Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/323830343a3238383a3a2f33322d313238203d3e20323632383230.roa
File:                     323830343a3238383a3a2f33322d313238203d3e20323632383230.roa (raw, json)
Hash identifier:          vCmNZeDg2cZ99WDC64uPra6O892M3AflYqFqyuH50Wg=
Subject key identifier:   6D:FD:C1:51:D0:B6:DC:96:AE:30:1A:F9:A6:10:5C:7B:C7:3F:9B:F1
Certificate issuer:       /CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
Certificate serial:       48025B2E1A0147C8F377D45A75138631B0F1D704
Authority key identifier: F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/323830343a3238383a3a2f33322d313238203d3e20323632383230.roa
Signing time:             Wed 23 Apr 2025 14:53:10 +0000
ROA not before:           Wed 23 Apr 2025 14:48:10 +0000
ROA not after:            Wed 22 Apr 2026 14:53:10 +0000
asID:                     262820
IP address blocks:        2804:288::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:02:5b:2e:1a:01:47:c8:f3:77:d4:5a:75:13:86:31:b0:f1:d7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
        Validity
            Not Before: Apr 23 14:48:10 2025 GMT
            Not After : Apr 22 14:53:10 2026 GMT
        Subject: CN=6DFDC151D0B6DC96AE301AF9A6105C7BC73F9BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:72:78:8f:12:a5:4b:af:58:94:6c:e7:78:6d:
                    3f:b1:5e:03:f3:c8:44:3c:c4:73:2b:73:0e:30:67:
                    1b:8e:ee:aa:af:28:b3:2b:00:20:44:89:1c:34:5d:
                    b8:16:a0:0d:d6:1b:49:19:1d:56:cf:ed:d6:fb:fe:
                    f7:3e:c4:0f:c8:63:9c:09:21:e3:b6:84:f8:df:bc:
                    d6:1d:0a:a8:6b:4e:c8:3f:6d:09:c9:98:70:10:43:
                    ed:28:9c:e1:5a:a8:3f:11:12:8e:30:bc:49:a1:53:
                    b4:8d:e6:b2:d1:36:6a:62:3f:c6:2a:8b:75:0d:ad:
                    87:2f:e3:ad:15:7b:9b:62:f0:81:07:07:05:e3:57:
                    ff:38:f1:20:cb:9b:c2:4e:2c:74:a6:99:01:38:d2:
                    5c:a7:44:a0:60:28:9c:42:e2:d1:b3:ad:12:84:13:
                    b9:e5:c2:4f:2e:ca:18:cb:0a:3d:ca:f0:13:b4:22:
                    cf:8c:bd:37:dd:de:f2:ff:f1:ce:7d:90:31:79:ab:
                    60:ee:30:1c:0d:a0:66:2b:9e:bd:52:3e:bd:f4:b7:
                    e1:b2:a5:25:a6:08:84:e6:95:ae:5c:1d:04:d7:43:
                    be:90:a8:8c:86:67:56:74:06:e6:6d:d1:9d:3b:65:
                    46:c9:46:7a:d6:99:c0:33:09:83:c9:5b:65:dc:69:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FD:C1:51:D0:B6:DC:96:AE:30:1A:F9:A6:10:5C:7B:C7:3F:9B:F1
            X509v3 Authority Key Identifier:
                keyid:F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/323830343a3238383a3a2f33322d313238203d3e20323632383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:b9:a7:64:4e:65:fc:da:40:49:f1:02:3f:71:dc:44:86:f1:
         97:cb:79:61:01:02:bd:08:09:91:63:e5:ce:e3:60:83:7d:9e:
         02:18:a1:3c:73:54:64:99:08:0f:9b:d1:49:6f:cf:38:06:73:
         4d:44:03:11:44:47:d6:17:27:1e:a7:52:a1:be:82:e0:18:3b:
         a1:1b:2e:16:aa:6e:9f:90:99:c6:32:94:77:68:50:98:5a:0a:
         e4:14:ca:5d:83:9f:22:dd:cc:6b:70:15:78:63:03:62:24:22:
         df:a4:a1:64:36:b9:e3:14:86:e9:bf:0f:40:62:66:65:63:25:
         77:53:7a:c4:74:8a:10:43:41:5f:46:c8:49:7c:4d:79:23:e7:
         80:45:b4:90:f2:75:51:6d:83:e0:9b:ed:4e:4f:69:9f:3c:ef:
         65:54:b0:c0:5b:ce:da:62:f1:bd:9d:7e:02:e7:f9:5a:48:eb:
         be:98:35:e8:40:d2:1b:70:af:59:2a:39:a1:d0:47:97:1d:64:
         6b:fc:48:a1:09:ff:bc:44:23:e7:41:03:00:ab:43:2e:d0:60:
         d9:69:38:5e:9f:42:7d:b4:99:3c:83:92:7d:d7:ae:ab:f6:92:
         4b:19:50:29:1d:7e:81:8f:57:50:d3:19:8b:1f:0a:4a:c6:16:
         26:39:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net