Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a623030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a623030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          HIlL4w5rbqxDfiyWlVUQ+9eqKP1ZpH+u/TCdA65Rj7o=
Subject key identifier:   94:37:8E:61:73:A5:5B:7F:85:EE:24:FD:08:C7:4F:CB:B4:75:83:1D
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       21E659DE3FC5EFBD68CD055595D60E699B279649
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a623030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:28:52 +0000
ROA not before:           Sat 12 Apr 2025 00:23:52 +0000
ROA not after:            Sat 11 Apr 2026 00:28:52 +0000
asID:                     274726
IP address blocks:        2804:92a8:b000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e6:59:de:3f:c5:ef:bd:68:cd:05:55:95:d6:0e:69:9b:27:96:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:23:52 2025 GMT
            Not After : Apr 11 00:28:52 2026 GMT
        Subject: CN=94378E6173A55B7F85EE24FD08C74FCBB475831D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:13:44:6f:ed:f8:d1:d0:68:83:bf:5f:11:
                    b8:50:75:f1:ce:3d:d0:9f:eb:8d:f5:36:61:40:ef:
                    c2:5d:67:de:54:44:e8:d8:91:8c:1e:2e:90:f9:4c:
                    cf:e4:07:9f:10:cb:01:d2:a7:1a:e5:39:5f:bc:02:
                    d8:d6:76:a9:16:2e:1c:71:7e:a2:f6:5c:8c:91:aa:
                    b8:01:7d:67:11:9a:5f:45:cb:34:b5:5c:34:14:fd:
                    3d:32:b4:03:c5:ad:90:d7:7f:e5:d9:42:24:7c:68:
                    a8:d0:a3:27:5d:14:d7:72:cc:54:60:2d:da:0b:43:
                    bf:be:19:aa:1f:05:08:82:7f:d4:3e:91:ce:be:53:
                    1b:29:eb:1a:86:8f:3d:7c:28:1c:22:e5:db:68:0f:
                    11:da:fb:15:9f:c0:ef:32:10:45:63:60:fc:1b:38:
                    81:77:a0:0e:6d:5b:e0:b7:69:24:c6:9d:1e:8a:ed:
                    91:84:d4:78:33:51:e1:7d:88:14:05:09:0a:90:62:
                    ff:8f:cc:24:d8:6f:15:a9:91:2b:3b:3e:b3:21:a4:
                    c7:35:26:e9:4a:d8:2a:04:5e:38:fc:86:50:0c:71:
                    83:dd:34:f5:5e:dd:ef:e9:d7:68:9d:19:16:44:29:
                    dc:0d:a6:7e:a4:ac:cc:d7:da:79:2f:60:f6:d4:6a:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:8E:61:73:A5:5B:7F:85:EE:24:FD:08:C7:4F:CB:B4:75:83:1D
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a623030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:a6:7c:75:3b:48:17:7b:47:b8:e3:eb:da:52:68:9f:f6:86:
         f7:de:20:6e:0b:f8:ff:ca:0f:6d:d7:d2:cd:1e:66:af:08:03:
         01:c4:44:bb:71:9d:c3:d3:0f:44:cf:c4:9c:1f:ec:e6:43:18:
         ab:a0:05:78:f3:6e:4c:53:d1:41:dc:bf:5d:9c:1d:b9:0d:cc:
         e5:25:ca:fc:cc:1e:e6:a8:5a:cc:be:b3:08:c2:bd:f4:1e:a6:
         a5:8a:c7:cd:35:79:d6:2c:c9:6f:13:96:d4:55:38:a5:25:95:
         a0:69:95:93:57:c2:d0:eb:71:6d:d8:b0:2b:5e:0d:54:c1:87:
         33:72:e4:ed:4f:ed:0c:2f:aa:8c:c6:0a:a5:cf:3a:95:24:1d:
         77:f6:e6:89:88:a2:0f:fd:92:df:51:70:23:c5:25:6d:28:7b:
         21:36:00:23:ae:4b:08:39:eb:47:f1:d6:6b:ad:bf:e6:88:75:
         8f:6b:cf:7c:40:11:85:83:b4:6f:7d:23:0f:af:fc:f4:d9:dd:
         03:d7:d4:a6:34:e1:67:eb:23:3a:35:6c:61:ff:e7:a5:af:6c:
         39:58:15:0f:ab:8d:ff:f2:55:11:30:e1:7d:4a:4f:af:fe:94:
         25:1c:07:84:7f:78:0a:47:07:76:1c:5a:46:5f:4b:75:26:03:
         19:ce:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net