Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          uZOQs4XO0rYH8GltOegCaQ3gmL6neK9KPXYPlsg1Dpw=
Subject key identifier:   EB:E1:3E:C7:FA:ED:3F:67:AE:9C:BA:20:2A:56:F7:9B:1C:8C:1F:9B
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       617CA1AA40DF691B8E46136AE94F6C81A1E2326D
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:26:52 +0000
ROA not before:           Sat 12 Apr 2025 00:21:52 +0000
ROA not after:            Sat 11 Apr 2026 00:26:52 +0000
asID:                     274726
IP address blocks:        2804:92a8:6000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7c:a1:aa:40:df:69:1b:8e:46:13:6a:e9:4f:6c:81:a1:e2:32:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:21:52 2025 GMT
            Not After : Apr 11 00:26:52 2026 GMT
        Subject: CN=EBE13EC7FAED3F67AE9CBA202A56F79B1C8C1F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:22:ce:e3:d8:a5:38:a7:7c:78:07:bc:1c:
                    86:03:93:15:9c:a7:2f:2e:34:f1:e2:e4:b8:03:ed:
                    02:d6:97:87:04:b3:35:47:ae:d2:16:8d:1a:9e:79:
                    4d:6c:19:3f:0a:3a:fa:e7:cf:43:5a:22:17:33:96:
                    73:96:6d:c0:2b:f3:ec:4d:c2:0a:a0:2c:40:21:ef:
                    09:5f:b6:62:26:14:a9:12:f4:80:c8:d2:81:c4:6a:
                    42:13:9f:1b:2d:b3:29:ff:11:f2:1d:ed:0e:f8:f5:
                    83:03:08:b9:13:a8:c2:31:05:d3:6c:74:10:6d:06:
                    15:7d:1a:ed:6e:05:89:9d:6b:1c:c1:bb:b3:69:f5:
                    29:ef:48:5c:f3:59:b1:5a:74:1a:ba:51:35:b4:9e:
                    88:5c:3b:11:b9:1b:2e:99:bd:21:f9:89:89:d2:d7:
                    c7:17:32:77:1f:5b:0d:24:1d:73:58:06:4a:a2:da:
                    47:36:c6:b4:90:26:5b:44:fb:e9:11:f3:56:72:da:
                    4b:c2:2d:79:f5:85:e8:42:4b:3b:6a:ee:f7:c0:20:
                    83:f6:b5:17:ff:59:61:2f:ad:a3:60:ea:99:b3:cd:
                    fa:7f:39:50:48:49:dc:ac:a8:17:03:2c:a4:c2:ba:
                    2f:be:38:6a:23:29:c5:88:10:b4:54:9d:98:2d:21:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E1:3E:C7:FA:ED:3F:67:AE:9C:BA:20:2A:56:F7:9B:1C:8C:1F:9B
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:e1:4d:ce:da:42:19:c2:e1:f2:16:88:2a:6b:1a:e6:d1:
         6f:91:36:8c:54:e3:6b:11:cc:1b:3b:13:af:a2:6c:8d:7a:0c:
         fc:59:06:5e:9c:cb:b9:66:9c:26:45:33:d0:ac:b7:fc:3e:ef:
         04:d1:29:67:69:ce:41:76:41:7a:7d:99:95:fa:75:cc:b7:ca:
         b8:76:9c:38:9a:1a:3a:6a:9d:00:73:e5:8e:3a:64:e0:a0:1e:
         82:45:40:72:29:e0:d4:42:32:e9:7a:a9:24:d9:ad:5a:ea:29:
         b9:f5:49:7b:26:61:38:39:43:74:fd:61:20:99:a7:c4:48:f8:
         ba:1a:3b:58:3f:db:30:2e:14:71:fb:c0:d1:27:ae:24:cd:cd:
         65:a0:42:f3:a6:e2:61:ad:f8:33:de:19:20:2f:42:8b:71:02:
         e9:b7:47:bb:b3:d3:0c:89:e1:de:78:7d:11:16:65:94:37:96:
         18:b7:43:c6:49:3d:52:c9:95:91:83:d7:6b:7c:66:b7:56:c8:
         87:5e:e3:49:77:ef:25:1a:4c:9c:7b:a5:a4:84:c4:30:37:b7:
         79:ae:38:81:05:42:d7:58:f2:93:80:68:14:4f:a7:62:b1:42:
         41:8c:95:40:ce:b8:9b:8e:7b:2a:8f:7d:eb:38:82:71:5c:b5:
         6d:21:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net