Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a336666663a3a2f34382d3438203d3e20323635353030.roa
File:                     323830343a333531383a336666663a3a2f34382d3438203d3e20323635353030.roa (raw, json)
Hash identifier:          UyvYQ48sOsDU+txlrckdWtyiMXk9cJ/P1fVMOkZLS/8=
Subject key identifier:   FD:F2:EE:E3:75:F7:76:03:08:02:60:5D:BA:3E:79:7C:C4:BA:0E:CD
Certificate issuer:       /CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
Certificate serial:       2D172D46CC71A146BD49A70D0029996C03F98B13
Authority key identifier: A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a336666663a3a2f34382d3438203d3e20323635353030.roa
Signing time:             Wed 05 Mar 2025 13:44:03 +0000
ROA not before:           Wed 05 Mar 2025 13:39:03 +0000
ROA not after:            Wed 04 Mar 2026 13:44:03 +0000
asID:                     265500
IP address blocks:        2804:3518:3fff::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:17:2d:46:cc:71:a1:46:bd:49:a7:0d:00:29:99:6c:03:f9:8b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
        Validity
            Not Before: Mar  5 13:39:03 2025 GMT
            Not After : Mar  4 13:44:03 2026 GMT
        Subject: CN=FDF2EEE375F776030802605DBA3E797CC4BA0ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:7f:a7:82:8d:1a:44:79:f1:98:df:b5:a8:
                    5a:b4:33:d1:08:3e:3a:f3:4a:1e:23:1f:bc:88:fc:
                    f9:d8:65:7e:91:70:29:86:e0:0c:b1:28:ca:f7:9a:
                    6b:ac:55:c4:16:c4:94:c4:af:4d:50:59:05:02:37:
                    f0:0e:0e:5d:bb:16:cf:a6:9f:38:6d:07:e6:c2:ba:
                    03:e0:83:ec:a6:58:70:ce:a1:08:b0:8e:2f:3e:22:
                    fb:b3:03:37:d6:e1:d9:7c:51:cd:3b:dd:f4:d3:c6:
                    c0:b1:18:82:6f:eb:77:a9:93:fa:9b:d0:59:a8:d2:
                    bd:03:50:da:5f:52:82:4e:e6:e6:b7:db:c2:d5:8b:
                    ba:26:c8:46:36:e6:f6:c6:fc:ae:82:d1:e9:78:46:
                    28:65:64:e6:22:a8:a2:20:63:ab:f8:2f:dc:af:13:
                    35:64:84:42:d8:03:e8:16:7c:e3:93:09:00:5b:ae:
                    61:68:16:63:f3:d1:39:1c:8d:6c:74:23:a6:0d:9f:
                    c7:4b:4a:47:66:4f:4d:0a:1d:23:fa:65:83:a2:8c:
                    bb:6b:9d:40:2d:a0:0d:48:ba:0d:86:9f:28:81:aa:
                    7e:e5:eb:91:2f:76:66:4c:86:04:df:de:3d:71:38:
                    6a:a5:9f:c5:58:f4:01:88:69:3e:2f:09:e4:73:3a:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F2:EE:E3:75:F7:76:03:08:02:60:5D:BA:3E:79:7C:C4:BA:0E:CD
            X509v3 Authority Key Identifier:
                keyid:A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a336666663a3a2f34382d3438203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:3fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:14:5e:52:48:f6:70:28:15:06:42:b1:ed:6f:30:dd:85:e0:
         17:44:59:f3:65:0a:d9:22:3a:b2:b2:20:5c:41:54:5a:ba:c6:
         9a:01:10:9e:fe:a2:0f:bb:88:fa:25:aa:96:fb:43:16:ed:75:
         8f:ad:1a:4d:d4:84:47:e6:ef:a2:7b:0e:77:d0:3a:66:f3:7b:
         b3:93:82:96:39:11:0a:50:67:c6:76:ce:14:91:b2:c8:db:bd:
         19:a4:22:2c:20:26:11:55:23:94:c3:e6:96:11:1f:e3:53:0d:
         4b:84:f0:7c:51:a2:44:17:a5:cc:78:fe:4c:98:93:d9:fa:fa:
         9b:76:a2:5e:d6:71:df:da:c4:2b:c4:7f:db:b8:6f:f0:f2:4b:
         be:a9:e6:65:8b:66:39:74:50:99:7a:3a:62:26:9b:fc:a4:22:
         2b:cf:24:f8:f5:4d:08:ae:09:6a:ba:4a:c3:1d:80:ff:7e:0c:
         76:ec:5f:9a:98:cc:e3:21:9f:02:0f:88:21:d4:44:dd:63:c2:
         ac:ff:1c:1d:ea:74:53:65:60:9b:ea:97:e3:05:07:6e:42:d4:
         4b:ea:ac:b6:f9:d2:5a:5d:5b:ff:a3:49:39:36:00:b3:8f:43:
         5e:65:2f:2b:58:14:96:e5:9e:af:9f:39:a8:1e:54:ab:26:84:
         58:c8:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:50 2025 by rpki-client on console.sobornost.net