Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          HpuRxae6kt3Lkw56XIAHbugeT87Ea3UobYBOv94ikWo=
Subject key identifier:   37:4E:6F:D3:05:98:3D:D8:0C:4C:A5:AC:F6:12:95:AA:25:47:2A:43
Certificate issuer:       /CN=E06071166208659C852E797F8525D625D8FA07FC
Certificate serial:       436EA3065FC005FA55B7D86B30584254784BE41B
Authority key identifier: E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 07 Apr 2025 21:14:54 +0000
ROA not before:           Mon 07 Apr 2025 21:09:54 +0000
ROA not after:            Mon 06 Apr 2026 21:14:54 +0000
asID:                     268746
IP address blocks:        45.171.229.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6e:a3:06:5f:c0:05:fa:55:b7:d8:6b:30:58:42:54:78:4b:e4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06071166208659C852E797F8525D625D8FA07FC
        Validity
            Not Before: Apr  7 21:09:54 2025 GMT
            Not After : Apr  6 21:14:54 2026 GMT
        Subject: CN=374E6FD305983DD80C4CA5ACF61295AA25472A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:ea:7e:8d:9f:48:ed:a7:9d:68:04:20:ad:
                    dc:6e:c5:80:55:9d:c7:1d:de:33:91:3f:9c:d9:18:
                    9c:0f:a5:7e:5b:cb:95:5c:f4:62:c7:e2:7e:9b:81:
                    4f:b9:11:03:58:4f:79:8f:c0:f6:33:15:af:26:c6:
                    e6:f8:8e:0d:12:ad:19:3e:8b:f7:5c:86:73:26:51:
                    db:1f:e1:03:36:d3:34:0a:29:b4:b4:0f:fa:8b:60:
                    4c:48:f7:5b:73:ab:c9:1b:e8:89:94:d3:33:0d:bd:
                    90:4a:73:1a:ec:bf:7b:4f:f6:63:7a:55:ad:f3:e8:
                    0c:30:32:b9:49:d2:bb:d8:98:a0:6c:ab:4b:2a:bf:
                    7e:97:60:a8:79:30:f9:d9:b2:91:04:44:f1:f8:cf:
                    ac:bc:9e:37:f1:11:af:0a:dc:46:ea:f4:d8:b3:f9:
                    19:1f:bc:5d:71:8f:d0:9f:da:79:a1:71:ff:4d:2b:
                    b4:c7:97:1a:29:22:fa:3c:82:05:81:bc:a4:3f:92:
                    94:1c:7b:d3:ad:6b:dd:34:50:f4:76:8f:86:b4:d1:
                    0b:7e:f0:1a:c5:f4:09:59:ca:07:45:0f:7d:bb:fd:
                    6b:e8:ec:42:1a:45:e3:0b:49:2e:21:16:ce:1f:6d:
                    01:26:a1:9e:6f:81:cb:f6:ff:b4:07:97:ef:7c:68:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4E:6F:D3:05:98:3D:D8:0C:4C:A5:AC:F6:12:95:AA:25:47:2A:43
            X509v3 Authority Key Identifier:
                keyid:E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d5:8b:a6:df:ee:bc:f2:43:e0:25:42:26:7c:f4:5b:e3:9b:
         bb:3a:52:a2:d2:fc:f6:fb:b3:d2:6c:17:1b:ae:f6:93:4b:f5:
         46:68:75:77:68:3f:d5:a7:e5:76:88:9d:b0:13:b3:e7:3e:9f:
         61:0c:20:a3:c1:95:73:c8:b7:95:25:a9:fa:06:b2:6d:98:3e:
         78:8d:b4:41:e8:91:f6:f8:a8:b0:20:13:e7:65:ac:e5:c8:69:
         7e:a7:ef:b4:ef:89:4a:31:05:78:1b:b7:80:27:d2:1c:97:24:
         9e:68:4a:3d:47:d7:96:f5:06:b4:ec:5b:95:57:dd:13:d5:0e:
         72:02:36:03:86:8c:36:14:07:1f:2b:a9:9a:17:f5:8b:d1:c8:
         25:99:42:54:6a:a8:cf:45:59:bf:0f:a7:c5:61:7b:4a:03:41:
         c6:1a:6f:b2:44:1a:26:bb:c3:b7:d6:2a:e7:bf:51:c7:79:ad:
         92:11:02:47:81:4f:a6:db:63:b4:45:76:d8:00:13:d8:04:99:
         44:c0:3f:4a:46:76:0e:73:7b:25:fc:12:9a:46:8c:32:2e:8f:
         c4:41:01:24:93:cd:e3:1d:dc:8b:78:87:a0:a6:21:e5:64:dd:
         b2:be:80:d6:8d:55:c5:6e:7f:7b:91:63:5c:69:9c:be:85:34:
         db:3f:33:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net