Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa
File:                     323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa (raw, json)
Hash identifier:          ZNC6dlhO5giZNzKxibzRA91NeWmouC75TinWpnn9YMo=
Subject key identifier:   A8:7D:67:E3:51:88:CE:9C:D6:B6:09:23:53:34:8A:B4:E8:36:45:6F
Certificate issuer:       /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial:       3E576F209C99572A70FCFEB4512FE7E762E5D745
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa
Signing time:             Thu 10 Apr 2025 12:10:30 +0000
ROA not before:           Thu 10 Apr 2025 12:05:30 +0000
ROA not after:            Thu 09 Apr 2026 12:10:30 +0000
asID:                     266983
IP address blocks:        2804:4654:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:57:6f:20:9c:99:57:2a:70:fc:fe:b4:51:2f:e7:e7:62:e5:d7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
        Validity
            Not Before: Apr 10 12:05:30 2025 GMT
            Not After : Apr  9 12:10:30 2026 GMT
        Subject: CN=A87D67E35188CE9CD6B6092353348AB4E836456F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:93:e5:32:de:48:3b:d6:29:fc:bd:83:90:
                    25:2c:59:ab:1a:0d:7a:1d:88:8d:29:3b:70:fb:bb:
                    6d:42:a7:fe:60:1a:f0:94:9a:40:0f:c7:59:5b:ab:
                    f3:c6:e9:93:73:3b:a5:53:4a:68:75:1e:b9:44:f7:
                    65:2a:6a:a3:5b:ff:b1:0a:1b:1f:ad:51:60:fc:f7:
                    9d:c9:95:f4:3b:7c:ce:a7:7e:46:54:20:d1:53:34:
                    02:92:ac:82:76:db:df:b5:d5:5a:fc:28:ca:6e:b1:
                    bf:5e:75:f7:bd:37:dd:e1:98:26:6a:60:72:c6:5a:
                    d0:9c:aa:cf:4d:81:8d:03:56:57:28:78:bd:65:de:
                    69:af:2d:47:9c:67:a3:bc:50:bb:32:e6:a8:fd:04:
                    98:95:b2:42:49:94:4e:16:b1:34:81:d3:b3:92:57:
                    02:a0:8a:3b:52:6d:0c:3f:43:65:9c:d7:92:50:4f:
                    e5:eb:a3:c0:99:2f:fe:46:a8:b8:c2:53:8d:53:8a:
                    f7:b4:e1:7c:1e:0e:23:05:16:6d:3e:eb:42:4e:87:
                    6d:07:54:ad:a7:e6:1d:95:68:70:96:b2:27:fb:a8:
                    de:f0:59:f4:e8:13:29:60:00:9d:94:41:19:1d:c4:
                    43:bb:09:5e:12:9f:1e:91:ce:af:c4:3b:73:16:8c:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7D:67:E3:51:88:CE:9C:D6:B6:09:23:53:34:8A:B4:E8:36:45:6F
            X509v3 Authority Key Identifier:
                keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4654:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:d4:68:8d:a1:60:a9:bc:cd:82:35:9e:c8:cb:99:7e:70:71:
         b8:5e:97:53:7d:85:ee:97:6c:11:84:08:dc:f1:bd:9d:29:27:
         c9:6b:d2:b4:23:64:c4:06:bb:df:8f:de:f1:80:91:8a:fa:b2:
         e9:cc:e7:3a:15:75:49:73:24:70:58:47:7d:b5:fa:11:45:42:
         99:fc:4a:34:a8:f5:2d:35:88:ae:1d:51:fc:7f:d0:3f:b4:e2:
         f9:0e:f8:48:27:e8:75:52:ed:c2:fc:56:46:47:f9:69:49:00:
         d4:4c:ac:59:3d:57:20:07:f5:6e:c6:d3:d7:31:75:00:ba:a6:
         5e:7c:59:b3:ff:db:7d:03:93:81:55:e5:c7:31:28:d5:aa:29:
         d6:00:9b:bf:a4:5d:f8:59:e3:70:73:d9:00:b9:f6:ad:a3:3e:
         d6:3e:d7:97:91:73:32:0f:26:e4:7b:47:43:19:0a:88:e3:49:
         ea:1b:a0:51:aa:d0:74:3b:74:9e:ba:e4:5f:f7:72:fc:7b:19:
         a1:1f:df:5e:2d:87:13:24:93:92:19:d0:66:c1:b1:32:1e:09:
         c4:f8:cb:b1:60:c2:28:1d:62:24:00:c5:0f:22:c6:70:d2:fd:
         78:b0:7b:cc:e1:3a:cc:02:de:8a:b1:cb:79:d9:95:f6:8e:de:
         2c:5d:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net