Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          +XTQxAlADFt+RA9Nbwxriw3m+VqHJtrs0JYYCSrgbBA=
Subject key identifier:   7A:FD:38:6D:7C:38:79:3D:05:B9:9A:15:E5:52:57:7F:6C:5A:4F:24
Certificate issuer:       /CN=E06071166208659C852E797F8525D625D8FA07FC
Certificate serial:       0F3E0033FFDEB6102685351533CF7ECD42BA682A
Authority key identifier: E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 07 Apr 2025 21:14:55 +0000
ROA not before:           Mon 07 Apr 2025 21:09:55 +0000
ROA not after:            Mon 06 Apr 2026 21:14:55 +0000
asID:                     268746
IP address blocks:        45.171.230.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3e:00:33:ff:de:b6:10:26:85:35:15:33:cf:7e:cd:42:ba:68:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06071166208659C852E797F8525D625D8FA07FC
        Validity
            Not Before: Apr  7 21:09:55 2025 GMT
            Not After : Apr  6 21:14:55 2026 GMT
        Subject: CN=7AFD386D7C38793D05B99A15E552577F6C5A4F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:16:a4:d5:4d:b3:b0:b0:e4:aa:8b:d8:11:
                    13:5d:09:ff:87:95:ff:c8:28:35:7f:2b:65:4d:9c:
                    ed:93:07:5b:d6:41:86:1b:83:da:56:68:4b:72:0a:
                    85:db:cc:1e:1c:96:1e:bb:bc:03:8f:19:99:dd:79:
                    6a:e9:fe:4e:ca:ca:b6:1e:43:89:80:59:47:b4:96:
                    22:df:09:8a:0b:32:99:47:e0:18:67:5d:55:19:f2:
                    40:61:74:7c:33:92:3b:41:8e:cb:39:07:2b:d3:e6:
                    f9:ae:4b:0d:b7:da:9b:49:c1:d8:9f:71:a0:88:59:
                    2f:c9:1d:04:90:46:ac:22:66:9d:b5:6d:a9:06:b6:
                    bc:e8:3d:02:7d:30:39:f1:b1:e8:9e:5f:42:14:80:
                    65:38:e1:56:cf:97:c5:a4:c6:cf:a8:25:66:1a:45:
                    41:6b:bd:0c:52:12:18:44:b1:e1:3c:8b:1c:be:90:
                    aa:53:6c:d4:af:c9:83:9b:22:27:e1:46:73:d9:49:
                    ac:a8:85:a7:2e:e0:0b:bc:29:34:01:8c:14:bc:5f:
                    d5:56:ee:1e:49:b1:af:f6:da:7e:a4:0b:91:7b:02:
                    62:3d:d6:1d:97:39:69:53:8b:a8:40:03:26:d2:ec:
                    f5:37:83:c3:b6:7f:8d:b8:2f:8d:7c:8e:d3:60:29:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:38:6D:7C:38:79:3D:05:B9:9A:15:E5:52:57:7F:6C:5A:4F:24
            X509v3 Authority Key Identifier:
                keyid:E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:18:b4:a6:e6:70:12:ce:ed:e6:f7:26:29:cf:76:8a:d0:3e:
         b0:35:f8:5d:75:f6:80:92:18:1f:67:c2:f2:a0:15:96:f3:6e:
         89:22:fd:d3:28:5e:8d:09:1b:5b:fa:fc:c5:8e:68:8f:1d:32:
         74:14:e0:dd:32:f4:4c:de:62:19:5a:2f:00:e9:00:82:ca:8a:
         7e:bb:4d:c8:e8:5e:3f:e3:1e:b7:0d:3c:3a:48:d8:42:83:43:
         a3:a0:c6:99:6e:79:cb:9a:fe:0a:30:30:bf:7f:35:cd:b2:00:
         cf:43:90:49:b2:17:d9:9e:31:f5:53:0f:e4:f0:50:a2:dc:85:
         4e:70:b2:2c:28:23:e3:18:84:12:e6:a6:46:06:af:8b:a7:37:
         14:94:e4:1c:30:92:73:a2:72:fa:fe:c5:6d:20:21:09:aa:c1:
         30:bb:cc:93:2a:27:79:02:6f:3e:f0:44:66:5b:50:33:9e:01:
         3f:d8:ae:e4:e0:d5:47:be:f1:9b:dd:c0:fa:93:42:36:13:01:
         16:e0:37:68:73:50:99:18:1d:d3:05:89:ad:70:5a:eb:8f:94:
         d5:ad:12:a0:07:de:7a:07:9f:9c:de:69:d3:96:0b:de:80:d1:
         28:2d:52:4d:b4:17:4f:16:cc:fd:6f:43:fc:de:f3:9d:32:7b:
         12:7d:7c:a8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDz4AM//ethAmhTUVM89+zUK6aCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2MDcxMTY2MjA4NjU5Qzg1MkU3OTdGODUyNUQ2MjVE
OEZBMDdGQzAeFw0yNTA0MDcyMTA5NTVaFw0yNjA0MDYyMTE0NTVaMDMxMTAvBgNV
BAMTKDdBRkQzODZEN0MzODc5M0QwNUI5OUExNUU1NTI1NzdGNkM1QTRGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWRak1U2zsLDkqovYERNdCf+H
lf/IKDV/K2VNnO2TB1vWQYYbg9pWaEtyCoXbzB4clh67vAOPGZndeWrp/k7KyrYe
Q4mAWUe0liLfCYoLMplH4BhnXVUZ8kBhdHwzkjtBjss5ByvT5vmuSw232ptJwdif
caCIWS/JHQSQRqwiZp21bakGtrzoPQJ9MDnxseieX0IUgGU44VbPl8Wkxs+oJWYa
RUFrvQxSEhhEseE8ixy+kKpTbNSvyYObIifhRnPZSayohacu4Au8KTQBjBS8X9VW
7h5Jsa/22n6kC5F7AmI91h2XOWlTi6hAAybS7PU3g8O2f424L418jtNgKWs1AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUev04bXw4eT0FuZoV5VJXf2xaTyQwHwYDVR0j
BBgwFoAU4GBxFmIIZZyFLnl/hSXWJdj6B/wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvRTA2MDcxMTY2MjA4NjU5Qzg1MkU3OTdGODUyNUQ2MjVEOEZBMDdGQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMDYwNzExNjYyMDg2NTlDODUy
RTc5N0Y4NTI1RDYyNUQ4RkEwN0ZDLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzQz
NTJlMzEzNzMxMmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
NzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtq+YwDQYJKoZIhvcNAQELBQADggEBADIYtKbmcBLO
7eb3JinPdorQPrA1+F119oCSGB9nwvKgFZbzboki/dMoXo0JG1v6/MWOaI8dMnQU
4N0y9EzeYhlaLwDpAILKin67TcjoXj/jHrcNPDpI2EKDQ6Ogxpluecua/gowML9/
Nc2yAM9DkEmyF9meMfVTD+TwUKLchU5wsiwoI+MYhBLmpkYGr4unNxSU5BwwknOi
cvr+xW0gIQmqwTC7zJMqJ3kCbz7wRGZbUDOeAT/YruTg1Ue+8ZvdwPqTQjYTARbg
N2hzUJkYHdMFia1wWuuPlNWtEqAH3noHn5zeadOWC96A0SgtUk20F08WzP1vQ/ze
850yexJ9fKg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net