Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31332e302f32342d3234203d3e20323638303335.roa
File:                     34352e3136382e31332e302f32342d3234203d3e20323638303335.roa (raw, json)
Hash identifier:          VNYUK4gx6HUropT2UfupZptcHGzSx6eqIaXgAjJf6iU=
Subject key identifier:   02:6C:A1:3B:C6:EF:6D:87:00:04:2A:88:5E:FA:8F:13:36:E1:BE:0A
Certificate issuer:       /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial:       4100780F952C77CC2A8875D1CB83DE7D7B5FFA69
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31332e302f32342d3234203d3e20323638303335.roa
Signing time:             Thu 14 Dec 2023 13:31:31 +0000
ROA not before:           Thu 14 Dec 2023 13:26:31 +0000
ROA not after:            Thu 12 Dec 2024 13:31:31 +0000
asID:                     268035
IP address blocks:        45.168.13.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:00:78:0f:95:2c:77:cc:2a:88:75:d1:cb:83:de:7d:7b:5f:fa:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Validity
            Not Before: Dec 14 13:26:31 2023 GMT
            Not After : Dec 12 13:31:31 2024 GMT
        Subject: CN=026CA13BC6EF6D8700042A885EFA8F1336E1BE0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:3f:72:c7:9e:6a:d6:1c:e6:d0:ce:b2:43:
                    cd:d7:80:34:be:71:57:0c:8a:e2:0e:d9:53:b6:81:
                    fd:9c:4e:9a:88:fb:32:03:72:ab:e4:aa:d5:28:ff:
                    eb:ad:cf:3b:59:7f:57:b6:85:08:c3:24:3e:68:10:
                    0e:4d:06:55:28:5b:2f:63:a7:2f:94:76:de:77:38:
                    fb:9d:2e:9e:0c:a5:22:c7:bd:8c:64:b1:9e:86:cc:
                    70:9b:d7:50:19:7c:f3:dc:15:29:bc:0f:d9:36:f2:
                    62:36:58:e1:6d:39:b0:03:82:5f:ab:e5:6e:ba:c0:
                    71:0b:d1:c8:bc:f2:23:be:76:28:3d:c3:2b:66:75:
                    de:c3:d9:7e:84:75:5b:f0:cb:b1:f0:3b:4a:73:e1:
                    38:1e:54:1b:c0:ee:e1:b2:6e:6b:3b:2f:3e:d4:dc:
                    dd:9f:46:a4:6b:ae:9f:08:a8:3e:f9:59:41:84:41:
                    b6:c0:c2:2e:1f:91:fc:00:0f:7c:60:3f:73:48:2f:
                    8f:a8:5c:64:63:ab:85:b2:0f:c7:ad:3b:05:12:3a:
                    8f:da:3b:51:76:7a:4e:91:40:b0:69:57:b9:d3:bc:
                    dc:2e:ed:b2:ef:f8:18:96:f8:43:5f:fd:46:57:a2:
                    f2:9e:bc:ab:2a:68:5c:d5:a4:73:95:ea:6f:a0:b7:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6C:A1:3B:C6:EF:6D:87:00:04:2A:88:5E:FA:8F:13:36:E1:BE:0A
            X509v3 Authority Key Identifier:
                keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31332e302f32342d3234203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e0:6f:b2:46:5d:81:c6:31:29:0d:c9:c7:3c:2b:35:36:35:
         72:24:69:c6:33:ef:60:97:57:c1:1c:28:67:45:32:d6:af:d5:
         b9:04:df:e8:cb:3b:ac:d9:10:e3:06:1c:6d:ec:62:1b:f3:20:
         c2:9b:7a:21:63:63:b3:1e:c1:ae:00:ec:45:c5:de:06:14:1b:
         d5:ed:dd:da:d4:89:4f:6a:ae:71:7e:d3:9a:a8:8c:80:8a:73:
         ff:0a:78:66:3a:a4:fa:2a:04:fb:f1:48:e7:d8:89:44:55:4f:
         64:85:e3:24:0c:23:ee:28:71:1a:bb:f3:c3:56:2f:eb:cc:1a:
         f1:62:2f:5f:aa:c4:c5:bc:f5:70:72:46:65:d2:59:fa:55:66:
         41:1f:ac:bd:d2:86:dc:4b:1d:6e:d6:91:86:17:a1:fd:a4:8e:
         87:ac:b9:1e:13:60:e6:14:66:68:1b:f1:28:de:ca:69:d8:f3:
         10:d5:af:10:00:c9:8f:37:12:eb:0c:ab:93:48:51:2b:fc:8d:
         f6:04:8f:84:01:65:f5:4f:66:9e:42:9f:2b:31:49:d8:6e:40:
         a1:a3:69:cd:10:01:6a:6f:54:b6:06:ea:9f:e2:7d:3a:e1:81:
         1c:13:a4:7b:4a:14:e9:38:3f:05:d2:20:d2:1f:e3:4a:ff:70:
         2a:a8:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 06:50:16 2024 by rpki-client on console.sobornost.net