Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a3a2f33322d3332203d3e20323632353930.roa
File:                     323830343a3638343a3a2f33322d3332203d3e20323632353930.roa (raw, json)
Hash identifier:          3efO6YXqJu11560XsJgtkv9TPiOzjiTvw3ixL+Bbkhw=
Subject key identifier:   E2:B8:1D:B6:63:CA:24:2B:ED:47:77:7E:AC:56:E9:78:0C:29:99:84
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       2E1623FA5D106CC26B571A75614CCDDF22B169FE
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a3a2f33322d3332203d3e20323632353930.roa
Signing time:             Sat 08 Feb 2025 00:50:54 +0000
ROA not before:           Sat 08 Feb 2025 00:45:54 +0000
ROA not after:            Sat 07 Feb 2026 00:50:54 +0000
asID:                     262590
IP address blocks:        2804:684::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:23:fa:5d:10:6c:c2:6b:57:1a:75:61:4c:cd:df:22:b1:69:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb  8 00:45:54 2025 GMT
            Not After : Feb  7 00:50:54 2026 GMT
        Subject: CN=E2B81DB663CA242BED47777EAC56E9780C299984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:e9:f9:b6:fa:65:84:09:04:3e:24:11:62:
                    d2:7f:f9:75:be:c4:82:c6:73:c5:5e:bb:e7:91:40:
                    62:dd:27:e2:d5:a4:2d:99:fc:f9:55:ab:5e:c5:25:
                    bc:14:78:9b:83:67:12:7b:ea:8c:01:c0:91:17:6d:
                    e9:81:a6:47:5f:c8:7d:f4:ed:5b:ab:7d:d3:52:cb:
                    c2:66:74:d0:ae:ec:96:8e:c7:05:10:90:99:f7:40:
                    80:8a:db:32:71:ff:84:c7:f4:10:27:ad:bd:17:57:
                    22:10:a7:2c:a2:bb:dd:27:39:f0:9d:cc:0c:28:35:
                    20:d6:86:c5:2d:a8:7e:e0:97:e2:2f:1a:8d:bc:9c:
                    94:0c:ac:73:ca:c6:b3:b6:cc:cb:d6:72:c8:9a:6a:
                    f5:57:80:47:43:5c:1d:ad:29:6f:27:1d:64:79:ec:
                    11:49:99:79:0f:db:fe:ad:37:3e:82:bf:97:66:e9:
                    7f:fb:eb:cf:4a:e1:2d:60:06:a5:2f:75:8d:3a:0c:
                    0a:b3:2c:0a:4c:74:24:d6:4b:34:00:ae:9e:62:0f:
                    ea:d6:06:8b:14:9b:72:a6:1a:33:81:a8:6c:76:74:
                    96:dd:d5:0d:8b:2b:98:99:5d:25:ca:3d:9f:16:a1:
                    91:1f:17:14:f7:c2:9f:65:f7:52:e8:c4:93:d8:3b:
                    e5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B8:1D:B6:63:CA:24:2B:ED:47:77:7E:AC:56:E9:78:0C:29:99:84
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a3a2f33322d3332203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:684::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:94:3b:39:2f:b9:5b:0e:ee:b3:2f:49:57:1c:80:dc:6d:15:
         ff:22:38:54:96:6e:d1:e1:d6:15:c6:88:57:41:23:f8:74:db:
         ec:13:4f:67:b1:f1:61:d0:98:8d:73:55:8c:36:d6:46:50:6d:
         ef:dc:1d:b2:13:ce:cb:0a:42:43:05:74:10:1b:ad:d2:f1:77:
         97:75:4e:c8:06:bc:79:94:aa:ce:ba:3a:4c:2c:75:22:44:b7:
         fe:d3:76:b2:54:3a:95:90:86:91:3d:93:26:59:ec:b6:1a:20:
         4f:3c:86:c7:b6:f8:d8:c4:17:08:07:f0:08:a9:80:92:45:64:
         51:62:65:04:68:16:08:02:3b:0d:a7:ac:82:e3:61:6a:4c:03:
         0e:21:97:31:1e:4e:8d:7b:cd:84:bc:28:30:4d:d9:d5:c4:f8:
         ac:32:d0:fb:10:05:de:d1:da:9f:9e:b6:92:9b:ef:22:5f:2b:
         49:55:c5:2d:ba:b6:53:34:b6:b7:32:0e:c3:6b:d4:f6:11:31:
         21:e6:cb:ea:7c:c2:44:7a:6a:9c:d3:c1:dd:f3:67:14:53:97:
         8c:78:27:18:d8:5a:cf:d2:cd:27:8a:f9:47:b5:25:fd:64:a5:
         db:ef:64:11:06:c4:50:0c:62:af:b1:21:28:41:a6:f4:d4:0b:
         3b:41:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 27 03:43:20 2025 by rpki-client on console.sobornost.net