Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          UIR5Eep/Z98EJxykcgreNhE1cxN7U5rSM+uAhu6tA/Y=
Subject key identifier:   02:80:60:C2:F4:B4:19:DA:C3:DF:64:F3:40:E2:D1:32:22:DB:92:4C
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       6B80FFE2EC4FA4F855AA6036BC60B18AB7027B62
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:28:41 +0000
ROA not before:           Sat 12 Apr 2025 00:23:41 +0000
ROA not after:            Sat 11 Apr 2026 00:28:41 +0000
asID:                     274726
IP address blocks:        2804:92a8:8000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:80:ff:e2:ec:4f:a4:f8:55:aa:60:36:bc:60:b1:8a:b7:02:7b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:23:41 2025 GMT
            Not After : Apr 11 00:28:41 2026 GMT
        Subject: CN=028060C2F4B419DAC3DF64F340E2D13222DB924C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:7b:1e:08:cf:00:9c:d8:3e:9f:bc:54:48:
                    4e:a2:87:75:70:04:b4:17:56:eb:e7:d1:19:ae:92:
                    70:ce:27:e5:a1:42:4b:1a:de:01:a5:b3:3f:36:73:
                    dd:52:13:53:1e:2e:3e:70:75:e4:70:30:f9:e3:50:
                    a1:2a:a8:01:3c:f6:51:1e:a5:31:e8:e6:ed:7c:83:
                    b1:85:76:19:4a:4b:a7:e2:4f:32:c3:17:01:6f:03:
                    f4:b8:8d:2b:53:b1:8f:b6:85:3d:da:0d:3d:f7:30:
                    32:8b:18:4e:30:8f:6d:6e:9b:1b:8d:02:02:1a:f1:
                    d5:07:ff:8a:03:28:fe:32:be:4c:19:56:ed:a7:2a:
                    07:a3:87:e3:5a:48:23:99:4b:3c:c8:d6:ee:47:ab:
                    44:05:31:e1:d8:c0:46:5c:c6:41:be:0e:4d:0c:44:
                    28:89:53:f2:4d:dc:c2:19:21:da:52:36:e1:5a:d5:
                    90:c0:01:59:e8:4a:8e:3e:4f:c0:81:4b:b8:7b:91:
                    78:b4:22:f3:d7:f7:59:41:f2:1b:ec:aa:6e:03:48:
                    c3:ab:72:d3:70:72:e9:3e:37:4d:06:98:a2:f6:3d:
                    7c:35:74:fe:ce:67:6f:8b:aa:31:e9:98:70:f8:a1:
                    82:ac:f2:43:5e:78:a9:f7:74:4c:2c:d3:36:7e:ce:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:60:C2:F4:B4:19:DA:C3:DF:64:F3:40:E2:D1:32:22:DB:92:4C
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:41:aa:b0:89:75:6b:b3:7c:e9:a6:ce:70:52:32:b9:c5:
         b5:15:bd:90:3b:eb:fb:55:51:fa:74:fd:eb:37:75:1d:95:5e:
         1f:04:02:93:ec:d8:d5:d2:4d:0a:d0:a8:cd:6e:e6:e6:79:c5:
         07:41:a2:94:53:1c:fc:3a:11:a4:ce:96:4b:ea:8b:0f:aa:ae:
         d4:1e:73:df:76:2f:01:b5:68:69:44:9b:e5:b4:ab:d6:e2:14:
         e0:1b:25:ab:f8:32:e0:d0:f6:a2:21:84:8d:5a:e2:94:70:00:
         5d:d6:0c:ff:e4:b5:e4:fe:f0:2c:92:51:22:76:dc:4f:04:df:
         51:2f:4c:f2:17:11:9c:14:c6:f6:e7:3e:f2:60:47:cb:ec:56:
         25:da:a4:b8:8d:5f:d9:40:50:dc:53:87:42:af:4d:83:0c:e6:
         5b:47:b4:3c:80:0a:d0:8e:e6:51:2c:35:88:11:8c:4a:3a:d7:
         a1:df:3d:ec:04:f7:d5:a2:89:a0:2f:2d:6f:c7:e8:d3:ad:37:
         8c:90:4c:dd:fe:2e:5f:34:95:fa:20:28:ff:e9:31:14:89:c7:
         57:aa:73:bf:d7:f1:54:67:f4:c8:71:01:5e:55:2b:83:d8:e3:
         ef:f2:d5:05:45:8b:f2:c3:71:c5:06:c0:36:81:d8:5a:e8:a9:
         75:ac:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net