Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa
File:                     323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa (raw, json)
Hash identifier:          0KiNdCPgaHmmLBadpqRBBB1JXZRCsUoplerrZ7/EdG0=
Subject key identifier:   CF:3D:05:BF:49:CA:DE:46:D2:D9:49:8C:9B:D8:1E:CB:B3:EC:48:35
Certificate issuer:       /CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Certificate serial:       35676C84C4FCC14D8D9DA5C0F3DFB7D5E5750C1E
Authority key identifier: 83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa
Signing time:             Tue 22 Apr 2025 14:28:08 +0000
ROA not before:           Tue 22 Apr 2025 14:23:08 +0000
ROA not after:            Tue 21 Apr 2026 14:28:08 +0000
asID:                     268308
IP address blocks:        2804:4f28:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:67:6c:84:c4:fc:c1:4d:8d:9d:a5:c0:f3:df:b7:d5:e5:75:0c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832B06F1B7DDB99E413147B2D786DA7B38425995
        Validity
            Not Before: Apr 22 14:23:08 2025 GMT
            Not After : Apr 21 14:28:08 2026 GMT
        Subject: CN=CF3D05BF49CADE46D2D9498C9BD81ECBB3EC4835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:9f:21:37:fd:7e:f4:0e:0f:01:e2:ec:b0:
                    25:cb:66:2a:17:3b:88:be:72:8f:a3:e2:a8:cc:11:
                    fc:83:fb:63:71:92:f2:3f:97:d2:6d:80:cb:53:d0:
                    0c:64:4e:74:5c:45:44:aa:ea:d3:0f:38:3f:ed:7e:
                    1e:7a:d6:56:d1:fa:6c:63:db:71:9e:7b:08:ea:e6:
                    6b:06:14:3b:cf:cf:b6:32:f2:6c:c3:61:db:83:95:
                    64:cf:f6:33:de:07:2e:84:15:b7:a6:83:dd:3f:2b:
                    1f:98:64:99:ec:e0:0c:df:eb:8a:66:f4:19:60:52:
                    a0:0f:53:24:d2:78:e6:6d:2b:a7:d9:bf:dd:32:b2:
                    c6:c3:a3:c7:70:df:11:42:ef:f8:e1:d2:8b:01:16:
                    48:72:28:47:0f:ee:58:b8:05:5c:10:34:7a:21:b3:
                    65:84:e4:4e:c9:87:1f:f0:01:14:05:d6:80:2d:a8:
                    e7:21:44:9c:80:3b:50:33:91:38:80:55:b5:d0:55:
                    49:09:30:62:3b:9b:c2:eb:83:b1:89:0f:61:11:82:
                    c9:87:18:a9:53:fc:21:2c:a7:10:4f:1e:90:63:47:
                    96:a6:2c:a3:05:82:4d:3e:d8:61:48:ca:26:6b:98:
                    01:cf:02:0e:9e:e2:18:04:5f:3e:df:72:31:70:a3:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3D:05:BF:49:CA:DE:46:D2:D9:49:8C:9B:D8:1E:CB:B3:EC:48:35
            X509v3 Authority Key Identifier:
                keyid:83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:24:4c:9f:79:8b:ac:53:4e:66:81:11:d1:97:05:2f:00:42:
         ed:a2:a6:ae:06:76:f3:86:d6:4d:57:78:85:fc:a8:63:1a:6c:
         51:b6:24:1c:31:11:9f:97:29:68:0f:2a:f4:bc:4e:0c:cc:3d:
         3d:d6:b3:e0:8e:95:ab:42:c9:31:7a:d9:d9:83:75:e7:70:f5:
         42:11:f5:b4:62:04:74:2f:40:03:13:66:4a:4a:30:b9:4a:97:
         53:97:e6:db:27:14:ac:6a:d0:56:97:1e:13:f9:6b:96:13:55:
         2d:61:78:61:7e:b0:21:b6:67:1f:3f:09:75:e5:5d:02:a3:94:
         d4:be:3d:a3:15:37:ed:af:30:6d:91:bc:0b:15:a8:e6:9b:68:
         fc:50:96:ac:7c:0d:62:87:be:37:ec:56:a9:ab:90:9f:f1:19:
         05:44:1d:94:bd:a8:88:89:77:80:99:24:c5:2c:9c:ec:59:99:
         a9:7e:1d:a8:a2:06:0f:99:10:6f:7a:fe:9d:a4:dc:16:e6:c2:
         42:a3:db:41:ce:cb:92:65:cc:48:a5:d1:6a:8f:55:f1:8a:26:
         b0:0e:c8:7b:5f:db:5c:a6:70:fe:4f:b9:b8:91:90:aa:b5:fd:
         62:13:67:5f:e9:1b:35:fb:d4:8a:3d:52:46:44:89:f2:cc:50:
         49:56:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net