Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa
File:                     323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa (raw, json)
Hash identifier:          yLE0dA1wDU59tThDUYBq0b+yOKlqzWYiYAFVIPZYCLw=
Subject key identifier:   E1:D5:B8:94:A7:4F:AA:B0:46:75:72:E1:A9:E7:BD:BD:A7:4C:F7:E8
Certificate issuer:       /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial:       395B50903F32ACC49F88E236083F3C1C96BC54F2
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa
Signing time:             Wed 09 Apr 2025 14:26:38 +0000
ROA not before:           Wed 09 Apr 2025 14:21:38 +0000
ROA not after:            Wed 08 Apr 2026 14:26:38 +0000
asID:                     263940
IP address blocks:        2804:2818:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5b:50:90:3f:32:ac:c4:9f:88:e2:36:08:3f:3c:1c:96:bc:54:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
        Validity
            Not Before: Apr  9 14:21:38 2025 GMT
            Not After : Apr  8 14:26:38 2026 GMT
        Subject: CN=E1D5B894A74FAAB0467572E1A9E7BDBDA74CF7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:9f:cb:ee:88:0d:a7:b1:0f:ed:b8:af:db:
                    85:6b:6b:2e:84:43:3d:e6:4a:54:18:93:44:bc:97:
                    a5:c7:51:0b:c1:cd:d4:79:8a:7d:1a:08:a8:af:52:
                    7f:97:f3:01:a7:69:61:d9:1d:b6:15:e4:95:77:b0:
                    46:fe:34:e5:62:ae:96:b0:1a:e7:c7:5a:7a:91:53:
                    a1:ef:bb:bf:1d:ad:6d:e2:01:04:d2:42:5c:8a:b4:
                    c4:95:85:1c:c5:9a:b5:2b:8a:4a:5c:d2:4c:9a:03:
                    24:a6:0c:b6:51:2f:43:60:0a:bf:25:38:99:7b:5c:
                    8f:79:49:81:8f:b2:19:b2:15:31:a5:c6:fb:db:85:
                    54:72:63:fb:c2:12:57:96:d1:d5:68:4c:90:a0:2b:
                    85:54:78:fd:54:65:4f:83:6a:e6:f9:b3:6f:19:01:
                    12:b8:61:0b:18:bd:70:3b:39:7d:cc:32:b0:56:bd:
                    7e:65:65:22:c2:20:be:3a:85:59:c3:40:5d:62:e7:
                    63:12:83:d1:6b:55:5f:3e:78:0f:c3:e6:0a:8d:0d:
                    ab:cf:39:29:e5:05:3f:93:fd:8f:1e:93:46:61:bc:
                    cd:6a:df:0b:cf:29:0e:b3:a4:2b:26:1d:cc:42:1f:
                    35:cd:ff:30:1d:a3:91:a6:45:6b:4d:ce:61:64:c8:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D5:B8:94:A7:4F:AA:B0:46:75:72:E1:A9:E7:BD:BD:A7:4C:F7:E8
            X509v3 Authority Key Identifier:
                keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:8e:f9:24:d2:b7:b3:5e:c5:ef:0c:d2:11:f5:57:6e:65:
         14:55:24:81:05:99:a4:27:fa:01:6c:d4:6e:e3:8b:96:97:6e:
         ed:27:9d:7d:61:14:8e:2f:0e:3e:d1:5f:7a:01:da:85:27:d7:
         4f:19:ea:b3:a7:8d:5c:5c:81:64:70:f5:04:e8:b6:7b:9a:b6:
         27:5b:f6:79:7f:e6:e8:cc:7c:d5:47:1b:8c:22:fc:1d:13:46:
         5a:ef:0a:f3:27:a4:98:5e:78:94:df:3b:ce:33:8f:ee:5a:8b:
         65:ff:d2:83:b9:3d:63:66:d3:8d:e3:f9:cc:46:39:ca:b4:27:
         2f:8c:87:9a:5f:f8:c1:b4:d5:42:c9:99:63:6c:ab:84:28:b4:
         a4:3b:a0:90:10:de:45:b1:17:e9:3b:66:89:5b:0b:4a:30:2c:
         4b:f9:ec:de:6e:90:ae:48:80:a1:66:09:1e:18:83:44:3f:62:
         b9:69:f2:f4:99:cb:86:14:1f:61:77:21:3d:75:ba:c9:96:34:
         88:71:d1:22:9d:4c:71:73:2a:83:0e:b6:22:ab:03:3d:2d:63:
         46:27:f0:c6:49:cf:b3:98:4e:98:e8:49:7f:bb:21:b0:c4:92:
         23:27:1b:ca:43:37:58:6f:84:8d:b1:8d:bd:6e:c7:64:07:50:
         f1:44:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:36 2025 by rpki-client on console.sobornost.net