Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa
File:                     323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          p1U0CYkgTq3eSMrbEeye08G2ZTfJcqqxOhETpcT6rqA=
Subject key identifier:   C2:7F:2E:01:9B:F9:97:22:4E:F0:B9:49:68:A6:B1:F5:37:03:FC:EA
Certificate issuer:       /CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
Certificate serial:       2C3815F1F3F4D476E14D86EA981EA1E3F1BAD351
Authority key identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa
Signing time:             Mon 07 Apr 2025 18:06:39 +0000
ROA not before:           Mon 07 Apr 2025 18:01:39 +0000
ROA not after:            Mon 06 Apr 2026 18:06:39 +0000
asID:                     271624
IP address blocks:        2804:7e70:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:38:15:f1:f3:f4:d4:76:e1:4d:86:ea:98:1e:a1:e3:f1:ba:d3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
        Validity
            Not Before: Apr  7 18:01:39 2025 GMT
            Not After : Apr  6 18:06:39 2026 GMT
        Subject: CN=C27F2E019BF997224EF0B94968A6B1F53703FCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:f6:9f:1d:6c:c3:86:30:23:a0:6d:c2:b2:
                    0d:b7:bc:b6:81:45:c3:1d:dc:3d:2b:99:51:fd:02:
                    d8:76:0a:bc:fa:1e:1c:7a:db:45:99:f9:88:96:ad:
                    dc:79:aa:66:72:5a:1b:3b:78:65:b7:da:a1:94:92:
                    ad:f3:76:89:54:d7:eb:bf:35:70:25:5e:db:e7:3a:
                    a0:64:3d:da:42:73:15:45:d2:c4:12:39:57:2b:ec:
                    48:82:30:c7:1d:90:a6:2c:63:b1:c5:e0:97:6c:49:
                    42:7d:27:95:59:39:ac:d8:9d:54:65:14:b1:cb:51:
                    18:80:da:8f:47:de:3f:7e:a0:d5:a6:10:01:09:aa:
                    f6:a8:f1:e2:9f:e9:f5:21:e2:9e:49:73:b7:6f:ae:
                    46:6b:bc:62:37:4f:41:5a:16:7b:5f:93:68:f2:11:
                    15:94:c9:84:ba:b6:02:7b:5f:05:8d:b9:af:f8:a5:
                    87:b3:e3:94:06:28:2c:bb:59:74:ab:1a:23:40:40:
                    97:ea:16:58:5d:04:ae:05:b3:d9:45:8a:3c:cd:82:
                    a5:99:a2:13:2f:37:89:5e:f4:fe:cb:8e:c0:b5:3a:
                    8f:4e:9d:39:8d:58:f9:e4:78:08:30:33:3a:b5:6b:
                    dc:5c:09:d4:1d:9e:20:15:85:64:3b:6c:75:d6:eb:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:2E:01:9B:F9:97:22:4E:F0:B9:49:68:A6:B1:F5:37:03:FC:EA
            X509v3 Authority Key Identifier:
                keyid:D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:16:49:39:a4:55:84:31:62:b8:5e:ed:2a:b5:0a:38:f0:
         ef:7f:0b:99:b0:90:3d:40:2f:e4:4f:12:12:96:2d:9f:66:4f:
         84:1f:96:c3:19:26:f2:c0:5b:65:84:4a:b5:9c:03:6c:b1:41:
         f1:b8:d0:1f:fb:b5:f2:ae:fc:ef:14:83:de:e4:b1:91:59:81:
         30:ee:e6:5b:53:db:a3:8f:83:bc:a5:51:db:ed:06:aa:f6:ef:
         2d:f8:24:0b:e6:2c:65:2c:5c:05:cb:76:81:4f:60:93:28:de:
         a6:f7:16:cb:dc:13:c2:48:99:27:9f:2a:fa:a9:69:6d:2b:d6:
         c0:e5:03:05:c8:dd:c9:43:08:92:c9:51:50:aa:65:51:cd:2b:
         eb:82:fe:4d:a5:38:12:56:79:1f:fb:d5:b3:e2:c6:0e:7e:3d:
         63:89:04:f1:a7:4b:9e:34:fc:93:b2:a0:c1:d2:be:7d:28:1e:
         a7:0f:6b:8c:4f:75:4a:69:db:bc:d4:31:e2:df:c4:01:20:0a:
         be:9b:11:e3:d1:10:ba:87:df:c7:69:54:65:13:ba:af:18:37:
         e9:6f:73:c5:c6:7a:10:df:49:42:0d:2c:b9:b3:32:c2:d9:3e:
         ac:d9:e9:46:fc:57:b7:f8:86:9c:67:61:71:c3:cc:42:f2:0f:
         b3:b8:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net