Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa
File:                     34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa (raw, json)
Hash identifier:          j5oTJhU944KJaYMOdDtERBF75aQgzmtUZSIEigO/cns=
Subject key identifier:   97:25:98:60:79:1C:52:ED:ED:07:45:5E:92:DD:52:55:7E:37:97:64
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       26B09F9FBA3C8D2EC749B748FC2BBF669985791B
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa
Signing time:             Thu 06 Mar 2025 14:06:02 +0000
ROA not before:           Thu 06 Mar 2025 14:01:02 +0000
ROA not after:            Thu 05 Mar 2026 14:06:02 +0000
asID:                     268638
IP address blocks:        45.164.226.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b0:9f:9f:ba:3c:8d:2e:c7:49:b7:48:fc:2b:bf:66:99:85:79:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Mar  6 14:01:02 2025 GMT
            Not After : Mar  5 14:06:02 2026 GMT
        Subject: CN=97259860791C52EDED07455E92DD52557E379764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:01:53:25:21:39:04:04:fa:a6:6a:39:b0:
                    f3:7f:02:b7:28:cd:8f:bc:1a:a1:65:32:dc:92:92:
                    e7:c4:f4:e8:3e:ae:e1:9b:b1:f0:c9:6d:d7:99:dc:
                    07:01:9f:6b:22:17:32:76:f4:d8:0b:1b:93:47:b6:
                    32:92:9f:95:54:d0:c2:45:23:58:d5:7a:1b:af:4e:
                    09:a7:a2:5d:58:fe:69:72:ab:2b:73:2a:15:e0:ed:
                    0b:ff:41:09:56:c4:84:c7:5d:c7:68:38:56:9f:6d:
                    8f:17:26:c5:00:2d:9d:7a:60:42:f7:7c:f2:3f:c0:
                    22:62:61:63:49:22:b5:7d:18:69:b0:ac:35:d0:e9:
                    33:63:e2:8b:34:ba:4f:e5:32:bc:14:79:b1:16:e6:
                    5f:33:08:8e:28:63:00:21:e6:95:16:6e:4b:73:f8:
                    d6:79:d5:ec:1b:71:53:10:e3:95:69:79:2d:45:16:
                    0c:f8:3b:5e:b5:29:b8:86:b9:3e:8b:7e:44:f1:3f:
                    93:e7:f9:43:0e:a1:cd:29:38:84:62:3e:66:e0:56:
                    86:a5:21:14:5b:63:7b:32:a0:44:ed:0e:49:4f:55:
                    1d:10:5e:53:9b:fd:00:b4:d7:88:b9:bb:6a:97:d2:
                    15:b9:d2:0e:b7:f9:1b:3a:6c:ba:da:f7:7b:e2:72:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:25:98:60:79:1C:52:ED:ED:07:45:5E:92:DD:52:55:7E:37:97:64
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:f0:51:d7:e4:b3:31:31:10:b9:79:ba:fd:c0:4d:3f:2b:9e:
         a7:3c:98:d1:16:5b:33:fc:94:6d:84:96:1d:9c:86:f9:03:40:
         ee:cb:f7:3d:5d:d4:c4:5f:2f:60:6d:6f:87:cd:bb:c0:8e:94:
         ef:2a:ef:09:87:8a:3b:5a:48:cc:60:6c:70:7b:5b:44:9e:f8:
         10:fb:cf:03:b0:a7:74:e9:ed:de:20:9e:30:69:49:df:9b:2e:
         ad:99:93:dd:84:27:5a:7a:92:ca:99:2d:5b:ed:e7:62:25:31:
         c6:3c:44:f7:50:9b:0c:4b:c9:9a:8e:db:84:c9:21:0b:92:b6:
         24:5d:25:5d:a4:8c:a5:df:41:d4:c8:56:d6:28:37:02:6f:4b:
         ea:c8:21:61:a7:bf:bb:27:ab:26:d3:59:0a:e6:8c:1d:75:46:
         20:d8:f6:d8:3a:06:04:24:ac:3e:c1:64:1b:e3:aa:d5:0e:c1:
         81:f9:c0:13:28:35:8a:29:c6:4b:df:14:f7:d5:02:1f:89:fa:
         4d:80:18:c2:54:fb:b3:39:6e:0b:17:13:5d:f2:e6:76:16:59:
         43:a7:42:fe:cf:6f:4e:96:3b:f4:11:5d:a1:17:42:f1:0f:94:
         bd:16:23:e9:1d:2c:54:ac:d7:3b:47:60:f6:94:aa:2e:d7:ef:
         64:63:2b:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJrCfn7o8jS7HSbdI/Cu/ZpmFeRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA2QzA2NkQ3NEU2NTdDRjY5MTRCNTk2MUUxQ0Y2NERE
NTdFRkFCMTAeFw0yNTAzMDYxNDAxMDJaFw0yNjAzMDUxNDA2MDJaMDMxMTAvBgNV
BAMTKDk3MjU5ODYwNzkxQzUyRURFRDA3NDU1RTkyREQ1MjU1N0UzNzk3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7wFTJSE5BAT6pmo5sPN/Arco
zY+8GqFlMtySkufE9Og+ruGbsfDJbdeZ3AcBn2siFzJ29NgLG5NHtjKSn5VU0MJF
I1jVehuvTgmnol1Y/mlyqytzKhXg7Qv/QQlWxITHXcdoOFafbY8XJsUALZ16YEL3
fPI/wCJiYWNJIrV9GGmwrDXQ6TNj4os0uk/lMrwUebEW5l8zCI4oYwAh5pUWbktz
+NZ51ewbcVMQ45VpeS1FFgz4O161KbiGuT6LfkTxP5Pn+UMOoc0pOIRiPmbgVoal
IRRbY3syoETtDklPVR0QXlOb/QC014i5u2qX0hW50g63+Rs6bLra93vicjmNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlyWYYHkcUu3tB0Vekt1SVX43l2QwHwYDVR0j
BBgwFoAU8GwGbXTmV89pFLWWHhz2TdV++rEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG15TERqTWdhZVVzWW5malVDZmk4QllUeDR0c1p2c0ZQRHdzNXdEczR4
RmEvMS9GMDZDMDY2RDc0RTY1N0NGNjkxNEI1OTYxRTFDRjY0REQ1N0VGQUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwNkMwNjZENzRFNjU3Q0Y2
OTE0QjU5NjFFMUNGNjRERDU3RUZBQjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RteUxEak1nYWVVc1luZmpVQ2ZpOEJZVHg0dHNadnNGUER3czV3RHM0eEZhLzEv
MzQzNTJlMzEzNjM0MmUzMjMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpOIwDQYJKoZIhvcNAQELBQADggEBANbwUdfk
szExELl5uv3ATT8rnqc8mNEWWzP8lG2Elh2chvkDQO7L9z1d1MRfL2Btb4fNu8CO
lO8q7wmHijtaSMxgbHB7W0Se+BD7zwOwp3Tp7d4gnjBpSd+bLq2Zk92EJ1p6ksqZ
LVvt52IlMcY8RPdQmwxLyZqO24TJIQuStiRdJV2kjKXfQdTIVtYoNwJvS+rIIWGn
v7snqybTWQrmjB11RiDY9tg6BgQkrD7BZBvjqtUOwYH5wBMoNYopxkvfFPfVAh+J
+k2AGMJU+7M5bgsXE13y5nYWWUOnQv7Pb06WO/QRXaEXQvEPlL0WI+kdLFSs1ztH
YPaUqi7X72RjK3w=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:36:33 2025 by rpki-client on console.sobornost.net