Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a383030303a3a2f33332d3333203d3e20323637393932.roa
File:                     323830343a353635383a383030303a3a2f33332d3333203d3e20323637393932.roa (raw, json)
Hash identifier:          s/7BoqI66FPe6h6ALOLvnyOTDTq3BY4yCham2LLUWaY=
Subject key identifier:   10:3E:50:46:14:34:C2:F3:99:2A:01:3C:4E:F1:8D:9B:FF:7B:8C:CF
Certificate issuer:       /CN=ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5
Certificate serial:       031E6EA69F4310F14A4F22CC184D6B060956CF2E
Authority key identifier: ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a383030303a3a2f33332d3333203d3e20323637393932.roa
Signing time:             Mon 31 Mar 2025 14:13:23 +0000
ROA not before:           Mon 31 Mar 2025 14:08:23 +0000
ROA not after:            Mon 30 Mar 2026 14:13:23 +0000
asID:                     267992
IP address blocks:        2804:5658:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1e:6e:a6:9f:43:10:f1:4a:4f:22:cc:18:4d:6b:06:09:56:cf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5
        Validity
            Not Before: Mar 31 14:08:23 2025 GMT
            Not After : Mar 30 14:13:23 2026 GMT
        Subject: CN=103E50461434C2F3992A013C4EF18D9BFF7B8CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:70:29:72:58:eb:1c:62:bf:96:5f:a2:1c:
                    8a:9c:55:1c:f8:d9:de:be:af:65:df:20:bd:62:ec:
                    a7:5d:0e:15:48:7c:aa:33:de:35:c9:93:b9:12:87:
                    b3:d2:c4:77:79:91:f9:68:cc:59:47:bc:b7:dd:85:
                    d9:c7:37:4a:62:66:21:6f:8d:dd:ed:6c:09:b1:d9:
                    7a:9d:ca:8d:db:e7:61:a1:e4:00:d0:b9:cf:1d:c7:
                    30:88:bb:48:37:84:42:c7:b5:e7:95:ff:9a:96:59:
                    cd:28:f5:4e:2a:ca:c5:53:f0:55:81:d2:ee:8e:86:
                    17:52:f1:b6:0a:71:9e:65:ee:ad:2c:f8:79:cc:6b:
                    f7:98:f8:f5:b0:28:4a:8c:c7:a1:52:e4:43:2e:e8:
                    32:93:cc:07:e4:29:96:fc:ae:a8:80:53:9b:57:c5:
                    17:02:1c:48:71:10:b7:cc:77:19:ed:34:52:33:fc:
                    1a:59:e4:44:b5:67:2a:ae:c9:db:50:24:c8:76:30:
                    cd:6c:cb:2e:ce:90:da:8a:f8:0a:c1:08:2b:f0:be:
                    08:e0:d9:5b:8e:31:f3:25:05:2a:7e:c7:c8:01:ee:
                    98:cc:29:f5:ec:e7:47:5f:60:25:6e:9a:c4:f5:f1:
                    a3:23:d8:22:fa:d2:b8:8c:23:a0:16:1f:79:ee:6e:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3E:50:46:14:34:C2:F3:99:2A:01:3C:4E:F1:8D:9B:FF:7B:8C:CF
            X509v3 Authority Key Identifier:
                keyid:ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a383030303a3a2f33332d3333203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5658:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:25:5b:eb:f8:26:85:e1:86:f7:81:5b:ad:c2:0c:da:4a:c8:
         a3:c1:60:46:4b:b7:aa:78:44:e1:bb:2a:ad:a9:a5:11:9d:6a:
         64:3d:0a:5e:0a:d5:57:9d:a3:7c:fd:96:3e:10:f6:e0:e0:33:
         6c:73:c9:5c:d2:e1:9e:45:0f:47:89:86:e9:a9:83:da:72:16:
         6e:5c:33:c1:1c:1d:18:64:c7:c5:a8:d8:a6:db:83:f8:93:0b:
         9e:b5:11:a5:b0:5f:b5:d4:fd:63:3c:fb:31:64:d2:be:ee:c4:
         15:6e:ce:0f:c4:2c:94:1b:62:58:9a:71:51:f3:ef:41:92:d3:
         da:cb:c8:bb:84:a9:5b:64:65:d0:ff:55:5b:42:19:52:3d:31:
         2b:0f:da:9e:21:a3:75:24:bd:6a:d2:0f:a2:31:db:4f:84:57:
         56:3d:0f:2a:ee:b9:4f:13:c6:a0:ea:6c:88:67:c7:a3:db:79:
         f4:8c:33:7c:a9:60:31:90:5d:2a:36:49:0a:ca:6f:6d:f3:12:
         6a:2b:1f:ca:06:e5:4d:67:cc:a3:93:0b:32:dc:6e:80:18:7d:
         0e:30:64:b3:95:83:a5:9d:77:20:92:d8:b8:e4:a0:64:a9:a6:
         6b:fa:1a:f2:f1:5d:cd:37:7a:45:3b:c0:fc:39:63:23:14:59:
         74:a2:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:59:35 2025 by rpki-client on console.sobornost.net