Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa
File:                     323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa (raw, json)
Hash identifier:          Vr30huE1qdyD4sqbNPtqZvPe7N28mSzi9c+8GeT9TPY=
Subject key identifier:   2D:81:42:CC:F5:1D:97:4A:86:FE:1D:2F:01:29:E7:4B:8D:12:A0:AA
Certificate issuer:       /CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Certificate serial:       36A330FB588EE97CCD6B4A0B089ABCFE7A3CBBEC
Authority key identifier: D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa
Signing time:             Mon 07 Apr 2025 20:20:23 +0000
ROA not before:           Mon 07 Apr 2025 20:15:23 +0000
ROA not after:            Mon 06 Apr 2026 20:20:23 +0000
asID:                     263360
IP address blocks:        2804:14f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a3:30:fb:58:8e:e9:7c:cd:6b:4a:0b:08:9a:bc:fe:7a:3c:bb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
        Validity
            Not Before: Apr  7 20:15:23 2025 GMT
            Not After : Apr  6 20:20:23 2026 GMT
        Subject: CN=2D8142CCF51D974A86FE1D2F0129E74B8D12A0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:4c:4b:47:23:a3:bf:18:1c:9d:8a:87:dd:
                    2b:43:20:fb:35:e6:46:88:13:1d:cf:f9:5a:1c:ba:
                    56:ae:a8:24:4e:27:b6:a1:53:81:89:40:35:b7:82:
                    9d:cc:0c:77:1a:26:e0:17:24:85:fd:99:13:34:34:
                    f0:3f:4f:ed:a9:01:0e:6e:cb:7b:30:cf:4b:62:77:
                    96:3b:eb:cf:ec:95:96:6d:9d:1f:46:5b:43:72:52:
                    74:71:56:8e:18:8f:00:f7:99:6d:18:e5:b5:65:d9:
                    ab:7e:fd:ec:92:5c:56:46:ae:80:e3:63:ff:2c:54:
                    42:9e:2f:fb:58:de:32:a1:11:33:ff:8a:59:60:7e:
                    3b:65:f2:85:38:e7:9a:12:18:6b:2c:dc:86:6b:09:
                    72:86:a2:7f:d4:fa:c1:77:c3:93:e0:25:b1:1e:43:
                    c1:02:3b:9e:7e:ec:28:5d:d3:f9:97:40:19:6c:9b:
                    c0:cc:0c:1b:1d:9b:e1:9a:79:9e:03:d6:3d:2e:5b:
                    4e:66:3f:b9:9a:37:19:10:96:50:f4:9b:e3:5f:2f:
                    40:21:53:2f:39:59:fe:dd:04:26:5a:36:2d:c3:6f:
                    bf:29:80:db:29:49:b7:1c:4e:36:7d:7c:86:e1:b4:
                    b2:9b:c7:86:f2:fc:fb:5f:1b:9d:c8:7f:f7:83:23:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:81:42:CC:F5:1D:97:4A:86:FE:1D:2F:01:29:E7:4B:8D:12:A0:AA
            X509v3 Authority Key Identifier:
                keyid:D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:83:ca:88:7a:7d:0e:15:7b:35:3e:66:06:d0:4f:df:c9:
         6d:07:a2:52:d5:e7:ed:98:03:b8:45:96:ed:8c:75:3f:e6:20:
         b6:49:07:2a:9f:00:ca:4f:e7:3f:6c:b6:e1:f3:6f:6c:ab:41:
         69:9d:c2:e0:d6:38:c4:47:44:bf:3e:96:78:85:72:29:eb:83:
         be:df:50:07:1d:89:22:34:ae:1b:29:0f:d6:54:32:84:93:85:
         7c:79:9f:ba:de:a9:ce:68:86:c8:9f:73:54:56:56:63:45:84:
         49:40:8e:c0:2c:52:96:d3:f0:b5:34:2c:ae:1e:6a:78:da:80:
         b9:b6:6d:60:b5:81:94:59:a0:af:bc:bb:65:56:36:e6:0b:c5:
         a9:c4:fc:cc:fc:dc:3a:8b:72:a2:87:8b:92:66:b5:7f:51:e1:
         7d:c1:d2:1f:89:a3:5a:f1:80:fd:e5:2b:49:fb:b0:f0:39:71:
         e9:cc:5c:51:b3:cf:63:1a:dd:d7:76:00:ab:13:09:9d:91:60:
         ab:f9:46:b8:d3:d3:08:98:12:fd:d3:d8:b0:42:25:d6:21:a8:
         01:1f:ea:96:1f:d4:c6:d9:d7:a5:82:be:2f:48:bb:4c:95:5f:
         bb:4d:ef:d0:d2:6b:f8:f8:66:22:db:e4:6e:87:d8:e1:cd:17:
         0d:9c:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net