Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39382e302f32332d3233203d3e20323638343633.roa
File:                     34352e3136312e39382e302f32332d3233203d3e20323638343633.roa (raw, json)
Hash identifier:          DHd//BBeyggzAnZAp4xC1JMCT4FUxxcADP3lwnXTtEU=
Subject key identifier:   43:FD:92:82:86:7F:73:D0:45:CD:86:53:1A:56:57:A1:5B:7F:4A:FE
Certificate issuer:       /CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
Certificate serial:       4862D45F8707E5473ADA4914C177977160B91E46
Authority key identifier: 1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39382e302f32332d3233203d3e20323638343633.roa
Signing time:             Mon 07 Apr 2025 20:17:42 +0000
ROA not before:           Mon 07 Apr 2025 20:12:42 +0000
ROA not after:            Mon 06 Apr 2026 20:17:42 +0000
asID:                     268463
IP address blocks:        45.161.98.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:62:d4:5f:87:07:e5:47:3a:da:49:14:c1:77:97:71:60:b9:1e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
        Validity
            Not Before: Apr  7 20:12:42 2025 GMT
            Not After : Apr  6 20:17:42 2026 GMT
        Subject: CN=43FD9282867F73D045CD86531A5657A15B7F4AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:f5:e5:81:70:76:79:82:a2:e1:e4:97:51:
                    7d:23:91:9b:27:83:ad:8e:66:ec:c5:ac:a2:45:43:
                    43:d5:0c:85:30:28:e3:5a:13:81:d1:48:b7:8e:68:
                    0c:b1:14:c8:a9:25:24:e8:ee:60:fa:9b:17:84:d6:
                    37:47:5b:7e:23:f9:a4:fc:53:55:06:8d:fd:5b:e3:
                    9b:f7:b9:a8:37:3c:a3:68:51:67:55:d7:ed:06:f4:
                    5a:28:bf:89:4e:1f:f8:a3:7c:78:af:a5:2b:ff:b6:
                    ff:e9:34:c1:c7:6a:3b:e5:ca:57:c0:dc:ba:69:26:
                    4e:15:39:e3:8e:a7:19:3e:7d:b1:e7:f6:fd:d9:67:
                    28:55:65:64:d2:7c:4a:b4:c7:02:42:e6:33:42:38:
                    39:f0:e4:2b:8e:8e:75:71:0b:9f:2a:46:1b:ed:45:
                    28:1c:53:27:ef:df:09:67:2d:67:ca:5a:5c:fa:1b:
                    55:8b:65:89:2a:80:e0:76:bd:2a:4c:36:96:4a:79:
                    09:49:e1:9f:fe:fb:b4:bd:e9:34:08:f3:2a:b7:43:
                    ce:c3:4a:84:c5:22:27:b1:80:4f:49:6a:61:68:99:
                    16:96:78:47:88:40:71:8e:61:5f:70:db:c6:77:97:
                    0b:17:aa:0f:ac:ce:b5:36:e6:3d:9e:57:06:1a:33:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:92:82:86:7F:73:D0:45:CD:86:53:1A:56:57:A1:5B:7F:4A:FE
            X509v3 Authority Key Identifier:
                keyid:1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39382e302f32332d3233203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:a2:04:ff:83:a3:42:c1:a8:f9:43:2d:bf:06:df:5c:8e:
         4a:36:c8:53:6a:fe:6e:d0:96:07:ee:fe:55:11:c8:47:b8:b8:
         42:f5:6f:e4:64:a0:f2:07:08:a4:ab:18:df:ce:a9:f1:8c:05:
         37:30:be:ee:8c:74:a0:83:4a:5f:0c:05:2d:0e:79:a3:3b:87:
         40:ba:db:2c:a3:b0:fb:b0:93:79:2e:39:59:88:13:7e:6c:45:
         d4:56:73:b4:6b:cb:9d:b1:e7:0e:76:de:de:f6:c1:6a:8b:61:
         46:c2:e2:49:70:06:a0:61:46:30:1c:6b:68:34:2e:e2:0f:ac:
         69:5b:38:ee:8e:cf:89:71:f0:f5:bb:e0:39:31:9d:1d:be:d6:
         87:3f:7b:c0:eb:c7:63:83:6b:65:31:f1:fa:5e:91:bd:10:0f:
         1e:42:67:bd:63:75:d6:d7:67:f3:49:23:3b:05:14:9b:89:d5:
         c4:8b:ce:16:36:ed:4a:98:ba:d8:0d:2c:df:90:c4:4a:ed:9c:
         c7:9a:7e:90:76:8a:11:0f:ee:4f:fa:2a:8c:58:49:92:92:f7:
         0c:e1:20:e7:33:39:e9:55:0f:8d:74:1c:b8:6f:a8:b6:f7:ab:
         18:2b:b8:b2:a5:a5:19:2e:2b:4a:ac:cc:f1:2b:22:77:5e:a0:
         2f:a0:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net