Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          CL/VhJXlWGgnaO8XYYV1JYCJoFvbXX7DjoATt460wH8=
Subject key identifier:   08:FA:25:24:43:93:89:E8:52:8B:36:0F:CD:8E:D3:80:C9:AE:82:4E
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       1F4CF08A5F9FE0C23ECB788BFD9709CD186CEC03
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:23:02 +0000
ROA not before:           Mon 04 Mar 2024 21:18:02 +0000
ROA not after:            Mon 03 Mar 2025 21:23:02 +0000
asID:                     263661
IP address blocks:        2804:1128:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4c:f0:8a:5f:9f:e0:c2:3e:cb:78:8b:fd:97:09:cd:18:6c:ec:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:18:02 2024 GMT
            Not After : Mar  3 21:23:02 2025 GMT
        Subject: CN=08FA2524439389E8528B360FCD8ED380C9AE824E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:35:63:ca:94:05:d6:ae:7a:76:f4:b9:67:
                    2c:34:b4:7c:1c:89:73:40:de:94:06:e2:cf:70:80:
                    d0:3e:47:28:d8:9e:9d:58:e5:b0:d7:cb:f8:0b:42:
                    10:77:fe:9f:e0:f6:62:47:17:9a:26:d7:9c:d0:f1:
                    00:30:0a:03:11:35:f7:fc:96:aa:9a:f7:9b:87:46:
                    e4:1f:61:bf:72:ec:07:fd:7d:c5:23:ed:84:f7:41:
                    27:64:e3:42:3c:57:b9:28:89:3a:1a:4d:b1:5c:36:
                    dc:d7:9b:71:86:b0:45:85:99:3b:00:38:89:f9:25:
                    2c:ba:67:2d:86:29:d1:3c:c3:7f:72:8c:e9:3e:c4:
                    8f:02:36:02:e5:8b:e4:86:cd:49:3c:36:94:46:f7:
                    bd:c2:08:54:fc:69:e6:3f:1c:23:64:4b:12:25:fb:
                    d9:c0:1b:02:f4:45:60:ed:f0:0f:45:50:46:a0:35:
                    30:2c:7e:8b:b1:02:8e:89:9b:e9:9a:4a:05:de:27:
                    48:5e:34:ea:50:31:e1:93:25:ef:f5:0c:f3:42:b1:
                    49:cb:36:ff:19:3f:63:bf:d8:c7:f8:88:10:e1:f6:
                    06:8a:83:f9:05:48:eb:2d:1f:64:c7:f9:93:5e:38:
                    ca:56:01:96:a6:7d:45:fd:fb:f9:e7:fd:9b:05:26:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FA:25:24:43:93:89:E8:52:8B:36:0F:CD:8E:D3:80:C9:AE:82:4E
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:13:c1:4d:62:e6:6f:b0:36:f2:bf:d9:a2:45:e4:fb:cc:
         0c:e8:0f:50:65:1f:7f:b9:2a:a3:54:e8:53:73:1c:10:e0:6f:
         a6:bc:f5:72:6c:b6:5a:6e:b8:bd:05:80:d6:21:c2:71:c5:96:
         e2:4b:f3:e6:3a:87:e4:bf:fd:53:0d:18:42:d7:23:68:4a:35:
         3c:c2:b1:85:d6:82:38:d9:0b:ff:d6:06:ab:21:5f:c4:f6:36:
         a8:49:ea:8f:e8:f6:3a:15:b7:fb:06:00:da:84:e8:f9:b5:b1:
         fb:ce:8f:6a:38:84:12:00:56:9f:87:1b:9c:88:1d:6b:1c:2f:
         25:22:b9:32:5c:43:56:83:d1:63:e7:14:f8:29:49:59:c9:3b:
         93:0d:31:d4:c2:8b:25:f4:c1:99:ff:ea:a5:b1:67:4e:3c:12:
         a8:07:cb:ff:3e:eb:61:73:91:26:bd:46:0c:52:c2:68:1c:ef:
         34:ee:50:c0:27:a0:73:63:19:cc:49:dd:69:2b:20:64:f3:c3:
         d6:00:94:99:89:cd:a6:b9:da:ee:9f:a4:44:9c:64:3f:ed:78:
         ab:22:23:b6:90:a1:f2:94:c5:8a:2f:fc:f1:fe:bb:a5:d1:e8:
         c3:db:57:25:43:87:4c:5d:78:05:51:1e:af:28:ba:dd:23:19:
         f9:09:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net