Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          SFZOcWKWgDtZRG5ehI1Gpi4tTFCmUnm+fG1X8F3CEDA=
Subject key identifier:   67:98:6E:39:36:B3:DB:54:34:97:B3:B3:83:27:CD:4E:79:0B:D5:A5
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       0980F69BC82754835EF7663A03CCE11083A298A9
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:28:56 +0000
ROA not before:           Sat 12 Apr 2025 00:23:56 +0000
ROA not after:            Sat 11 Apr 2026 00:28:56 +0000
asID:                     274726
IP address blocks:        2804:92a8:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:80:f6:9b:c8:27:54:83:5e:f7:66:3a:03:cc:e1:10:83:a2:98:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:23:56 2025 GMT
            Not After : Apr 11 00:28:56 2026 GMT
        Subject: CN=67986E3936B3DB543497B3B38327CD4E790BD5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:ee:96:65:e8:47:d9:34:29:67:ef:f9:c2:
                    64:99:34:b4:11:35:35:6c:0f:41:2a:69:b1:a5:34:
                    e7:6b:24:47:b2:fa:fd:1c:84:9c:8d:3c:1c:38:84:
                    11:1a:70:d6:41:76:53:d1:de:b9:58:54:03:d7:31:
                    89:0a:9b:6c:79:6f:5c:4f:cc:8f:09:1c:84:2f:63:
                    d3:cf:eb:ab:65:cb:1d:ac:66:0d:24:7e:84:dc:5c:
                    72:9c:d2:4f:e8:e9:17:1f:14:45:12:1b:10:65:d9:
                    c0:42:b1:82:13:24:cf:97:b8:d1:d5:0a:28:15:a5:
                    f6:bf:a4:3e:b7:5f:00:3f:c7:a6:2a:b8:47:c2:48:
                    fb:3c:ae:22:15:0a:5f:97:88:ad:75:35:4b:f7:dc:
                    9f:f1:70:d5:8c:4f:65:eb:87:9d:ba:78:be:72:76:
                    03:35:3a:50:ea:8d:c7:00:b6:f6:43:b0:77:e4:9d:
                    0e:ae:84:e7:23:5c:db:a6:d5:6f:ba:39:4a:f8:25:
                    8b:d0:62:7f:80:b5:4e:6f:19:02:b3:b8:c6:d2:87:
                    79:20:d9:46:23:4d:ce:af:65:85:b3:9f:9f:6d:5c:
                    76:c0:11:84:0d:a3:f2:c9:5a:cb:79:09:77:24:38:
                    9f:cd:85:0c:96:59:99:90:5e:cf:c1:7c:d5:8b:89:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:98:6E:39:36:B3:DB:54:34:97:B3:B3:83:27:CD:4E:79:0B:D5:A5
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:db:ec:4b:a2:4d:b6:d1:92:2b:c7:32:25:36:d9:ac:e2:71:
         9a:f1:af:eb:1b:d5:0d:bd:a3:42:14:87:d9:c5:44:06:05:4d:
         48:de:74:c3:75:a2:0b:b0:9b:53:65:92:3f:5e:69:58:1e:da:
         43:63:e0:cf:52:8c:3b:60:6c:0e:13:c2:8c:50:7e:58:62:72:
         d5:6a:01:76:2f:d5:86:ab:04:45:04:13:d4:f4:5e:17:24:d9:
         22:79:67:9a:a0:e8:a4:cb:cf:4c:91:a6:c3:4c:64:82:51:f0:
         9b:4e:64:36:4d:9f:07:a6:0d:93:bf:c0:8c:9e:e2:60:55:dc:
         1a:c1:5f:29:ef:79:bc:47:75:05:98:c7:7a:30:50:2a:d3:49:
         64:3f:66:84:e2:3a:21:5c:bc:fe:7c:6a:6e:21:82:cb:84:69:
         ba:f4:b2:10:a5:a7:92:34:33:aa:45:16:3b:ce:a3:8c:5c:12:
         83:f0:dc:20:89:93:f5:88:13:b0:00:49:73:54:5d:72:90:2d:
         00:8c:2a:eb:28:15:bf:53:5a:52:e7:b2:a0:08:7f:29:cd:ae:
         d2:92:24:5f:dc:1c:de:7a:68:47:73:11:f1:02:16:d1:af:85:
         d1:f5:c7:28:dd:15:12:f1:65:c0:0f:eb:0c:5a:8e:ee:1c:58:
         c2:c0:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net