Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa
File:                     34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa (raw, json)
Hash identifier:          sN+L0fk9hs+s1l4KInwWvKk3onpWnPwGxsglATwUwAc=
Subject key identifier:   52:A2:3B:5D:CE:56:EE:F0:7D:08:40:EF:DB:7D:54:53:FD:9F:D2:AD
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       1F4BB55211BA6DBFBD321208131F856951599B67
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa
Signing time:             Thu 06 Mar 2025 00:33:26 +0000
ROA not before:           Thu 06 Mar 2025 00:28:26 +0000
ROA not after:            Thu 05 Mar 2026 00:33:26 +0000
asID:                     269079
IP address blocks:        45.179.133.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4b:b5:52:11:ba:6d:bf:bd:32:12:08:13:1f:85:69:51:59:9b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Mar  6 00:28:26 2025 GMT
            Not After : Mar  5 00:33:26 2026 GMT
        Subject: CN=52A23B5DCE56EEF07D0840EFDB7D5453FD9FD2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:b7:f0:42:08:11:fe:b7:72:24:18:b7:9e:
                    32:3a:5c:25:b5:26:f4:0e:da:cc:b0:99:f2:10:1e:
                    6a:e7:a9:69:1e:92:72:7d:d2:32:d6:0c:0b:b3:2a:
                    af:b9:46:dd:21:9b:56:85:a8:57:06:a3:d4:22:65:
                    b6:3f:82:3f:c1:27:97:74:e3:85:1a:94:ad:73:00:
                    5a:47:89:51:e6:30:f4:d4:04:90:97:9b:1a:76:ab:
                    b7:5c:0a:56:ea:7d:80:05:65:db:c5:b4:fa:15:cd:
                    d3:4d:1a:01:ee:7a:17:29:92:2a:ac:cc:8c:e2:92:
                    68:b4:97:3b:f0:64:cf:ea:ca:e2:fe:26:ce:15:1d:
                    c8:7d:1b:80:be:db:89:df:c9:0d:b4:55:aa:72:d8:
                    d4:29:70:19:3d:00:6b:cc:48:b8:c7:9e:d8:19:05:
                    62:93:89:76:c9:ee:5f:56:38:31:d5:40:4a:41:1e:
                    d9:07:5d:f7:ce:21:6f:48:2c:0d:8a:6e:8d:9f:65:
                    f8:b3:b8:e9:6d:bb:2f:59:60:ed:cc:21:01:e1:ae:
                    91:d6:58:a4:40:69:bf:d9:dc:ad:40:c1:88:bf:a8:
                    21:26:96:09:67:e7:0d:08:83:f1:bf:bd:e7:b3:0a:
                    ac:35:77:9b:77:82:0d:5f:fc:76:3a:a5:5c:64:3d:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A2:3B:5D:CE:56:EE:F0:7D:08:40:EF:DB:7D:54:53:FD:9F:D2:AD
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:e9:e3:e7:da:e0:f7:a0:72:4b:bd:87:e6:21:6e:99:8a:05:
         3a:11:08:b7:06:50:0d:16:ca:3f:11:ca:32:93:a7:37:18:30:
         33:e4:7f:2a:42:12:74:eb:58:ef:a3:d1:6a:c4:fc:a9:c2:c7:
         14:87:35:39:c4:4f:c8:66:86:60:e4:91:04:6f:2e:fa:be:63:
         4e:58:7d:04:d2:98:11:9e:0a:e4:17:cc:c1:38:40:94:bf:d9:
         00:f7:70:81:92:13:59:c7:af:94:86:be:78:f8:18:aa:ae:b5:
         15:a1:e1:98:cb:3d:22:4a:51:26:44:09:fb:8a:de:eb:1a:fa:
         57:23:06:28:a3:18:7d:94:4f:55:83:e1:64:88:c5:46:7a:9a:
         01:12:94:f2:61:27:35:50:93:fa:d4:5c:ef:4e:a9:76:82:c7:
         22:94:87:d9:2c:14:26:e3:79:21:48:b6:3b:b1:16:c2:a7:3d:
         17:52:79:5f:d8:43:76:f1:3d:10:3e:8e:81:af:44:79:8e:1f:
         17:ad:ed:97:a2:cd:55:f0:3e:af:2a:d5:20:a6:f3:42:c7:a6:
         3f:d3:c0:1f:49:b3:c2:f1:e9:df:05:83:b5:fd:22:ba:72:6f:
         5e:ae:1f:0b:14:49:ae:7d:74:8a:f5:cc:51:4a:70:49:b7:da:
         f0:f3:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 26 23:32:20 2025 by rpki-client on console.sobornost.net