Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          SxjXnqsh0mzUK7h2yAEneCuenv6s4NHwNg4/NrwG8z8=
Subject key identifier:   CB:D7:3E:1D:64:BD:BE:1B:DF:F6:53:7C:0C:01:F5:EB:68:83:35:C3
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       73A42D13ACC88277DD73A114C1A662C1CE823C2D
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:25:52 +0000
ROA not before:           Sat 12 Apr 2025 00:20:52 +0000
ROA not after:            Sat 11 Apr 2026 00:25:52 +0000
asID:                     274726
IP address blocks:        2804:92a8::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a4:2d:13:ac:c8:82:77:dd:73:a1:14:c1:a6:62:c1:ce:82:3c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:20:52 2025 GMT
            Not After : Apr 11 00:25:52 2026 GMT
        Subject: CN=CBD73E1D64BDBE1BDFF6537C0C01F5EB688335C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:13:bf:73:5f:c5:a5:0b:f6:c5:3e:a5:54:
                    58:0d:3d:d5:85:0f:28:fe:0b:00:fa:61:77:e0:e2:
                    9f:46:cb:03:5b:88:a7:97:64:cc:cb:a7:be:c4:37:
                    cc:59:ee:8b:ef:1a:b9:41:66:b7:d8:98:70:74:18:
                    fc:5f:8f:0b:30:7f:cb:07:b8:80:8e:6f:2e:be:f4:
                    78:b6:ff:95:c6:2a:94:38:e6:dc:8f:60:49:78:da:
                    46:9a:7f:2b:80:cf:2b:66:9e:19:e3:e2:69:1c:43:
                    08:15:df:e9:71:34:1e:fd:73:8b:a9:a9:1d:16:76:
                    be:f0:91:39:d7:1d:ff:bf:72:0a:86:7d:9b:73:02:
                    6c:81:fb:27:73:99:54:5e:49:f0:00:cb:1f:15:64:
                    3f:c0:f6:31:e1:43:a2:3b:1f:a6:70:a6:8f:b7:d4:
                    b0:3e:5e:89:f4:3d:3a:31:0b:33:34:a6:0f:a1:e4:
                    48:95:b5:00:71:3d:0e:58:fe:6d:05:7e:59:6f:7e:
                    bd:2b:a5:0c:2f:53:ec:27:cd:d2:c1:73:51:4d:ef:
                    12:3f:87:a0:b6:21:38:66:24:4d:70:78:e2:0b:64:
                    f7:e1:36:f5:5d:c2:f6:eb:80:d2:03:1e:4e:8b:5f:
                    ee:6f:f2:94:6f:1d:89:10:94:15:72:6d:7f:79:5e:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D7:3E:1D:64:BD:BE:1B:DF:F6:53:7C:0C:01:F5:EB:68:83:35:C3
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:20:fa:24:61:b3:17:d5:91:f5:36:1e:cf:06:1b:b9:c8:e5:
         f4:3c:5f:10:e2:06:8e:ab:2b:91:ad:43:80:2d:0f:f0:38:20:
         c7:e7:93:d3:c4:d1:b1:a1:4c:85:88:6d:4e:8c:82:4e:d8:73:
         e1:2d:9b:3e:83:c2:69:be:e1:7d:0c:72:e3:95:aa:ca:f2:9d:
         fa:45:f6:89:e3:e7:28:f1:b4:15:1b:27:5c:0f:02:8a:17:98:
         e4:4b:4c:68:4d:72:e1:c6:c8:9b:ee:d5:5b:6c:ac:69:f7:67:
         0b:59:2f:d3:5b:c7:6c:32:0b:94:4d:c5:12:c1:f4:f7:7a:61:
         55:dc:78:49:1e:a3:e9:80:01:da:dc:7e:88:10:c6:3a:b6:0c:
         54:16:d3:b2:b4:1f:c3:e9:2e:7d:ca:34:9a:43:61:72:8d:83:
         d3:48:11:dc:67:4f:23:1e:6a:a2:97:ac:6a:40:3c:c9:02:d4:
         d4:8f:dc:65:78:08:b1:c2:5e:6e:87:8c:d6:b9:e2:91:a6:62:
         35:9c:fa:01:f5:a6:cc:dd:e5:95:1d:7d:82:56:62:de:c0:a7:
         30:7b:60:35:ad:17:d1:6b:49:8a:10:ad:be:ce:94:35:04:c7:
         f0:30:8e:a9:0c:f1:c8:cd:cd:db:e9:09:2b:d4:cf:5c:40:92:
         87:bb:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net