:01
Certificate issuer:       /CN=E1F724D25672BFA30941906405DCC099740BF6B5
Certificate serial:       4FAD373A9B946E9C6223D79E0D2A392CF037697F
Authority key identifier: E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133352e302f32342d3234203d3e20323638363137.roa
Signing time:             Thu 30 Jan 2025 16:22:47 +0000
ROA not before:           Thu 30 Jan 2025 16:17:47 +0000
ROA not after:            Thu 29 Jan 2026 16:22:47 +0000
asID:                     268617
IP address blocks:        45.164.135.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:37:3a:9b:94:6e:9c:62:23:d7:9e:0d:2a:39:2c:f0:37:69:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F724D25672BFA30941906405DCC099740BF6B5
        Validity
            Not Before: Jan 30 16:17:47 2025 GMT
            Not After : Jan 29 16:22:47 2026 GMT
        Subject: CN=250E2513EDE666ADA4DA295192D9389553D68B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:83:f8:d0:c2:21:c4:26:0d:0b:b3:48:86:
                    45:54:9b:28:dd:aa:f1:3f:71:cc:26:cb:b6:7f:72:
                    4a:d7:62:d7:b5:21:25:64:60:53:27:03:90:67:1b:
                    43:1a:3e:d0:9e:b8:ff:43:42:bf:6a:4c:ff:70:d9:
                    81:8c:1d:b2:a6:25:e3:f1:22:c5:d0:4c:c0:79:8b:
                    22:eb:73:16:6d:b8:cd:33:6b:0f:4a:5d:47:49:6d:
                    1c:38:d4:ed:5f:16:63:51:fb:3b:fd:6d:0f:7a:8d:
                    6f:9f:91:ea:82:47:5f:dd:b2:d6:1c:76:62:2c:37:
                    a6:d5:64:1f:11:c4:6c:1c:cd:94:58:d3:bd:d5:0e:
                    20:d6:6f:00:b8:08:77:d0:ab:1d:26:da:0d:9e:51:
                    34:9c:c9:4c:38:b2:30:dd:9c:7a:88:6d:c8:ed:6e:
                    85:99:29:5f:bc:c3:01:14:e9:34:90:b6:36:67:6a:
                    98:3f:a9:4e:98:e2:1f:86:0d:af:58:31:89:51:6c:
                    16:ad:28:89:e4:eb:40:90:c5:f6:5b:fd:ae:8e:67:
                    28:1d:cb:80:e0:06:e2:e2:50:21:0e:9b:b8:71:6f:
                    90:f4:60:78:55:ac:f7:ce:03:b8:0e:3a:43:96:29:
                    dd:7c:ee:6c:a4:59:6a:e3:d2:c2:82:7c:d9:1d:45:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0E:25:13:ED:E6:66:AD:A4:DA:29:51:92:D9:38:95:53:D6:8B:01
            X509v3 Authority Key Identifier:
                keyid:E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/E1F724D25672BFA30941906405DCC099740BF6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133352e302f32342d3234203d3e20323638363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a5:4d:eb:aa:18:ae:7b:eb:46:ce:70:da:d5:38:38:fd:86:
         3b:a4:0e:40:67:d0:e8:46:58:10:91:1d:a6:de:87:a8:ed:3a:
         71:c1:74:19:2a:07:b8:1c:7b:27:39:f3:9e:e6:5a:5e:60:9b:
         9b:f0:f5:aa:c5:c2:60:e1:72:42:7b:6a:87:ad:5b:64:c4:ad:
         ca:cc:50:01:af:99:04:45:64:54:0b:76:9a:36:3e:b2:56:62:
         f2:92:a2:3e:90:06:69:c1:0a:eb:86:14:8b:85:83:11:62:36:
         00:25:c5:34:a7:8a:27:15:41:fe:72:e6:7a:ed:c7:81:4c:38:
         bf:cc:44:bd:6a:aa:90:20:a7:50:29:93:2c:d0:cf:ad:e6:3e:
         69:68:25:96:fb:c6:12:2c:19:29:15:10:72:71:86:75:01:e2:
         18:98:c1:3d:19:0f:0a:90:09:c5:b7:9d:67:fa:97:74:93:eb:
         02:9b:23:d1:79:14:3a:ce:c6:29:ed:95:ac:0e:63:d8:2c:8f:
         71:9e:ac:11:4a:6b:6c:41:e0:52:d1:de:64:b0:90:87:d9:5a:
         37:0b:33:56:0e:b6:80:d8:b1:0f:4d:49:3b:b4:64:4e:04:c6:
         b1:da:09:7f:87:34:bd:53:67:e8:f7:cd:53:2a:a7:e1:19:ad:
         57:af:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:19:02 2025 by rpki-client on console.sobornost.net