Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a383030303a3a2f33332d3333203d3e20323635313138.roa
File:                     323830343a326163383a383030303a3a2f33332d3333203d3e20323635313138.roa (raw, json)
Hash identifier:          geNFeUd7G+9cOAEr7ueQbeAYBiX+nO+ypS5dJyqIVZo=
Subject key identifier:   16:4C:BF:94:4F:45:1E:29:91:D9:29:50:90:C0:4A:AB:72:CC:ED:01
Certificate issuer:       /CN=165675A1928929FF394AAD05FDC9293D274BED5D
Certificate serial:       3F99CFFDCDE8E59E047B6F6BAA51C56D936CA5BD
Authority key identifier: 16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a383030303a3a2f33332d3333203d3e20323635313138.roa
Signing time:             Wed 09 Apr 2025 14:10:25 +0000
ROA not before:           Wed 09 Apr 2025 14:05:25 +0000
ROA not after:            Wed 08 Apr 2026 14:10:25 +0000
asID:                     265118
IP address blocks:        2804:2ac8:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:cf:fd:cd:e8:e5:9e:04:7b:6f:6b:aa:51:c5:6d:93:6c:a5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165675A1928929FF394AAD05FDC9293D274BED5D
        Validity
            Not Before: Apr  9 14:05:25 2025 GMT
            Not After : Apr  8 14:10:25 2026 GMT
        Subject: CN=164CBF944F451E2991D9295090C04AAB72CCED01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:c9:81:2f:02:bf:7f:9e:98:1f:f6:d7:ab:
                    7c:f2:81:a5:fc:b1:9e:a4:dc:ac:54:04:a7:27:ba:
                    e1:ab:b5:62:26:f4:c1:24:ce:45:b7:a0:3a:dc:6b:
                    58:55:df:ff:89:a9:5a:ce:0a:00:a1:39:61:1d:2a:
                    56:6e:db:c5:09:31:67:f5:ea:46:56:96:2d:41:4d:
                    4f:eb:ca:3d:97:17:19:b0:cc:65:06:a9:b4:07:3d:
                    00:5b:d9:56:a5:db:a5:8b:0a:c7:0c:7b:d0:bd:56:
                    61:1a:70:38:e1:b1:7c:5b:14:63:c4:43:0d:8b:c2:
                    8f:f2:cd:25:94:27:84:a0:92:d5:b1:1d:86:9e:ac:
                    d7:40:50:3a:25:4c:ca:2e:24:01:7e:3b:f4:84:72:
                    96:87:77:ab:89:13:48:5f:21:7d:81:b8:2d:d3:52:
                    e3:30:0a:c8:e4:5c:61:79:8c:fc:b2:d0:c0:9b:21:
                    7c:06:3e:8b:81:ca:28:8d:19:8d:07:6c:53:96:37:
                    41:5c:78:09:49:6d:ac:c1:2a:6b:4f:4f:24:73:2d:
                    b3:80:11:ab:3c:8c:fb:e1:66:23:05:d3:64:5a:50:
                    d3:81:e9:41:23:70:e1:2c:bb:3e:f2:9a:bc:6a:89:
                    d4:38:c2:e7:32:ff:7a:3d:9b:1d:2e:83:0c:22:b1:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:BF:94:4F:45:1E:29:91:D9:29:50:90:C0:4A:AB:72:CC:ED:01
            X509v3 Authority Key Identifier:
                keyid:16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a383030303a3a2f33332d3333203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:38:ca:80:53:fc:3b:c9:3c:88:10:72:31:5f:99:de:48:fb:
         ab:7f:86:a0:82:61:0e:20:01:ea:df:82:6b:50:3c:9f:69:e0:
         b7:2f:54:85:c1:20:85:12:fd:55:bf:d9:c5:7a:48:27:68:cc:
         e2:99:33:22:cb:3d:c6:cd:8e:5d:f6:5a:6f:df:eb:76:99:28:
         79:ac:77:bc:ad:2a:25:6f:86:6b:80:12:84:0a:40:3a:a2:0f:
         c4:ce:a6:f1:9b:f4:54:d3:8c:84:e0:6f:2a:15:be:ad:2a:b7:
         f9:21:72:2b:80:b8:60:58:5a:f3:fe:d0:6a:56:49:6c:6d:d4:
         70:1b:32:f2:8f:68:72:60:7e:8c:2a:d5:3f:62:58:ce:c4:1c:
         79:37:51:32:ff:57:2b:0e:e5:2f:d6:10:2d:d0:d0:b0:03:0d:
         9e:ba:f4:b7:9c:50:21:aa:d6:50:8c:e6:e4:85:b3:02:96:ac:
         bc:77:09:61:65:ed:b1:9b:86:c5:1f:e3:58:a8:bb:f9:60:6e:
         61:14:ee:fd:d6:7f:6a:b4:4d:31:1e:1a:3b:25:ac:0c:d7:9d:
         69:e6:20:4d:e8:11:09:fa:cb:d0:3b:ac:80:40:3c:6a:13:48:
         5e:0d:bf:76:13:29:ba:05:d6:f8:82:88:38:84:d8:f1:0c:ec:
         47:f4:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net