Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          mCXWxpP5BksRGU+YT91y7Jbz6OsI994uDL4/7t2c30k=
Subject key identifier:   8D:65:3D:81:4F:0F:94:53:A5:6B:47:0F:EC:B2:CC:E1:C4:F8:4E:25
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       3F551733841469F433CB1BBC76BBE51198E96454
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:14:47 +0000
ROA not before:           Fri 14 Feb 2025 19:09:47 +0000
ROA not after:            Fri 13 Feb 2026 19:14:47 +0000
asID:                     52580
IP address blocks:        179.191.168.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:55:17:33:84:14:69:f4:33:cb:1b:bc:76:bb:e5:11:98:e9:64:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:09:47 2025 GMT
            Not After : Feb 13 19:14:47 2026 GMT
        Subject: CN=8D653D814F0F9453A56B470FECB2CCE1C4F84E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:61:17:c2:7a:d1:86:b8:ce:a4:d3:86:ec:
                    ee:cf:4c:db:03:cd:d6:4f:1c:49:a9:70:57:d1:1f:
                    b7:8b:56:4b:92:4f:35:4a:6c:97:d1:0c:40:85:d7:
                    4d:ae:b5:60:5e:47:4f:c2:a4:dd:4f:7d:3e:40:f7:
                    43:22:40:55:9b:8a:54:9e:67:c2:94:49:af:69:e5:
                    ac:f7:33:ec:af:12:4d:22:64:1a:2e:a8:ea:1d:56:
                    18:41:ed:bd:a2:48:ee:66:e8:8e:70:ea:77:36:a7:
                    3e:9a:1d:b0:f4:e7:9d:89:cc:84:00:1d:ac:9d:de:
                    1e:ae:09:cf:17:2a:5a:b7:14:31:56:97:73:b3:7e:
                    32:a5:9c:17:29:72:6a:72:0b:05:03:40:fa:a3:cc:
                    8c:33:6a:b0:4b:a9:0e:39:a0:fe:fc:29:35:cf:3f:
                    ea:96:67:97:dc:3c:99:de:0e:94:28:15:76:32:db:
                    cb:fd:57:44:e7:f4:b4:44:50:f9:38:eb:a2:d7:f3:
                    68:cf:a8:dd:2f:e4:d1:49:40:ec:7b:d0:30:08:e8:
                    62:f4:03:0c:b1:e4:f9:ce:26:ec:8c:e1:0f:53:86:
                    cf:10:4a:7c:7a:01:88:9a:d5:4d:61:e7:67:84:1f:
                    0b:bf:ae:13:2b:19:6b:0f:89:57:49:ad:f4:06:64:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:65:3D:81:4F:0F:94:53:A5:6B:47:0F:EC:B2:CC:E1:C4:F8:4E:25
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:04:4d:06:00:67:3f:74:0a:f2:37:36:73:53:8f:07:8e:
         1f:1c:5f:6b:e5:07:59:d3:ff:e9:09:51:6d:3f:0c:9f:c0:f2:
         d7:cd:28:37:28:26:d3:e7:e0:ce:79:bb:a8:74:64:af:b5:8c:
         70:2b:1e:10:22:19:38:d4:b9:ed:27:a1:60:4c:67:c6:0b:74:
         eb:f4:77:a2:c4:5b:96:3b:eb:60:2a:e7:db:ee:98:3c:22:ab:
         88:3d:cd:76:ff:b0:63:3c:96:f3:05:81:61:83:dc:8f:2f:12:
         9e:a9:62:63:7a:07:4e:be:dd:72:4a:09:49:24:24:94:aa:cf:
         41:bf:f9:b7:88:77:51:a7:06:54:87:d0:c0:e5:ba:c4:64:fb:
         d3:3f:19:57:74:8c:d2:eb:c0:bb:a3:3d:1c:23:5a:c6:52:23:
         bd:0c:6a:f1:aa:2b:d6:81:a5:a1:73:97:c7:65:1b:b9:ab:a6:
         a0:6d:e5:f0:5a:30:18:11:1e:65:b8:66:35:39:b3:ff:4b:a0:
         e3:3f:b8:12:5b:02:0e:f9:a5:2a:d3:7f:fc:a6:69:9f:24:be:
         50:53:25:07:c4:4a:38:c1:a7:ee:0d:e3:1c:0e:c8:31:86:b9:
         2c:3d:63:e7:d1:82:b0:d0:8c:39:1c:87:5b:59:fe:eb:6a:28:
         5b:c7:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:19:35 2025 by rpki-client on console.sobornost.net