Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          cmKa0ISDdXxIRX2u9HpEwI5TkgMI0o3iXXuwEav8+S4=
Subject key identifier:   EA:7A:70:6F:06:AF:0F:12:46:B3:7A:96:78:0F:AC:11:7B:45:85:18
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       0640D4540712A5059B965B9EC2E229D6F6907C69
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:28:49 +0000
ROA not before:           Sat 12 Apr 2025 00:23:49 +0000
ROA not after:            Sat 11 Apr 2026 00:28:49 +0000
asID:                     274726
IP address blocks:        2804:92a8:a000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:40:d4:54:07:12:a5:05:9b:96:5b:9e:c2:e2:29:d6:f6:90:7c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:23:49 2025 GMT
            Not After : Apr 11 00:28:49 2026 GMT
        Subject: CN=EA7A706F06AF0F1246B37A96780FAC117B458518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:1b:82:da:39:f0:64:a1:0a:de:d9:bb:6f:
                    01:07:e7:d8:e0:d0:ad:6e:86:d1:3b:f4:ae:ac:dc:
                    dd:9e:41:9f:05:83:e4:cf:12:f5:98:1d:bc:de:79:
                    8b:cd:31:ac:fc:c2:46:aa:2b:e6:b8:9e:f9:02:b6:
                    3e:3a:3a:e6:0a:0e:e5:66:05:9a:0d:5f:e3:4a:ff:
                    cb:2e:a7:08:49:af:d1:a1:40:6d:64:40:ce:fd:23:
                    77:59:4d:04:eb:46:f1:79:30:50:6f:ee:89:5a:4a:
                    25:56:d1:bc:86:9c:81:ee:9a:6a:ec:72:c5:74:9c:
                    4c:74:b1:df:0b:31:f0:f8:2b:9a:5c:71:65:75:5c:
                    40:69:10:69:e0:2b:6e:47:06:7b:69:21:fc:1b:67:
                    99:be:81:da:6d:bc:86:3a:43:e5:32:9c:72:4d:a6:
                    b1:be:d8:f2:5a:7b:4d:58:15:a0:a9:dc:ed:97:8e:
                    f0:ca:75:9a:76:b2:88:9f:d0:04:1e:d5:ae:7e:35:
                    95:79:c4:04:97:39:7a:fd:17:32:39:95:c1:11:0a:
                    e4:b7:80:75:db:74:23:4a:eb:8a:6b:11:b8:1e:fb:
                    29:a8:b0:b0:8c:d8:07:59:b9:21:d6:4b:79:1e:77:
                    1f:b7:53:6a:80:b4:2c:5d:a7:bf:a7:d3:45:df:c0:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7A:70:6F:06:AF:0F:12:46:B3:7A:96:78:0F:AC:11:7B:45:85:18
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:9d:7f:a6:04:94:3b:c8:46:56:e9:ea:6c:bf:6e:09:cf:
         05:84:4c:3f:ab:09:cc:02:e1:a8:3d:71:37:b4:19:b5:bb:a9:
         ba:a6:f8:70:40:cc:d5:69:f8:12:7c:ab:c6:bd:9d:e3:de:c6:
         43:bd:93:64:4c:ff:85:b8:fd:2c:69:4f:1a:82:92:54:84:3b:
         c5:08:af:4d:fd:72:91:c0:f2:09:da:4b:7a:21:22:26:59:57:
         b5:37:fd:11:b6:f2:14:31:32:0e:38:b0:e6:42:23:03:3a:c4:
         3e:2e:23:0b:17:d0:24:f3:d9:33:59:0f:83:e2:74:98:4f:2b:
         85:77:ee:54:df:de:ba:aa:7a:79:54:71:a2:b9:c8:c5:8b:39:
         54:14:81:69:ae:34:ca:49:4c:8a:13:c2:64:0f:f7:0f:62:61:
         7e:c2:35:d0:8d:3f:a5:a6:04:04:4a:06:21:ab:c7:e6:f6:2e:
         fc:32:13:9a:a3:d4:05:7c:2e:81:74:d7:a5:8b:28:cb:2f:42:
         95:f9:31:7f:83:6d:ff:1d:d1:02:77:f1:6f:8b:4a:e3:86:5e:
         3f:18:72:ff:95:72:07:3b:41:e6:ae:ae:84:f3:99:ba:ab:b1:
         66:de:2b:64:53:bf:2b:a4:29:ef:f6:6a:d7:08:ba:0a:04:14:
         fb:a9:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net