Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          Prk7pYVnfgcjbTpuJOxiqa084VF7bUl2vQILMehdKlM=
Subject key identifier:   A2:EE:AB:91:F2:BB:19:51:2D:B5:44:34:4E:0D:BF:02:76:D3:C9:74
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       11E2C0D97F1F4421ACF34C6EF52C79648738EC22
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:28:45 +0000
ROA not before:           Sat 12 Apr 2025 00:23:45 +0000
ROA not after:            Sat 11 Apr 2026 00:28:45 +0000
asID:                     274726
IP address blocks:        2804:92a8:9000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e2:c0:d9:7f:1f:44:21:ac:f3:4c:6e:f5:2c:79:64:87:38:ec:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:23:45 2025 GMT
            Not After : Apr 11 00:28:45 2026 GMT
        Subject: CN=A2EEAB91F2BB19512DB544344E0DBF0276D3C974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:79:6c:60:5c:54:df:aa:a9:d0:3b:95:a8:
                    30:eb:2c:76:07:c2:8a:d6:bc:d6:35:2b:f8:8e:d5:
                    c8:d0:c7:0b:e5:05:61:44:fb:a7:d7:4f:6d:90:47:
                    63:e0:03:4a:83:c1:e6:00:98:ca:81:d4:a0:84:3e:
                    7c:20:34:2e:e4:f1:3d:e7:1c:f9:27:f2:3a:7c:6e:
                    04:b4:ae:5a:d0:bd:79:6d:48:ee:08:03:71:51:aa:
                    ca:96:7b:aa:75:cc:e1:89:7b:84:7b:13:b4:d1:ca:
                    44:6d:f7:2a:9f:72:2a:4f:cb:2b:17:7c:d5:c7:7e:
                    be:95:f7:f5:6c:26:af:c0:cd:2b:e0:00:68:7d:0c:
                    12:90:e7:e0:b4:5b:12:5f:3f:2b:c4:12:8d:55:78:
                    c0:1d:b0:60:d4:97:90:db:d3:25:03:78:f7:b6:55:
                    34:b6:78:49:a9:f3:f1:2e:1e:1b:d3:37:ee:17:01:
                    a8:eb:e4:f7:f6:55:c3:9d:2f:c2:c8:9c:68:32:be:
                    6b:2f:29:a5:83:08:07:4a:c4:33:e6:70:02:a6:12:
                    31:d5:ef:2f:e7:3f:e2:56:3a:a2:fe:63:05:77:4b:
                    81:0f:be:54:e7:c7:db:46:f1:11:fa:d9:b3:a0:74:
                    4e:60:b9:ee:16:0e:8a:00:45:79:e4:a4:ef:f0:3a:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:AB:91:F2:BB:19:51:2D:B5:44:34:4E:0D:BF:02:76:D3:C9:74
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:81:e0:a0:15:04:1d:71:10:d7:13:88:55:22:d8:9b:2f:
         c8:e1:3a:f2:64:98:b3:16:6a:35:a4:da:cd:7c:4a:b8:0b:f3:
         f4:66:70:0c:34:72:9b:1f:df:39:79:e3:d8:ef:1a:d0:02:a1:
         52:a7:66:4c:71:35:74:e5:f5:a3:03:75:47:66:8a:36:61:f5:
         46:ae:e9:1d:7f:98:6b:bc:f0:dd:cb:54:69:cb:51:51:02:dd:
         1d:39:10:80:69:0d:1a:0e:4b:3d:38:ac:db:40:70:47:72:6d:
         2b:7b:54:b0:a8:c3:59:d9:5e:8d:b2:b8:f9:74:0b:f2:2d:37:
         53:1d:ba:a9:4a:48:59:11:30:38:3e:b0:e1:82:e3:68:f2:ee:
         3e:94:b2:2b:b9:c6:f4:9f:64:df:1f:00:08:6c:a0:e2:32:70:
         96:8e:16:7e:5b:31:58:92:bb:b2:f7:a2:47:f1:c8:72:45:f5:
         9a:2a:1c:11:eb:52:4a:19:76:ff:a6:22:4e:92:fc:7a:aa:3c:
         a6:78:40:50:7a:22:f7:60:a1:67:97:f9:1f:a5:3e:ff:f2:e2:
         0f:5d:3d:d9:ca:d8:fb:17:7b:e0:b6:a7:44:8a:0c:c9:93:9c:
         9f:14:22:59:8e:99:0e:47:4b:2d:b2:56:80:e6:16:eb:20:0a:
         9a:06:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net