Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa
File:                     323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier:          Y4j1UL07GarSqF0Yeo6WxfwcwgASa+CPpjG7uWiGLGU=
Subject key identifier:   59:D7:68:5B:DA:74:6B:87:20:1C:D5:BA:D6:DD:32:2D:7F:79:BA:90
Certificate issuer:       /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial:       31D39AC429F9FA758606F745858624620F737C0E
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa
Signing time:             Wed 09 Apr 2025 14:26:37 +0000
ROA not before:           Wed 09 Apr 2025 14:21:37 +0000
ROA not after:            Wed 08 Apr 2026 14:26:37 +0000
asID:                     263940
IP address blocks:        2804:2818:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d3:9a:c4:29:f9:fa:75:86:06:f7:45:85:86:24:62:0f:73:7c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
        Validity
            Not Before: Apr  9 14:21:37 2025 GMT
            Not After : Apr  8 14:26:37 2026 GMT
        Subject: CN=59D7685BDA746B87201CD5BAD6DD322D7F79BA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:48:d7:24:a2:e2:88:9d:76:a5:b7:00:22:
                    2f:1a:5e:6c:59:ab:06:68:d1:65:7e:52:2c:1e:87:
                    83:0d:40:ff:49:6d:0a:b3:44:c4:7b:a5:2f:56:7b:
                    b4:51:87:b9:c3:4b:47:b3:c8:08:f2:4c:b5:6f:88:
                    57:63:b3:0d:55:7a:7d:0e:35:4c:d4:1c:f2:3e:85:
                    8d:dc:ed:ae:02:21:55:bf:0c:90:29:fe:32:fa:ce:
                    18:e2:ba:b8:9d:68:a2:e0:f0:2c:f0:49:59:3a:c2:
                    eb:f9:2e:ef:e7:5c:04:4c:70:52:a7:27:57:08:51:
                    8c:ae:81:e3:12:4b:a8:59:99:78:1d:41:54:4c:56:
                    56:39:ff:7b:b6:d9:ca:ef:fd:5f:eb:b8:4f:99:a4:
                    9f:cc:3a:35:ec:ae:4a:0b:d2:2f:ea:18:c6:05:6d:
                    14:93:f1:f7:e7:f4:71:6a:73:2c:f3:58:38:70:3d:
                    6c:51:4b:41:d9:28:45:f8:3e:64:c2:25:45:62:2b:
                    9c:12:d8:4f:64:20:eb:04:e5:e3:d6:0d:4a:29:e1:
                    c8:6c:41:65:f2:56:2f:2c:44:90:91:02:9b:11:0a:
                    32:35:40:38:3f:69:02:c2:5d:ce:09:1e:e9:83:22:
                    de:fe:96:08:79:bc:a7:28:4b:ee:a0:3b:f5:f4:b2:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D7:68:5B:DA:74:6B:87:20:1C:D5:BA:D6:DD:32:2D:7F:79:BA:90
            X509v3 Authority Key Identifier:
                keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:30:75:a6:fe:0d:b2:77:d8:8a:c0:2e:9c:6e:bc:a0:10:2a:
         5a:68:92:c2:88:1f:be:e3:73:3f:51:bf:46:3f:45:67:ea:09:
         3b:0b:06:bc:d6:ae:eb:25:81:cb:ab:f7:6c:ad:91:13:2d:47:
         03:bb:77:90:1b:36:33:2a:d1:79:ec:e2:e7:c1:e5:98:e3:bb:
         da:6e:be:07:82:76:26:96:6e:3a:0a:a9:76:81:cf:b0:37:4f:
         da:38:27:c1:23:1c:95:1e:5b:33:92:d8:43:26:71:2c:7a:94:
         cd:a3:db:a4:a7:14:aa:62:af:0d:fd:fd:dc:9d:b5:73:5b:ce:
         5b:e7:57:96:d6:7a:36:19:4d:af:e2:cd:f0:57:3a:d3:54:e0:
         94:6b:da:4a:a0:56:5c:bf:c4:ff:83:ed:d9:77:af:e3:4a:25:
         66:9e:cd:3d:c8:db:99:38:fb:6b:1d:c9:88:67:47:03:42:48:
         35:4c:93:9e:0c:9a:47:8d:12:32:23:0b:0c:3c:88:9d:c2:f4:
         88:20:ce:ff:dd:9c:f3:09:80:3c:cc:23:77:3a:87:70:4e:8a:
         6a:3b:d9:a0:4f:59:14:4f:fb:1d:7a:21:8f:9c:c2:06:29:8b:
         e3:82:b8:79:4c:9e:65:1c:a9:8e:cf:14:9b:41:3f:cb:da:96:
         46:d2:a6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:36 2025 by rpki-client on console.sobornost.net