Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          YkkQzooAF+M3Qa05KN7wkNUCuoXf8Cd9UimMGLaSgPg=
Subject key identifier:   5F:FC:17:F1:29:1B:71:85:C0:87:04:67:F3:82:E9:C2:32:7A:74:00
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       13C23E471DA2FA5EF45B4506A6A62D5E6D3739F9
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:26:57 +0000
ROA not before:           Sat 12 Apr 2025 00:21:57 +0000
ROA not after:            Sat 11 Apr 2026 00:26:57 +0000
asID:                     274726
IP address blocks:        2804:92a8:7000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c2:3e:47:1d:a2:fa:5e:f4:5b:45:06:a6:a6:2d:5e:6d:37:39:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:21:57 2025 GMT
            Not After : Apr 11 00:26:57 2026 GMT
        Subject: CN=5FFC17F1291B7185C0870467F382E9C2327A7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:11:cc:c9:e0:af:b6:46:b8:65:79:b6:d4:
                    36:38:8e:11:78:16:8d:ef:cb:e7:a2:e3:83:90:06:
                    07:e3:d2:b3:95:9e:71:a6:7f:f5:c0:8b:1a:ff:0e:
                    11:50:5b:8d:ea:2e:d6:a9:2f:22:e9:a4:15:a3:74:
                    95:92:1f:96:c6:53:20:be:5c:4f:5a:00:f6:d7:48:
                    56:aa:40:8a:5e:fe:55:76:e3:c2:9b:10:9e:c4:d4:
                    89:35:ae:f4:f3:ca:84:86:64:0d:c9:56:92:33:59:
                    d7:23:f5:f4:a4:0b:a2:84:b5:9e:f6:f8:9a:44:43:
                    4c:f0:e7:52:33:2a:51:85:79:f3:c5:b1:8c:e3:8e:
                    3f:ea:92:36:9b:11:ba:7e:de:c0:2f:79:a8:a8:e3:
                    25:37:cf:4e:b3:2d:e8:f4:49:be:93:f5:e6:bc:31:
                    a1:27:f9:bf:73:1b:f3:4d:72:87:d0:59:8d:a2:82:
                    83:9a:f7:0e:9b:69:59:31:08:4d:84:70:37:64:a7:
                    18:b6:4d:52:9e:a0:74:04:9b:12:40:c2:42:37:f1:
                    6a:50:5c:bb:0b:e9:e5:f6:9e:5c:e8:bc:3e:a6:fd:
                    93:74:79:a3:c7:b8:21:54:5b:55:37:74:3f:d8:98:
                    d9:92:97:10:81:94:ee:38:45:40:65:8a:e0:fb:5f:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FC:17:F1:29:1B:71:85:C0:87:04:67:F3:82:E9:C2:32:7A:74:00
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:37:19:02:24:22:3e:8c:2a:f5:5f:cc:58:be:5a:e4:1d:f6:
         39:79:0e:dd:f7:3f:e9:52:a8:fd:fd:16:ba:bc:72:c5:fc:96:
         cd:e3:d4:3d:8c:08:69:5b:43:d9:7d:86:a4:51:d7:73:ad:80:
         73:e6:eb:da:c4:d3:1e:80:4c:c5:03:04:0f:41:12:97:85:18:
         7e:0c:c8:5a:e9:76:c0:98:37:75:2a:1c:de:8d:ff:93:44:bf:
         7e:5b:db:f1:b1:e1:72:d4:48:de:0a:78:bc:b0:80:96:c9:21:
         72:aa:e6:f1:c6:7b:e3:1f:8f:1f:de:dd:5f:b6:20:a5:27:b4:
         97:87:da:85:48:17:a7:c6:ff:1f:c5:f4:0e:58:84:db:ad:f4:
         eb:3e:28:20:9c:27:be:81:e1:a2:ea:84:8b:e8:e9:32:43:cd:
         68:ce:ef:02:d5:c1:49:c4:59:0e:ce:f1:ea:4b:96:28:d9:14:
         e7:88:14:9d:91:95:e5:52:9d:13:b6:80:aa:d9:bc:7e:3e:5b:
         67:ab:06:89:6a:4e:50:98:f6:a7:4c:ab:61:12:a4:88:3c:80:
         a6:77:15:b7:7b:0e:ee:fc:3a:0d:eb:4f:ea:74:f8:bb:df:44:
         c3:37:5f:0f:81:c6:b7:51:ef:bf:75:0a:cf:9a:70:fc:2f:de:
         4f:ed:01:22
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUE8I+Rx2i+l70W0UGpqYtXm03OfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczNDUyM0I2REIwMTU3QTBGRDBEQzE1QURFQjUwQjRE
QTU2NzNENDAeFw0yNTA0MTIwMDIxNTdaFw0yNjA0MTEwMDI2NTdaMDMxMTAvBgNV
BAMTKDVGRkMxN0YxMjkxQjcxODVDMDg3MDQ2N0YzODJFOUMyMzI3QTc0MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlBHMyeCvtka4ZXm21DY4jhF4
Fo3vy+ei44OQBgfj0rOVnnGmf/XAixr/DhFQW43qLtapLyLppBWjdJWSH5bGUyC+
XE9aAPbXSFaqQIpe/lV248KbEJ7E1Ik1rvTzyoSGZA3JVpIzWdcj9fSkC6KEtZ72
+JpEQ0zw51IzKlGFefPFsYzjjj/qkjabEbp+3sAveaio4yU3z06zLej0Sb6T9ea8
MaEn+b9zG/NNcofQWY2igoOa9w6baVkxCE2EcDdkpxi2TVKeoHQEmxJAwkI38WpQ
XLsL6eX2nlzovD6m/ZN0eaPHuCFUW1U3dD/YmNmSlxCBlO44RUBliuD7X2sBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUX/wX8SkbcYXAhwRn84LpwjJ6dAAwHwYDVR0j
BBgwFoAU1zRSO22wFXoP0NwVretQtNpWc9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC9ENzM0NTIzQjZEQjAxNTdBMEZEMERDMTVBREVCNTBCNERBNTY3M0Q0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MzQ1MjNCNkRCMDE1N0Ew
RkQwREMxNUFERUI1MEI0REE1NjczRDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEkqhwMA0GCSqGSIb3DQEBCwUA
A4IBAQCJNxkCJCI+jCr1X8xYvlrkHfY5eQ7d9z/pUqj9/Ra6vHLF/JbN49Q9jAhp
W0PZfYakUddzrYBz5uvaxNMegEzFAwQPQRKXhRh+DMha6XbAmDd1Khzejf+TRL9+
W9vxseFy1EjeCni8sICWySFyqubxxnvjH48f3t1ftiClJ7SXh9qFSBenxv8fxfQO
WITbrfTrPiggnCe+geGi6oSL6OkyQ81ozu8C1cFJxFkOzvHqS5Yo2RTniBSdkZXl
Up0TtoCq2bx+PltnqwaJak5QmPanTKthEqSIPICmdxW3ew7u/DoN60/qdPi730TD
N18Pgca3Ue+/dQrPmnD8L95P7QEi
-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net