Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          U9ocrCOw5Z4JyYsqG6os0jYR276biAo8yJS8l2A3xzY=
Subject key identifier:   F0:83:3F:C2:AA:F2:5E:DF:15:E3:CB:1A:A2:03:7D:E2:41:FF:9D:B9
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       1D7F79761E9DA7CC821BE605B3562A32DAAA6C17
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:26:14 +0000
ROA not before:           Sat 12 Apr 2025 00:21:14 +0000
ROA not after:            Sat 11 Apr 2026 00:26:14 +0000
asID:                     274726
IP address blocks:        2804:92a8:2000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7f:79:76:1e:9d:a7:cc:82:1b:e6:05:b3:56:2a:32:da:aa:6c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:21:14 2025 GMT
            Not After : Apr 11 00:26:14 2026 GMT
        Subject: CN=F0833FC2AAF25EDF15E3CB1AA2037DE241FF9DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:7d:6b:49:c5:04:f3:a7:c5:c5:77:cf:86:
                    24:ea:2e:78:be:8c:e1:17:b1:7d:17:37:95:31:cf:
                    3c:73:5b:eb:fa:e8:25:f1:bc:ea:d0:e7:5b:f3:9a:
                    41:27:f8:2f:87:7e:ab:c3:22:6e:aa:de:8d:f2:c5:
                    ae:64:d1:4d:05:7c:fe:39:44:cc:ca:eb:ac:12:f3:
                    f8:14:7a:19:9a:3a:84:03:0d:2e:3c:ff:39:c2:20:
                    b6:af:ba:6f:69:3d:e1:c2:06:76:3b:3a:8f:c8:8a:
                    cb:1b:3f:95:31:7e:90:13:97:2b:98:ee:25:7e:60:
                    21:50:d4:03:35:d3:e6:6e:30:68:5d:76:ea:39:de:
                    50:d3:79:46:14:a1:40:11:4a:af:93:86:2b:d8:12:
                    68:02:e4:5d:25:82:62:0c:76:e8:f6:9b:bf:3c:54:
                    2f:6b:78:dc:d5:56:ba:16:cb:5e:98:24:06:6f:e7:
                    44:33:b1:8c:ce:d9:95:65:f0:5a:ff:b5:07:ee:8c:
                    b5:f1:98:e0:a6:f7:f3:21:06:aa:a7:cc:95:d2:b2:
                    13:a7:55:f1:cf:19:0b:8c:93:6b:f3:e7:9a:bf:8f:
                    0b:71:cc:31:f7:b8:cf:ee:95:8c:e7:29:36:f5:9d:
                    62:a6:a1:da:f9:6d:8b:25:57:2d:11:af:a5:de:2e:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:83:3F:C2:AA:F2:5E:DF:15:E3:CB:1A:A2:03:7D:E2:41:FF:9D:B9
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:ba:50:87:5d:c9:c9:66:4a:40:c7:8a:ef:d6:e2:af:69:
         77:ef:c3:78:1b:cd:65:53:0e:60:75:ab:21:39:65:11:21:aa:
         41:4d:94:4e:ae:db:04:fe:85:08:1b:23:e4:aa:c3:2c:a8:c4:
         87:fc:41:03:5e:86:7c:35:3b:08:66:e4:10:f5:f3:b8:5f:bf:
         76:11:0b:59:4a:b4:7a:a7:98:87:bd:b3:bc:80:a1:5d:80:37:
         3f:59:b5:ab:9e:f5:52:89:4d:aa:81:71:3d:12:c1:63:ec:f4:
         a4:0d:d9:b2:62:15:2a:9f:0f:83:dc:b5:2f:1b:9c:cb:cb:0e:
         62:6c:c4:bd:27:a2:4e:74:13:aa:9e:e2:b3:f2:42:1c:2d:4d:
         e3:2f:77:b2:80:ee:f9:b6:f9:5e:34:48:77:72:e5:71:03:08:
         44:8d:a5:38:47:af:34:0f:43:dc:11:d0:2f:a6:e2:ee:92:4c:
         d7:cf:f6:69:ea:58:80:ac:74:8a:f5:c6:6e:6d:8f:90:90:3b:
         8b:21:47:e1:81:c9:ba:8f:e5:f5:c6:f8:21:73:9e:f0:a9:4e:
         44:ff:a7:38:22:2c:52:61:f6:d4:13:9d:b6:bf:4f:f6:d3:6b:
         89:03:88:5e:cb:14:ba:77:5b:9e:99:4a:cb:66:9d:27:ff:c7:
         2d:d5:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net