Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32332d3233203d3e20323638343633.roa (raw, json)
Hash identifier:          WmeoUyxpxBbQdzhA6Kq8Zfr92SpKEkOjk++dJX7/rw8=
Subject key identifier:   88:D3:52:86:D3:3F:64:C8:D4:E8:04:FC:A2:79:19:D5:28:86:43:74
Certificate issuer:       /CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
Certificate serial:       78348F0264490922CAFCE1631140D14F07EB28E8
Authority key identifier: 1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
Signing time:             Mon 07 Apr 2025 20:17:42 +0000
ROA not before:           Mon 07 Apr 2025 20:12:42 +0000
ROA not after:            Mon 06 Apr 2026 20:17:42 +0000
asID:                     268463
IP address blocks:        45.161.96.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:8f:02:64:49:09:22:ca:fc:e1:63:11:40:d1:4f:07:eb:28:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
        Validity
            Not Before: Apr  7 20:12:42 2025 GMT
            Not After : Apr  6 20:17:42 2026 GMT
        Subject: CN=88D35286D33F64C8D4E804FCA27919D528864374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:79:30:7f:8d:29:a9:18:bd:ea:50:1c:e5:
                    0a:f4:6f:e5:62:1b:c4:e0:3a:92:0f:6b:96:e5:bb:
                    15:c1:5d:19:27:22:81:69:5b:b5:50:65:a8:6c:4f:
                    ca:2e:14:64:3b:6e:10:64:ca:8b:39:89:17:35:40:
                    1a:15:63:23:59:8c:37:95:e0:6b:62:3e:c7:d1:93:
                    c7:7e:fe:b8:6a:92:3d:45:50:92:53:8a:6d:04:f7:
                    a1:44:6e:ff:06:45:ad:e7:a7:ca:16:c8:8c:15:5c:
                    dc:7d:80:ef:f2:9d:f7:d9:de:37:6f:3a:2b:04:7a:
                    83:b7:69:67:eb:fb:fe:3c:6e:54:2a:5d:b1:11:e1:
                    fc:b5:e2:78:25:a3:75:28:86:21:46:f9:69:29:d5:
                    03:4e:cb:ff:a8:7e:fa:1d:83:bf:ae:51:e5:f0:57:
                    6e:ce:7c:71:93:92:7d:b3:df:8a:53:90:8a:20:57:
                    e0:59:37:96:6e:24:c3:90:de:9e:da:37:64:85:40:
                    12:8a:4c:79:bc:93:66:e4:88:0e:c7:c4:f0:d1:0b:
                    2d:88:78:bb:63:da:45:77:09:71:ce:eb:fa:fb:b0:
                    17:f4:c1:5f:0e:68:95:d3:ff:e8:12:8c:8c:1f:24:
                    a3:69:ed:d3:2f:38:8e:ea:0d:5a:c2:51:e4:f1:b4:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:52:86:D3:3F:64:C8:D4:E8:04:FC:A2:79:19:D5:28:86:43:74
            X509v3 Authority Key Identifier:
                keyid:1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:90:da:9d:36:8c:9b:11:c5:43:6e:42:9f:f2:c8:f0:d1:
         4b:76:be:93:85:65:51:6d:e8:9b:e7:f1:51:82:ef:1a:27:98:
         08:ff:61:a3:0f:66:62:54:e3:c9:c3:ba:a2:9e:4d:55:e0:07:
         94:a3:1b:a1:57:9a:80:b5:cc:0c:e0:eb:84:ca:9b:da:ee:37:
         dc:19:14:a0:f4:26:e1:9e:ea:f4:36:d7:04:c4:58:8b:fe:0d:
         fd:7b:f4:bd:db:98:32:37:eb:a9:9c:c5:15:18:2e:11:4c:0e:
         17:3a:36:76:ad:e3:df:8a:38:25:9b:14:37:eb:c9:5a:4c:53:
         fa:98:b2:c5:5b:35:5e:70:ec:8e:ec:4f:bb:bf:da:af:90:07:
         37:b7:dc:f0:8c:ff:4b:a8:77:0c:27:88:e5:32:e7:7a:62:14:
         87:6e:41:25:dd:59:a2:ea:8d:a5:b7:bd:fe:37:7b:73:dd:7a:
         a1:a3:5d:c1:36:c4:b2:66:22:34:38:43:f8:27:70:fe:d8:b1:
         ef:c6:80:e5:52:5e:b9:5a:1c:99:76:4d:f2:b2:91:c6:b6:ca:
         7c:bb:31:f1:b4:ab:3a:0e:48:47:93:4b:6c:30:38:ff:34:ac:
         38:b3:6f:bb:0c:a5:e6:ab:3e:9d:4e:d2:6f:38:46:a2:fa:5d:
         ff:81:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net