Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa
File:                     34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa (raw, json)
Hash identifier:          BXgfdjjdsvSBvPisOb3IBWIHKxwzMbdVqBUzam6rKwc=
Subject key identifier:   D5:5E:B4:D2:07:EA:48:8A:CC:7F:1C:21:41:11:1A:76:7C:4C:9B:5A
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       4960014439706AAE67F160BA750ED13C31603844
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa
Signing time:             Thu 06 Mar 2025 00:33:26 +0000
ROA not before:           Thu 06 Mar 2025 00:28:26 +0000
ROA not after:            Thu 05 Mar 2026 00:33:26 +0000
asID:                     269079
IP address blocks:        45.179.135.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:60:01:44:39:70:6a:ae:67:f1:60:ba:75:0e:d1:3c:31:60:38:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Mar  6 00:28:26 2025 GMT
            Not After : Mar  5 00:33:26 2026 GMT
        Subject: CN=D55EB4D207EA488ACC7F1C2141111A767C4C9B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6e:db:8d:47:c4:3f:ab:23:fe:dd:c1:78:7c:
                    37:5e:aa:a2:2c:ee:28:45:6e:bb:63:74:e5:84:cf:
                    2d:84:7a:19:4b:80:bf:4f:4a:cc:20:64:f8:3c:68:
                    73:7c:3d:44:c6:8c:f3:84:5b:00:05:72:55:53:a8:
                    1a:ca:ae:05:9e:ff:88:95:0c:1f:e6:2e:fa:6c:3a:
                    cc:f8:84:db:72:5f:14:6d:92:cb:ec:1e:ce:92:ae:
                    18:aa:32:ec:c0:c8:19:d0:76:7d:67:c2:a9:93:00:
                    49:bb:bc:d7:4b:f5:e0:c9:15:75:ab:26:e4:c9:fc:
                    95:e9:1f:51:ed:ce:30:47:cb:f3:57:4c:af:bf:47:
                    36:e3:ac:05:f6:cb:d0:ba:e5:2b:74:5f:62:fa:a8:
                    2c:7c:6f:8f:c5:d0:fa:30:d7:25:ee:c6:0d:9c:ed:
                    12:f1:40:62:00:82:88:79:b6:a6:1c:88:c1:9c:06:
                    00:00:58:d5:60:ce:26:81:81:89:33:5e:2d:09:55:
                    56:4f:eb:58:19:79:01:67:2a:ef:1b:b5:34:b0:8d:
                    bc:48:09:b7:86:16:a3:fc:09:cf:21:7b:80:d1:16:
                    6b:5b:be:0a:4b:65:d6:55:4e:22:50:d1:e6:33:ab:
                    8c:b1:01:85:8f:95:a2:89:dc:ad:25:8a:ff:91:b9:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:B4:D2:07:EA:48:8A:CC:7F:1C:21:41:11:1A:76:7C:4C:9B:5A
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:02:61:19:9e:89:3c:42:30:07:10:7a:06:6d:04:23:41:73:
         81:e1:e6:d7:3e:bf:09:b3:8e:a1:18:de:06:2c:8f:20:43:27:
         5e:25:37:e4:67:c3:8d:78:da:48:ea:ca:a2:4d:3f:92:ce:2d:
         66:4a:3c:9c:10:f1:2e:f5:e0:5e:df:dc:83:e2:f7:a3:b5:1b:
         ed:0e:02:06:c2:62:4e:61:af:fc:78:77:1e:3c:7f:4b:70:3b:
         32:54:51:3c:d3:20:18:c0:6f:f4:4b:15:f3:04:aa:d0:d5:f7:
         32:56:7f:d3:bb:ac:e0:b4:22:13:0d:69:60:24:ad:98:2e:91:
         70:33:2d:0d:88:9d:37:5f:87:2d:df:8a:32:e5:84:5a:f5:53:
         a8:67:e4:c9:5f:93:84:fe:ba:e7:16:08:49:c3:5b:c1:ee:61:
         f9:93:95:77:61:c3:49:e7:0a:e3:a7:74:fa:52:71:9a:c8:6a:
         17:5f:2d:81:94:23:a3:d7:dc:5d:45:fc:d7:b2:71:f0:03:95:
         66:f0:9a:bd:48:73:1e:9f:22:39:c5:d5:de:aa:af:70:f1:61:
         d5:7c:ce:84:3b:2e:fb:00:fa:72:8b:85:69:b5:6f:e2:d3:fa:
         d5:15:49:53:47:1f:c5:00:00:7d:2e:ce:7d:9f:e2:61:1a:97:
         14:d4:e5:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSWABRDlwaq5n8WC6dQ7RPDFgOEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE3MkFDMTY1NzEwRDNEMjI0MDk1MEY5MEZGNDE5MzJF
NTk5MkNGQjAeFw0yNTAzMDYwMDI4MjZaFw0yNjAzMDUwMDMzMjZaMDMxMTAvBgNV
BAMTKEQ1NUVCNEQyMDdFQTQ4OEFDQzdGMUMyMTQxMTExQTc2N0M0QzlCNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbtuNR8Q/qyP+3cF4fDdeqqIs
7ihFbrtjdOWEzy2EehlLgL9PSswgZPg8aHN8PUTGjPOEWwAFclVTqBrKrgWe/4iV
DB/mLvpsOsz4hNtyXxRtksvsHs6SrhiqMuzAyBnQdn1nwqmTAEm7vNdL9eDJFXWr
JuTJ/JXpH1HtzjBHy/NXTK+/RzbjrAX2y9C65St0X2L6qCx8b4/F0Pow1yXuxg2c
7RLxQGIAgoh5tqYciMGcBgAAWNVgziaBgYkzXi0JVVZP61gZeQFnKu8btTSwjbxI
CbeGFqP8Cc8he4DRFmtbvgpLZdZVTiJQ0eYzq4yxAYWPlaKJ3K0liv+RuSDdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1V600gfqSIrMfxwhQREadnxMm1owHwYDVR0j
BBgwFoAUmnKsFlcQ09IkCVD5D/QZMuWZLPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBn
cEQvMS85QTcyQUMxNjU3MTBEM0QyMjQwOTUwRjkwRkY0MTkzMkU1OTkyQ0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBNzJBQzE2NTcxMEQzRDIy
NDA5NTBGOTBGRjQxOTMyRTU5OTJDRkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zqd05GblljM0JrNUZoclRSVTFIQWV2Y0FHVHFEcU55S2ptWGo5Z0VQZ3BELzEv
MzQzNTJlMzEzNzM5MmUzMTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAts4cwDQYJKoZIhvcNAQELBQADggEBAJQCYRme
iTxCMAcQegZtBCNBc4Hh5tc+vwmzjqEY3gYsjyBDJ14lN+Rnw4142kjqyqJNP5LO
LWZKPJwQ8S714F7f3IPi96O1G+0OAgbCYk5hr/x4dx48f0twOzJUUTzTIBjAb/RL
FfMEqtDV9zJWf9O7rOC0IhMNaWAkrZgukXAzLQ2InTdfhy3fijLlhFr1U6hn5Mlf
k4T+uucWCEnDW8HuYfmTlXdhw0nnCuOndPpScZrIahdfLYGUI6PX3F1F/NeycfAD
lWbwmr1Icx6fIjnF1d6qr3DxYdV8zoQ7LvsA+nKLhWm1b+LT+tUVSVNHH8UAAH0u
zn2f4mEalxTU5ac=
-----END CERTIFICATE-----
Generated at Wed Mar 26 23:32:20 2025 by rpki-client on console.sobornost.net