Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa
File:                     323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa (raw, json)
Hash identifier:          C/rh+jRvppR8BO9naSM1hCfue2zOcAvNH4qoMZqEunk=
Subject key identifier:   FB:2C:70:63:71:04:50:07:C2:21:FC:61:2E:F1:65:D3:32:35:22:C0
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       2D2FB71653AB580D376347B678B3EDF58F1CA2A3
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa
Signing time:             Thu 06 Mar 2025 14:06:02 +0000
ROA not before:           Thu 06 Mar 2025 14:01:02 +0000
ROA not after:            Thu 05 Mar 2026 14:06:02 +0000
asID:                     268638
IP address blocks:        2804:5444:a000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2f:b7:16:53:ab:58:0d:37:63:47:b6:78:b3:ed:f5:8f:1c:a2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Mar  6 14:01:02 2025 GMT
            Not After : Mar  5 14:06:02 2026 GMT
        Subject: CN=FB2C706371045007C221FC612EF165D3323522C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:25:d6:bc:6d:e8:d9:b3:a2:6b:ba:12:65:
                    fd:96:c8:16:07:81:63:be:9d:3e:f7:26:7d:b1:52:
                    87:74:10:c9:f5:85:61:1c:78:6c:05:ed:c7:be:00:
                    05:6f:28:49:33:ee:26:fa:bc:77:28:58:5c:f7:1c:
                    77:cb:84:bd:7e:38:58:af:43:5d:5e:1e:0a:78:c4:
                    12:be:bc:06:4d:34:0e:8a:01:8b:f3:ec:9f:ec:9b:
                    c5:77:24:03:81:7e:cb:77:59:39:3a:7b:5b:eb:35:
                    e1:01:9a:6b:22:a3:89:95:71:f6:ca:e2:6b:fe:a9:
                    7f:fe:cc:03:8c:bc:f8:a5:d2:67:86:c1:66:88:c2:
                    02:7c:3f:6a:f4:a6:2f:07:bb:2b:80:a1:ae:b8:87:
                    21:23:a5:7d:9f:b9:b5:a6:3f:05:4f:53:5b:24:e7:
                    cd:05:91:f9:fe:58:b7:3a:a8:65:59:da:39:84:78:
                    1a:cc:57:4f:9a:bf:69:05:a5:ac:38:09:06:1e:0b:
                    4c:9c:50:da:3e:30:4a:64:16:1e:2a:94:0f:4a:3e:
                    07:47:8e:63:10:0a:5a:22:85:30:f3:7e:9b:ab:f8:
                    1d:44:1e:de:de:a3:c0:5c:f3:ef:e8:8e:04:58:ac:
                    aa:c9:39:6d:06:86:42:92:4c:5e:12:d2:c9:dd:cf:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:70:63:71:04:50:07:C2:21:FC:61:2E:F1:65:D3:32:35:22:C0
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:ed:7e:9d:dd:dc:0a:05:04:0e:ae:ca:c0:30:01:af:d1:5b:
         80:d0:ad:ab:ab:3a:a9:b4:3c:58:35:9e:f7:c6:28:c7:3f:80:
         75:79:5c:e4:a6:2b:66:91:e7:57:97:30:9f:1f:5b:73:d7:22:
         c7:e1:cd:3f:0f:3d:70:22:ce:ae:5e:15:54:68:b4:6d:6d:9d:
         e0:0f:11:4c:fd:00:cd:e5:89:72:b4:92:f9:33:1b:57:06:11:
         7d:a0:3a:b9:3f:fb:33:b1:15:48:84:07:97:f3:a0:d9:48:7a:
         9d:c1:a9:a0:64:01:2e:d0:5f:e0:83:11:aa:03:46:15:9e:ff:
         dc:83:04:f2:80:45:d5:1b:f8:af:0a:fa:97:85:fa:fa:1a:60:
         1b:de:40:bf:f3:62:d2:13:96:5f:64:5b:25:d3:fb:8d:d8:8d:
         dd:ce:41:d0:93:67:d2:6b:d3:89:98:1c:6a:4f:8c:28:20:91:
         c8:11:a6:c3:ed:ae:1b:c8:d5:be:3e:a7:64:4d:e8:23:7e:f3:
         d3:ab:21:fa:bc:75:05:f1:82:ac:8e:a7:20:6c:c8:ec:ea:cc:
         bd:85:9d:55:81:a2:cd:3d:c4:b3:e6:45:87:27:c3:fb:37:ce:
         a5:cd:d9:a6:56:b5:84:2b:f9:a9:8f:f1:42:7b:b6:50:cf:cf:
         58:cd:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:36:33 2025 by rpki-client on console.sobornost.net