Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          BrUgxc9ZC0au9WfAic5/n12/9wRYkm7jxpnGxWDoSY8=
Subject key identifier:   44:03:A8:C5:C6:E2:03:35:30:09:F9:3D:80:A0:18:99:75:F5:F0:1D
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       41E1E1A6F9C4A9BE7329461F2E2A8F76277C71F5
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:28:15 +0000
ROA not before:           Sat 12 Apr 2025 00:23:15 +0000
ROA not after:            Sat 11 Apr 2026 00:28:15 +0000
asID:                     274726
IP address blocks:        2804:92a8:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e1:e1:a6:f9:c4:a9:be:73:29:46:1f:2e:2a:8f:76:27:7c:71:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:23:15 2025 GMT
            Not After : Apr 11 00:28:15 2026 GMT
        Subject: CN=4403A8C5C6E203353009F93D80A0189975F5F01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:b0:22:1a:09:6d:06:01:60:9a:ac:54:a6:
                    92:cd:65:49:da:a7:62:f7:f9:ca:66:27:5c:a9:94:
                    7a:1a:09:4b:e7:a4:da:f0:9c:83:54:0a:cb:bc:27:
                    c3:27:2c:6f:b5:58:99:68:22:16:07:01:5d:39:b9:
                    c1:b7:73:d4:85:0f:20:74:7e:e3:6f:93:54:47:40:
                    e2:88:b2:43:a6:06:3a:af:93:50:f9:29:35:7b:88:
                    38:b1:66:1a:1a:45:27:0b:18:35:45:a7:08:e2:b5:
                    35:80:d3:6d:71:f5:a0:1f:a5:0d:61:53:bd:ab:d5:
                    e9:01:d8:ae:6e:d2:ea:3a:6b:fb:58:d9:65:52:83:
                    42:66:29:7d:72:ca:53:f3:2a:4d:c5:98:9f:77:63:
                    a6:9d:a8:6e:06:72:38:a6:8e:0a:60:b2:9a:f8:94:
                    94:6e:2e:ef:b8:be:fa:d8:b4:78:a3:b5:75:ba:55:
                    f8:46:74:2e:86:21:fd:37:69:f6:ea:42:5f:ef:1f:
                    7e:4c:27:47:79:44:8c:1f:d6:0d:dc:26:22:53:ad:
                    26:cc:49:e5:b1:1f:7a:ad:08:be:9d:96:87:09:7e:
                    5a:e6:d8:00:b9:47:6b:c9:fb:21:dd:1e:0d:05:93:
                    91:48:90:62:44:01:ac:5c:bb:fd:22:24:79:2a:3d:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:A8:C5:C6:E2:03:35:30:09:F9:3D:80:A0:18:99:75:F5:F0:1D
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:ba:97:f9:35:4c:fd:e1:b1:4a:e3:4e:4d:2a:0b:4d:5b:
         ea:7a:15:21:ae:7f:b1:00:58:6d:5f:47:cf:86:e0:f1:4d:68:
         6a:0c:52:52:f5:96:36:9b:68:9b:52:c5:84:96:cb:c1:14:c2:
         c8:4d:36:fb:b2:6d:10:ac:00:06:42:b3:2f:5a:ff:a2:f7:c0:
         6d:ea:0e:5f:45:41:3b:d5:2b:67:c0:4e:07:03:57:30:b1:b5:
         ed:e4:e9:59:6b:aa:d7:57:83:a7:3a:06:2b:e7:a4:69:2d:5c:
         25:94:0a:6b:9b:ce:f4:97:52:79:c3:62:83:86:97:9c:56:eb:
         fc:99:03:f9:18:62:f4:0f:00:aa:27:54:3c:ad:21:96:5a:05:
         2b:97:88:7c:97:53:ac:43:b4:e2:34:d7:db:46:c5:ee:cc:13:
         8b:38:ed:9d:eb:74:d4:6d:36:9b:64:46:95:be:4e:3b:c2:fb:
         28:4f:af:bb:02:6a:cd:c1:f2:12:8f:09:4e:e8:69:35:b8:32:
         5c:27:ee:d2:43:1e:42:45:7e:44:dc:42:90:34:1e:d3:ce:7a:
         11:34:57:4c:b4:50:7e:d6:46:ea:72:8f:1c:23:c3:d1:90:19:
         12:59:c2:66:e6:f6:5d:1c:96:2b:ab:5b:76:ec:8b:61:06:99:
         d2:4f:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net