Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
File:                     34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (raw, json)
Hash identifier:          QQPTdmewMjD+MZmF965VcM4PSZvTq62PKZVE1ZUvVyo=
Subject key identifier:   73:53:89:89:DF:88:1A:E6:0E:CD:C3:B7:F4:7D:8F:5F:E6:5A:90:D0
Certificate issuer:       /CN=E06071166208659C852E797F8525D625D8FA07FC
Certificate serial:       0D0FC73FAD5C925496248C35E5855C4FB237174B
Authority key identifier: E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
Signing time:             Mon 07 Apr 2025 21:14:55 +0000
ROA not before:           Mon 07 Apr 2025 21:09:55 +0000
ROA not after:            Mon 06 Apr 2026 21:14:55 +0000
asID:                     268746
IP address blocks:        45.171.228.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0f:c7:3f:ad:5c:92:54:96:24:8c:35:e5:85:5c:4f:b2:37:17:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06071166208659C852E797F8525D625D8FA07FC
        Validity
            Not Before: Apr  7 21:09:55 2025 GMT
            Not After : Apr  6 21:14:55 2026 GMT
        Subject: CN=73538989DF881AE60ECDC3B7F47D8F5FE65A90D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:3b:7e:ba:f2:9e:e9:80:72:69:af:09:25:
                    8c:b9:5f:40:e6:59:76:61:0d:48:cd:4f:d7:9d:6c:
                    3a:29:33:f5:e7:3b:be:a2:b3:9a:3e:f5:27:6b:2d:
                    68:2b:7f:87:8b:65:01:66:e8:69:23:fa:b7:dc:3f:
                    0f:71:42:1c:bb:37:4e:b9:34:3e:91:fb:52:e8:b0:
                    8d:e1:48:ee:15:ed:9c:fd:e9:28:ac:81:60:96:7a:
                    3e:5b:bf:d9:8c:33:4c:d7:6d:2a:c1:b9:7d:13:a1:
                    6f:37:2f:a6:4f:16:81:15:f4:3c:39:1a:60:58:cd:
                    7f:5b:ce:ca:64:67:60:67:d2:76:ef:08:53:3f:be:
                    6f:d8:48:f0:e4:40:c7:0a:3a:f1:e5:40:1a:2e:ff:
                    9d:89:69:a8:a6:f1:27:85:ee:5e:7d:52:e1:f8:6e:
                    71:96:9f:21:e7:0c:f4:70:4e:a8:e6:de:7b:26:fe:
                    aa:0e:f8:a5:ed:f4:4f:50:8b:ac:13:2a:4e:1c:2b:
                    e4:39:76:a7:f3:e9:d0:6c:73:bf:66:a4:5b:83:96:
                    6d:ea:52:99:b7:ad:c3:73:9d:b9:70:92:40:67:e2:
                    b4:80:af:31:a1:83:0a:e2:8e:67:c1:18:0f:c2:16:
                    a4:dc:20:99:1e:dd:1a:f1:15:fd:ac:64:50:42:df:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:89:89:DF:88:1A:E6:0E:CD:C3:B7:F4:7D:8F:5F:E6:5A:90:D0
            X509v3 Authority Key Identifier:
                keyid:E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:e1:a0:43:67:de:39:bf:a5:56:ca:cf:dd:fa:d0:5d:9c:eb:
         2d:7c:20:1b:f6:bf:e8:5f:75:68:62:3c:d8:fc:a5:22:bd:b4:
         cb:bd:f4:79:0e:4c:1b:81:6a:07:c7:62:12:b5:0a:c6:4d:93:
         c7:71:94:98:06:5c:3e:e3:49:7b:6a:cc:62:bf:40:6f:8d:46:
         65:d4:3d:e3:f2:9c:6e:4b:2b:ca:7e:d7:50:85:88:22:f8:a4:
         88:92:7f:a1:44:0a:ff:4f:c5:81:a8:80:70:fa:67:7c:e1:6b:
         dd:fa:36:07:29:e3:4a:31:fd:01:be:22:fb:b5:bc:1a:70:84:
         b2:47:ea:56:ba:33:20:59:ed:46:71:23:5d:a8:36:a9:09:81:
         84:06:5d:a9:a7:4f:9a:b6:7d:77:fb:b6:a1:8f:74:0c:fb:55:
         1f:ca:08:8d:5e:ca:fc:bc:5e:00:3c:b6:42:2b:10:40:e5:ca:
         0b:ed:ea:bd:cc:e9:7b:17:5d:17:df:f3:4a:ce:6c:eb:3f:8c:
         39:e0:28:0c:44:43:fe:f2:10:8c:47:09:73:84:3d:1b:01:da:
         f3:37:e2:1f:dd:22:39:95:b2:8d:33:57:18:df:3e:d1:1e:a6:
         cd:d5:b4:4d:f6:6a:28:2a:73:ef:2d:10:e0:1f:5b:49:80:0f:
         5f:16:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net