Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa
File:                     34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa (raw, json)
Hash identifier:          udQSYGdNv+sHR5zMKQTEcFgikzoVTyZmSy5qzB+ycno=
Subject key identifier:   55:B8:59:1B:C4:8D:26:6F:D0:46:1F:2D:09:05:2E:99:B5:BA:C8:BB
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       6444A8D2BA8CA1242EF51B40E2BD0A080C452567
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa
Signing time:             Thu 06 Mar 2025 14:06:02 +0000
ROA not before:           Thu 06 Mar 2025 14:01:02 +0000
ROA not after:            Thu 05 Mar 2026 14:06:02 +0000
asID:                     268638
IP address blocks:        45.164.224.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:44:a8:d2:ba:8c:a1:24:2e:f5:1b:40:e2:bd:0a:08:0c:45:25:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Mar  6 14:01:02 2025 GMT
            Not After : Mar  5 14:06:02 2026 GMT
        Subject: CN=55B8591BC48D266FD0461F2D09052E99B5BAC8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:1c:0f:c8:f5:ee:47:93:5c:0e:c6:67:35:
                    f0:4d:db:c1:4e:ae:ba:99:e4:ed:58:4f:7a:10:75:
                    37:14:d4:62:8a:3f:c1:db:82:cc:45:37:07:cf:f6:
                    b2:fa:e3:1e:f8:90:e9:b6:33:16:9b:73:6c:b6:34:
                    42:69:b6:fe:09:2d:fa:28:fe:a2:7e:39:bd:fa:56:
                    27:31:2a:4b:ac:25:b9:74:82:62:8c:13:38:59:ce:
                    17:43:ac:6a:8b:8d:0a:75:f4:ec:08:26:92:25:0e:
                    e6:3a:0a:ac:66:81:a8:1b:80:9b:ac:00:37:a0:cc:
                    b4:82:22:52:89:7e:9a:79:f0:05:de:35:f0:13:07:
                    66:1d:9d:43:c8:3d:3a:96:5e:ff:09:33:68:05:6d:
                    e2:6f:3b:5f:9c:4a:68:89:b1:e0:88:ec:6e:86:32:
                    23:35:cd:9e:56:ca:8c:db:38:87:33:7a:a7:c6:43:
                    30:67:37:4d:17:51:75:5c:4f:be:65:dd:22:21:64:
                    e3:3d:43:a9:85:63:89:a2:a2:51:64:77:f0:5d:f3:
                    81:dc:37:bd:bc:86:ae:a1:d9:ec:e9:ed:4e:95:bb:
                    c9:1c:f3:cc:6e:90:71:45:4a:d0:dd:53:01:9a:34:
                    c6:78:1a:65:88:86:f6:04:b4:c8:33:0d:e7:53:d6:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B8:59:1B:C4:8D:26:6F:D0:46:1F:2D:09:05:2E:99:B5:BA:C8:BB
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:97:46:b8:45:88:6a:22:0d:7d:83:fe:1c:6f:e0:d1:93:
         48:2a:8b:db:b2:82:d6:fc:93:c2:a6:d7:24:21:95:f7:d0:0c:
         a7:55:2e:ae:e2:0a:b5:30:e5:2b:7a:17:04:ad:c0:a3:ce:fa:
         07:a0:c1:69:c0:3f:eb:3e:d1:4d:f3:fa:39:78:ae:ff:bc:c2:
         73:e4:be:05:3d:23:bf:10:be:23:cd:f9:2e:80:25:07:c8:67:
         8e:0d:13:a4:76:00:33:5d:4d:7a:d3:63:8b:41:d0:2e:bc:5b:
         ec:43:cf:d9:b5:42:29:74:fc:11:7f:38:7d:3b:74:eb:c4:61:
         a4:95:4a:65:90:ec:09:37:17:f0:6c:c4:be:52:11:14:6a:40:
         9c:af:4c:ea:a5:63:b9:49:ae:91:27:6b:a0:94:72:e7:fc:ff:
         6a:a5:c6:e7:64:09:80:a2:14:c8:f9:e9:96:24:b3:37:41:b4:
         ca:f2:f8:5f:6c:0c:d2:23:b6:04:65:72:c2:f1:db:86:19:c5:
         0d:0b:f4:7e:d4:74:f1:ac:a2:85:df:ef:76:7a:32:02:3f:7d:
         f6:4a:8d:c3:91:d3:84:ad:2e:fb:37:de:d8:79:fd:70:76:fb:
         64:3d:ff:a2:8d:f9:92:ca:ba:1f:74:ea:a2:c1:09:d1:2d:92:
         97:d8:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:36:33 2025 by rpki-client on console.sobornost.net