Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa
File:                     323830343a356534633a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier:          VGOyh3psBm2QLw4xPYsoKbn9jGl2wmUh38Y5jBr+rjo=
Subject key identifier:   41:DC:7B:98:37:34:49:29:E4:08:2E:83:05:5C:68:06:B3:E7:09:D4
Certificate issuer:       /CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
Certificate serial:       7202CF96D3FB78AC32D4C687A8D5D8A0F0140947
Authority key identifier: 1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa
Signing time:             Mon 07 Apr 2025 19:53:09 +0000
ROA not before:           Mon 07 Apr 2025 19:48:09 +0000
ROA not after:            Mon 06 Apr 2026 19:53:09 +0000
asID:                     269024
IP address blocks:        2804:5e4c::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:02:cf:96:d3:fb:78:ac:32:d4:c6:87:a8:d5:d8:a0:f0:14:09:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
        Validity
            Not Before: Apr  7 19:48:09 2025 GMT
            Not After : Apr  6 19:53:09 2026 GMT
        Subject: CN=41DC7B9837344929E4082E83055C6806B3E709D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:96:d2:69:5e:a8:81:b9:93:a0:f2:53:8c:
                    a6:1f:53:2b:48:fe:24:71:e0:1f:ea:82:44:5a:ac:
                    fe:47:45:13:da:74:d8:9c:14:13:fa:a5:13:eb:1a:
                    28:f1:ff:da:ac:aa:7a:68:9d:91:f0:c8:71:c6:25:
                    94:98:74:fe:c3:35:9d:5b:d0:50:c6:54:59:43:2a:
                    14:be:2c:55:90:f1:01:e1:70:f8:e6:12:41:6d:d8:
                    59:1f:60:f1:f7:4c:63:da:0b:e2:79:00:75:39:1c:
                    65:8d:1c:4c:08:6c:a1:2a:56:f0:e1:52:54:ba:b7:
                    93:37:7c:40:df:bd:31:b4:e3:7f:cc:1b:45:47:f4:
                    b0:a7:0c:af:37:2e:5c:01:21:4e:73:80:9f:08:8b:
                    0a:09:aa:03:48:54:79:6d:41:88:8b:66:6d:9e:30:
                    fd:33:10:6e:bc:7b:ac:65:31:c1:19:29:64:71:84:
                    de:6a:6e:33:d3:4d:99:ba:9c:ab:ed:8a:37:62:08:
                    43:f2:f0:18:de:3f:eb:04:f7:85:84:63:59:78:5d:
                    c7:28:b3:78:8f:25:0d:bf:75:00:86:de:9c:ef:09:
                    74:52:aa:a6:e6:34:20:2b:1e:d1:81:ba:f4:1f:c5:
                    ec:59:9a:17:a0:13:5d:af:4d:87:35:a5:0a:2e:1f:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DC:7B:98:37:34:49:29:E4:08:2E:83:05:5C:68:06:B3:E7:09:D4
            X509v3 Authority Key Identifier:
                keyid:1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:48:54:99:f7:5b:fe:10:d8:32:ca:86:25:92:c8:3f:bc:
         9a:06:b7:ca:b9:e5:be:32:aa:ca:48:2f:7b:28:31:95:5a:cb:
         d2:12:04:29:1e:63:55:89:20:4a:b8:92:28:3d:9b:2d:f2:79:
         28:ad:31:50:6c:5a:46:b9:1d:79:3d:b8:31:dc:e2:77:4b:bd:
         cc:85:e2:cf:9f:1c:f0:30:7a:aa:be:26:14:a0:70:3b:62:6f:
         ea:7d:ab:ff:71:4a:6b:a8:fb:a9:83:d9:87:21:92:34:0f:48:
         17:7d:2f:c7:7f:d0:ee:48:4b:6b:3f:36:86:9f:1d:69:5b:11:
         bc:05:58:e2:b3:9d:97:ef:ed:55:19:1b:b8:19:07:72:69:ef:
         1c:04:ef:61:d2:3f:e5:9e:53:f8:00:17:39:a7:97:2c:73:a9:
         b4:b4:67:ba:e3:04:81:ea:c2:6e:48:a4:aa:7b:c0:f7:69:12:
         85:b1:b7:72:04:9c:d5:37:b1:45:a5:df:91:49:58:f6:4b:8e:
         ed:df:61:f6:96:73:be:17:ff:10:70:e6:d4:9b:d8:1c:95:c1:
         12:6a:37:06:fc:67:19:75:12:67:17:b1:b4:17:9b:83:17:51:
         94:fc:c9:a0:f8:e5:b3:4a:a9:e2:c3:38:16:ad:9f:50:74:ab:
         ca:82:fc:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcgLPltP7eKwy1MaHqNXYoPAUCUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0RERFOTIyMTJGMjNFOUI5N0Q2QkM2NEVDNjhFQ0Ez
QTRBQ0M1NjAeFw0yNTA0MDcxOTQ4MDlaFw0yNjA0MDYxOTUzMDlaMDMxMTAvBgNV
BAMTKDQxREM3Qjk4MzczNDQ5MjlFNDA4MkU4MzA1NUM2ODA2QjNFNzA5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0pbSaV6ogbmToPJTjKYfUytI
/iRx4B/qgkRarP5HRRPadNicFBP6pRPrGijx/9qsqnponZHwyHHGJZSYdP7DNZ1b
0FDGVFlDKhS+LFWQ8QHhcPjmEkFt2FkfYPH3TGPaC+J5AHU5HGWNHEwIbKEqVvDh
UlS6t5M3fEDfvTG043/MG0VH9LCnDK83LlwBIU5zgJ8IiwoJqgNIVHltQYiLZm2e
MP0zEG68e6xlMcEZKWRxhN5qbjPTTZm6nKvtijdiCEPy8BjeP+sE94WEY1l4Xcco
s3iPJQ2/dQCG3pzvCXRSqqbmNCArHtGBuvQfxexZmhegE12vTYc1pQouH4fHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQdx7mDc0SSnkCC6DBVxoBrPnCdQwHwYDVR0j
BBgwFoAUG03ekiEvI+m5fWvGTsaOyjpKzFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENjSHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lE
ZFovMC8xQjREREU5MjIxMkYyM0U5Qjk3RDZCQzY0RUM2OEVDQTNBNEFDQzU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNERERTkyMjEyRjIzRTlC
OTdENkJDNjRFQzY4RUNBM0E0QUNDNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDY0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAv
MzIzODMwMzQzYTM1NjUzNDYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzAzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAReTAAwDQYJKoZIhvcNAQELBQADggEBAI6ZSFSZ
91v+ENgyyoYlksg/vJoGt8q55b4yqspIL3soMZVay9ISBCkeY1WJIEq4kig9my3y
eSitMVBsWka5HXk9uDHc4ndLvcyF4s+fHPAweqq+JhSgcDtib+p9q/9xSmuo+6mD
2YchkjQPSBd9L8d/0O5IS2s/NoafHWlbEbwFWOKznZfv7VUZG7gZB3Jp7xwE72HS
P+WeU/gAFzmnlyxzqbS0Z7rjBIHqwm5IpKp7wPdpEoWxt3IEnNU3sUWl35FJWPZL
ju3fYfaWc74X/xBw5tSb2ByVwRJqNwb8Zxl1EmcXsbQXm4MXUZT8yaD45bNKqeLD
OBatn1B0q8qC/Os=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net