Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32322d3232203d3e20323638343633.roa (raw, json)
Hash identifier:          X4Itur64IEoLF0Ti/5LbdXfA5L5cm4h7PLwoVjs5Xzc=
Subject key identifier:   48:FD:F3:A4:5A:5C:98:4B:D3:3C:15:B9:DA:57:BB:1F:1E:DA:D5:3E
Certificate issuer:       /CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
Certificate serial:       176B786D7477F11008586FC1D9387368E3D7C895
Authority key identifier: 1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
Signing time:             Mon 07 Apr 2025 20:17:42 +0000
ROA not before:           Mon 07 Apr 2025 20:12:42 +0000
ROA not after:            Mon 06 Apr 2026 20:17:42 +0000
asID:                     268463
IP address blocks:        45.161.96.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6b:78:6d:74:77:f1:10:08:58:6f:c1:d9:38:73:68:e3:d7:c8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
        Validity
            Not Before: Apr  7 20:12:42 2025 GMT
            Not After : Apr  6 20:17:42 2026 GMT
        Subject: CN=48FDF3A45A5C984BD33C15B9DA57BB1F1EDAD53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:2c:6e:dc:20:63:7d:00:70:84:7d:95:d8:
                    e5:9a:45:5b:42:51:26:7b:ab:52:77:54:75:98:6d:
                    15:1a:04:27:99:7f:3c:6f:8a:22:95:20:f1:03:d3:
                    00:ae:59:99:2f:83:c2:41:87:4d:fd:cd:d5:05:ff:
                    1a:d0:9d:2c:30:d9:6c:a4:c3:68:a2:fe:34:8b:48:
                    cb:43:47:d6:ed:7f:0a:a6:bf:66:01:ae:2a:13:02:
                    67:10:7c:b4:cc:06:79:48:67:ba:dd:87:ab:3a:23:
                    83:d8:7d:d7:1f:56:2b:5c:a1:23:fe:a0:73:49:f1:
                    de:e9:da:a3:9f:f9:8f:6e:9f:b7:f8:d3:ee:80:6d:
                    85:eb:ee:8a:b7:8c:8a:d7:af:8d:d4:33:a3:ed:3c:
                    d9:fb:f4:a6:c2:67:79:73:c6:28:6a:08:43:cc:c2:
                    6f:4c:26:b2:b7:ce:de:d8:d1:81:15:21:31:d3:51:
                    38:28:ef:26:5c:8a:8b:6a:5b:84:83:a4:ed:e9:27:
                    50:96:fb:fb:ec:fb:e1:d4:96:37:60:b0:14:35:19:
                    c9:59:88:f2:36:37:9b:0a:7c:27:aa:a0:e9:0f:49:
                    f9:b0:a3:d4:4d:52:84:fb:60:58:2c:4c:72:67:9f:
                    95:0c:9e:39:16:24:49:e1:42:5c:83:b6:cb:da:29:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FD:F3:A4:5A:5C:98:4B:D3:3C:15:B9:DA:57:BB:1F:1E:DA:D5:3E
            X509v3 Authority Key Identifier:
                keyid:1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:04:8c:3f:77:53:0f:9c:08:aa:00:63:10:cd:3f:77:d0:
         4d:01:1b:12:31:fc:e1:06:c9:99:c0:77:80:77:4f:06:46:32:
         d9:51:96:6f:a4:0a:57:09:39:48:3f:ac:64:90:65:84:ac:7c:
         fe:20:60:5b:59:5b:45:48:88:23:81:f0:a4:79:fa:de:06:1c:
         11:bd:a9:7d:73:ea:21:11:93:95:bc:f5:32:77:e1:25:59:b8:
         17:aa:9e:2b:06:30:b2:44:fb:2c:70:60:8c:86:18:6f:73:7b:
         40:c6:42:ab:8e:2f:b4:8a:ed:1f:f5:4b:8e:52:cd:1b:3b:2e:
         a7:02:28:c4:26:61:73:10:41:80:cb:2b:a9:c5:86:3b:5e:a5:
         60:ef:9c:c0:b3:e2:d3:41:84:71:ea:6b:63:f0:3f:d3:4f:36:
         35:51:ee:75:8f:d1:be:bc:d1:fe:bc:67:db:7e:fb:01:c4:f6:
         4c:cd:bb:df:95:80:10:d5:36:1b:b2:39:8e:61:24:05:d6:77:
         ae:52:5c:37:f6:e3:49:f2:3e:5d:b5:50:7b:e0:85:b4:c4:be:
         7a:f0:dd:11:c1:81:72:08:db:1f:13:27:15:95:76:89:95:4a:
         03:15:e7:87:06:56:cd:19:f1:7c:36:a4:fb:bf:89:3b:68:ba:
         2d:0e:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net