Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33322d3332203d3e20323635313138.roa
File:                     323830343a326163383a3a2f33322d3332203d3e20323635313138.roa (raw, json)
Hash identifier:          nX9UCw2WOC4neDeFqZUfSnUZLAisXINVIE8iCYXicN4=
Subject key identifier:   BB:0A:49:F5:3A:68:24:2C:1A:71:96:81:37:2D:07:DD:FA:12:50:57
Certificate issuer:       /CN=165675A1928929FF394AAD05FDC9293D274BED5D
Certificate serial:       09A70D2428FD2C1EE45FE61DC6DF112F5CB52FEC
Authority key identifier: 16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33322d3332203d3e20323635313138.roa
Signing time:             Wed 09 Apr 2025 14:10:25 +0000
ROA not before:           Wed 09 Apr 2025 14:05:25 +0000
ROA not after:            Wed 08 Apr 2026 14:10:25 +0000
asID:                     265118
IP address blocks:        2804:2ac8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a7:0d:24:28:fd:2c:1e:e4:5f:e6:1d:c6:df:11:2f:5c:b5:2f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165675A1928929FF394AAD05FDC9293D274BED5D
        Validity
            Not Before: Apr  9 14:05:25 2025 GMT
            Not After : Apr  8 14:10:25 2026 GMT
        Subject: CN=BB0A49F53A68242C1A719681372D07DDFA125057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:4f:8b:e1:02:81:ec:9d:04:2b:54:b2:b3:
                    d9:c5:e0:3a:c9:01:4e:f8:ee:e9:4f:32:34:54:b3:
                    0f:00:a0:9f:87:9a:12:79:89:c0:50:56:4d:0a:c2:
                    0e:86:5f:a3:b9:0e:d2:8c:6a:e0:98:f0:47:35:bf:
                    7d:03:da:1d:c3:33:d2:31:de:12:1c:d4:09:fe:fc:
                    c3:2f:84:be:f3:35:6e:ca:97:b8:17:a5:ee:9c:7e:
                    dd:e0:58:44:e9:dc:01:d2:26:f4:a7:91:63:d7:b7:
                    7b:3a:fd:bc:c4:7d:68:e2:7c:38:41:04:11:71:cc:
                    b9:80:2c:48:79:cb:a8:89:95:5f:8d:5e:db:74:8e:
                    39:23:aa:b6:4b:cb:4e:6d:67:10:52:a8:53:86:b6:
                    04:d8:71:89:b6:f0:10:4b:2b:23:9a:e5:53:91:43:
                    16:af:fb:1e:f4:f3:22:62:ed:7b:50:b9:52:7e:70:
                    35:11:4e:34:b5:de:68:d7:b2:cb:a6:79:18:44:06:
                    6b:10:5c:c1:b5:12:e3:bb:1d:43:dd:30:f1:7f:31:
                    be:d4:53:7a:1f:4a:5e:4a:08:5f:24:07:9a:22:d1:
                    b7:1c:91:59:89:fe:1b:84:42:85:57:23:ac:7e:a9:
                    75:23:da:11:4a:63:a2:df:08:c0:c3:49:7a:6e:54:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0A:49:F5:3A:68:24:2C:1A:71:96:81:37:2D:07:DD:FA:12:50:57
            X509v3 Authority Key Identifier:
                keyid:16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33322d3332203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:e6:5d:9a:c8:e4:b0:d9:6e:66:71:c4:cd:e7:2c:e8:a0:
         d1:20:7a:d2:b8:7f:2b:5d:ef:3b:66:d7:f4:69:a4:4d:cb:96:
         7b:f9:0f:c2:04:e5:81:81:38:52:ed:f8:86:a5:a5:ad:1e:ba:
         dc:93:16:13:bc:b7:f3:62:9b:d4:47:f1:57:42:92:84:9c:48:
         7a:ff:1e:98:e4:4c:1c:b8:a8:db:1c:3f:bd:f8:37:d4:55:74:
         06:7b:27:4b:10:cf:07:d9:73:d7:a6:78:db:ea:12:0a:af:e2:
         22:cc:be:2d:0b:26:ca:43:c8:72:2a:8b:01:25:12:ad:ef:ec:
         4f:64:27:dc:b4:50:ba:67:7c:3f:4a:db:0d:46:97:92:c7:a5:
         92:d9:c3:cc:c8:87:cd:6b:ed:b2:5a:b7:36:f8:fb:d8:83:3e:
         3f:54:e0:de:fd:21:13:8b:d4:9a:e8:54:8f:3f:ca:f6:a9:2e:
         83:80:be:2f:e7:fe:61:47:21:54:96:4a:e5:99:3f:26:8e:65:
         99:b7:22:07:1f:36:52:2f:ae:c6:ef:21:33:fd:3c:f1:25:df:
         f3:eb:7f:da:ee:3b:05:54:2c:d8:31:71:ab:c1:07:03:b1:09:
         16:e2:7d:89:41:31:d9:8f:60:02:4c:4f:bf:8c:75:57:f0:f6:
         3f:ec:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net