Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          j7oPoyh2mzDTLdbCVfQhC91ne0Qvf6+nFtjSuYvp0uA=
Subject key identifier:   B4:3C:5F:20:AA:EE:D4:50:84:39:3C:CC:4B:39:F7:86:9D:DC:5F:BE
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       67933901594B70F773CAFB4A5143B0CDF9A8527F
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:26:46 +0000
ROA not before:           Sat 12 Apr 2025 00:21:46 +0000
ROA not after:            Sat 11 Apr 2026 00:26:46 +0000
asID:                     274726
IP address blocks:        2804:92a8:5000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:93:39:01:59:4b:70:f7:73:ca:fb:4a:51:43:b0:cd:f9:a8:52:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:21:46 2025 GMT
            Not After : Apr 11 00:26:46 2026 GMT
        Subject: CN=B43C5F20AAEED45084393CCC4B39F7869DDC5FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:18:3b:6d:fe:ed:47:19:52:cc:96:ed:1c:
                    0b:46:0c:6c:53:5f:37:a5:1c:92:91:f9:83:bf:b1:
                    08:bf:3e:63:70:8a:a8:20:95:27:33:b3:3b:12:43:
                    d7:5c:6f:2d:d5:14:a0:71:46:de:c0:6c:33:eb:e8:
                    e6:4e:98:5d:e4:6f:c0:a9:62:f9:85:cd:8f:cf:89:
                    ca:29:8f:b1:08:ac:b9:e4:63:68:7c:a5:fd:a3:05:
                    09:eb:c9:ec:8b:6f:fd:65:db:f2:22:1c:59:f7:f0:
                    0d:86:27:5f:21:d5:d4:39:4a:00:54:65:84:db:c3:
                    68:87:0e:8e:2d:d9:51:7e:ae:c0:82:d7:cf:0d:72:
                    61:be:a6:e4:10:2e:56:df:78:58:71:b6:b1:e0:2f:
                    b9:bd:2d:f5:da:46:26:d6:57:4d:de:60:73:09:c2:
                    08:90:3f:ab:eb:89:20:dd:44:ac:81:75:87:67:7a:
                    ed:d9:03:49:0e:23:ac:e0:14:46:b1:51:3e:f0:53:
                    0f:f2:25:3c:cd:06:9d:91:46:1e:8e:17:e7:0f:d3:
                    86:97:b7:81:59:d6:fa:75:01:b6:8f:9d:3c:90:b6:
                    08:b8:38:cb:45:6d:09:6b:f1:61:a7:82:11:40:27:
                    49:96:a3:09:24:59:f0:ea:2f:99:26:aa:31:71:9f:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:5F:20:AA:EE:D4:50:84:39:3C:CC:4B:39:F7:86:9D:DC:5F:BE
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:18:61:0f:5c:b3:85:60:d4:a6:e7:e8:e9:f5:52:e6:19:87:
         7b:12:96:46:49:18:66:84:12:78:0b:6a:b5:75:2f:5d:75:d1:
         e7:1b:2a:55:a4:6b:67:31:69:57:ab:4d:b9:95:9d:1f:13:ba:
         ec:f6:c8:67:b0:c8:e4:ea:13:6f:d9:c2:a7:6e:2b:7f:1d:8f:
         01:85:54:f7:ab:5e:d3:72:45:70:61:77:2a:f8:97:2b:29:fb:
         4a:e4:c6:06:cf:eb:59:fd:b0:98:44:94:20:c9:2e:d4:f1:37:
         47:c9:53:1e:37:e9:c4:5b:22:7c:5b:d7:c8:0e:56:56:5a:31:
         cf:8f:53:2e:38:22:7c:1e:74:52:97:ad:cd:9d:91:7c:f1:dd:
         0a:d2:06:e5:c3:6b:00:fc:f8:2f:60:b7:c7:6f:56:36:e9:84:
         23:e5:9e:e3:df:48:40:84:ee:56:27:b0:79:69:1f:45:44:5a:
         13:9f:d9:34:bf:26:6a:b1:fe:c9:6a:a2:b3:34:cc:ac:6b:4f:
         c8:19:18:f2:31:e2:d1:02:c8:b7:88:2b:91:c6:5a:6d:1a:f0:
         59:7f:28:95:ee:94:88:0d:42:b3:91:15:da:04:71:f5:d9:8a:
         b0:f8:84:e5:23:b9:d7:4d:0d:23:fc:37:07:d4:88:22:76:37:
         1f:5e:91:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net