Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33332d3333203d3e20323636393833.roa
File:                     323830343a343635343a3a2f33332d3333203d3e20323636393833.roa (raw, json)
Hash identifier:          G7wAV6nM9gxwC4S4WhpKn5yHkUIs72crJpgtw7xApDU=
Subject key identifier:   A1:C4:9F:84:23:10:20:A5:0F:A4:FE:A7:E9:C8:3A:E4:6B:57:F1:3F
Certificate issuer:       /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial:       5057E4DF7D2D6A2F9AFF2891C5D6F693DB46854A
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33332d3333203d3e20323636393833.roa
Signing time:             Thu 10 Apr 2025 12:10:33 +0000
ROA not before:           Thu 10 Apr 2025 12:05:33 +0000
ROA not after:            Thu 09 Apr 2026 12:10:33 +0000
asID:                     266983
IP address blocks:        2804:4654::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:57:e4:df:7d:2d:6a:2f:9a:ff:28:91:c5:d6:f6:93:db:46:85:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
        Validity
            Not Before: Apr 10 12:05:33 2025 GMT
            Not After : Apr  9 12:10:33 2026 GMT
        Subject: CN=A1C49F84231020A50FA4FEA7E9C83AE46B57F13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:f3:37:7e:6d:49:b5:e9:1d:0a:bf:43:ec:
                    08:76:be:6a:21:7f:2f:2c:9a:c6:db:87:52:bc:c1:
                    7d:76:e5:d0:43:c2:f2:30:7c:76:60:97:5e:2c:cd:
                    25:fb:e7:3d:18:58:13:51:ed:e4:53:b9:eb:95:45:
                    e8:db:d4:75:8f:1c:c0:97:0b:71:e4:41:77:42:7c:
                    62:0b:92:41:81:24:ff:bb:9c:a2:4c:bc:3b:b9:38:
                    dc:81:4a:b7:15:11:7d:23:54:49:39:05:6b:de:ec:
                    2d:e3:02:42:77:d7:63:02:2c:fe:0d:52:76:bb:51:
                    b1:81:60:bd:68:ba:58:2b:1e:6e:e9:cb:aa:44:4a:
                    b0:06:af:0e:bd:87:28:ad:b6:79:de:d4:89:b2:7d:
                    a1:43:7d:d3:5e:1d:51:19:63:57:be:34:3e:bf:da:
                    e0:2e:16:e5:aa:c4:b1:aa:9b:48:bf:be:97:c6:82:
                    7b:ad:ea:95:27:c3:44:a9:69:00:e6:7d:5d:fb:a8:
                    5c:f5:24:1a:85:d2:42:57:c9:ef:8d:ef:f0:a0:fd:
                    ec:d5:88:c2:17:7b:fd:fc:2a:9f:96:23:06:d2:d1:
                    1c:04:22:0c:52:b8:bf:30:17:d7:08:cf:58:bd:89:
                    85:de:82:aa:5d:31:87:2c:b2:63:50:f3:4f:d8:bb:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C4:9F:84:23:10:20:A5:0F:A4:FE:A7:E9:C8:3A:E4:6B:57:F1:3F
            X509v3 Authority Key Identifier:
                keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33332d3333203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4654::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:b7:8e:3c:0d:8c:f5:dc:9b:2f:a8:2a:5e:20:69:fe:f4:
         02:c5:28:55:0a:da:a2:ff:a7:84:94:5c:3f:fe:0e:15:7c:9a:
         f1:97:6b:1b:7b:8f:6e:a5:f9:3d:fe:25:20:1e:03:01:d9:b2:
         e7:bd:bc:6f:35:10:37:7e:b5:03:af:95:b5:5b:11:80:73:cb:
         8e:4f:04:41:14:a8:5e:78:e8:00:27:cb:aa:83:7c:f6:5e:82:
         7d:90:4d:1c:77:00:87:32:16:9d:35:cb:ec:84:e8:70:e7:b9:
         1d:37:ab:16:e1:48:79:7f:4d:91:b4:d3:02:41:47:ca:88:67:
         69:09:a4:9f:55:3a:e2:2a:52:a1:68:4c:d3:f9:a1:d5:fe:2f:
         84:1e:8e:4a:9f:dd:6f:22:07:b7:49:75:c5:64:0e:14:7e:35:
         08:4a:93:a7:9e:bc:f1:7f:48:61:a8:21:fb:74:57:90:c1:83:
         52:3e:87:e1:d2:51:1f:11:72:f6:25:2f:33:e6:5c:6b:d9:15:
         5e:a8:83:55:a8:14:28:82:a3:16:5e:56:3c:ab:79:82:19:fd:
         82:52:e3:b4:59:93:4b:35:87:ba:80:f1:f9:b0:1c:f4:7b:01:
         40:8b:fd:50:1c:07:06:a7:e2:53:0a:05:db:fc:04:c7:87:61:
         bf:8c:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net