Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
File:                     323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (raw, json)
Hash identifier:          8uJYxIZ1VXPsUo6ghsZ7qR1HVv+JDka+n2c1Gzm1uvg=
Subject key identifier:   BC:8A:96:08:4E:95:AD:D5:43:D4:5A:98:A1:BC:5D:39:B9:1B:7C:91
Certificate issuer:       /CN=E06071166208659C852E797F8525D625D8FA07FC
Certificate serial:       53D5D8577DDEE21CFEB6B31072573BCC3EABB742
Authority key identifier: E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
Signing time:             Mon 07 Apr 2025 21:14:55 +0000
ROA not before:           Mon 07 Apr 2025 21:09:55 +0000
ROA not after:            Mon 06 Apr 2026 21:14:55 +0000
asID:                     268746
IP address blocks:        2804:5a10:b000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d5:d8:57:7d:de:e2:1c:fe:b6:b3:10:72:57:3b:cc:3e:ab:b7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06071166208659C852E797F8525D625D8FA07FC
        Validity
            Not Before: Apr  7 21:09:55 2025 GMT
            Not After : Apr  6 21:14:55 2026 GMT
        Subject: CN=BC8A96084E95ADD543D45A98A1BC5D39B91B7C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:1b:fb:f0:ca:34:6d:45:d4:2d:3f:41:82:
                    3a:68:18:69:e2:fd:1d:0f:55:43:ac:72:57:88:f1:
                    32:c4:26:86:86:d4:64:2f:f0:91:7f:69:a0:1e:ca:
                    82:f4:ca:2f:68:e1:ac:fa:63:95:e3:87:91:cf:de:
                    ce:ad:9a:e2:45:d0:21:b2:37:cf:d7:b6:5d:36:de:
                    9d:d8:c4:fb:34:15:c3:03:a3:85:a0:dc:53:5e:4f:
                    77:fd:59:a1:25:64:c4:12:8c:f3:40:c1:92:cd:87:
                    39:b9:72:ae:2f:42:96:c2:39:4e:0d:e3:9d:4e:c0:
                    d4:b8:6e:14:f4:ac:2d:d9:d1:10:dd:0b:a9:d5:ed:
                    d5:42:bf:91:31:66:f6:e9:0a:f3:e5:97:aa:e1:60:
                    56:80:2a:8d:a5:47:2d:90:74:6d:36:f8:5d:f2:c8:
                    68:81:4d:af:5c:61:1e:05:b9:4a:45:5d:24:f5:d9:
                    a4:65:15:25:f5:a5:c1:3d:d2:9f:cd:62:87:b7:33:
                    db:70:68:d8:b9:c1:07:cd:7a:27:3e:8f:87:e3:61:
                    9b:7e:0a:e9:a8:b6:3e:30:76:9f:e5:97:6d:44:03:
                    9c:5c:40:9d:ce:39:18:f6:b2:56:70:12:82:46:74:
                    c3:ea:46:7e:c7:e5:ae:4a:b0:a2:ef:c1:a9:cc:7c:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8A:96:08:4E:95:AD:D5:43:D4:5A:98:A1:BC:5D:39:B9:1B:7C:91
            X509v3 Authority Key Identifier:
                keyid:E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:1f:cf:04:b1:7c:4a:a4:d2:cf:1f:45:b9:b7:d0:a7:c0:54:
         d6:c6:d4:f1:25:8b:b6:8b:a3:34:a4:94:cb:77:c1:36:ba:2f:
         87:42:4c:3d:c7:c4:97:0a:01:41:d9:0f:f8:14:53:27:b3:a0:
         f8:7e:ae:bc:6c:7f:e1:2c:a8:b3:0e:c9:f0:9d:96:ce:04:6b:
         57:52:45:bd:1e:b0:6b:02:18:85:a1:55:f2:ba:a8:78:48:b8:
         21:2c:4e:cf:28:0b:49:51:42:03:4e:94:17:ab:b1:ce:85:83:
         5f:26:a2:bb:2a:7d:e6:5a:e7:ff:c8:20:1b:92:21:8c:71:84:
         28:e5:d3:69:1d:3e:d1:c4:d6:96:bb:c1:7b:cb:1e:e4:74:30:
         8f:10:cb:d1:b4:5c:04:59:7c:b5:dd:53:d4:b8:cb:b5:50:24:
         96:71:cb:66:9e:40:71:42:e0:65:4e:de:1f:ff:de:8f:da:8a:
         a1:4a:86:ff:5e:ac:25:6a:ab:0d:ae:1a:63:dc:2a:96:8e:c3:
         82:d8:83:dd:ed:21:d2:9b:79:2d:c8:a0:b6:e4:ea:74:73:f4:
         ee:ee:29:38:f9:fe:6a:44:c5:14:65:a8:fd:4c:c4:77:e9:5e:
         79:cc:41:ec:cf:df:f1:32:44:d4:1b:5e:8d:d1:53:c6:15:13:
         63:f2:73:0f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUU9XYV33e4hz+trMQclc7zD6rt0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2MDcxMTY2MjA4NjU5Qzg1MkU3OTdGODUyNUQ2MjVE
OEZBMDdGQzAeFw0yNTA0MDcyMTA5NTVaFw0yNjA0MDYyMTE0NTVaMDMxMTAvBgNV
BAMTKEJDOEE5NjA4NEU5NUFERDU0M0Q0NUE5OEExQkM1RDM5QjkxQjdDOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPhv78Mo0bUXULT9BgjpoGGni
/R0PVUOscleI8TLEJoaG1GQv8JF/aaAeyoL0yi9o4az6Y5Xjh5HP3s6tmuJF0CGy
N8/Xtl023p3YxPs0FcMDo4Wg3FNeT3f9WaElZMQSjPNAwZLNhzm5cq4vQpbCOU4N
451OwNS4bhT0rC3Z0RDdC6nV7dVCv5ExZvbpCvPll6rhYFaAKo2lRy2QdG02+F3y
yGiBTa9cYR4FuUpFXST12aRlFSX1pcE90p/NYoe3M9twaNi5wQfNeic+j4fjYZt+
Cumotj4wdp/ll21EA5xcQJ3OORj2slZwEoJGdMPqRn7H5a5KsKLvwanMfL7vAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUvIqWCE6VrdVD1FqYobxdObkbfJEwHwYDVR0j
BBgwFoAU4GBxFmIIZZyFLnl/hSXWJdj6B/wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvRTA2MDcxMTY2MjA4NjU5Qzg1MkU3OTdGODUyNUQ2MjVEOEZBMDdGQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMDYwNzExNjYyMDg2NTlDODUy
RTc5N0Y4NTI1RDYyNUQ4RkEwN0ZDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz
ODMwMzQzYTM1NjEzMTMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2Uy
MDMyMzYzODM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWhCwMA0GCSqGSIb3DQEBCwUAA4IB
AQAkH88EsXxKpNLPH0W5t9CnwFTWxtTxJYu2i6M0pJTLd8E2ui+HQkw9x8SXCgFB
2Q/4FFMns6D4fq68bH/hLKizDsnwnZbOBGtXUkW9HrBrAhiFoVXyuqh4SLghLE7P
KAtJUUIDTpQXq7HOhYNfJqK7Kn3mWuf/yCAbkiGMcYQo5dNpHT7RxNaWu8F7yx7k
dDCPEMvRtFwEWXy13VPUuMu1UCSWcctmnkBxQuBlTt4f/96P2oqhSob/XqwlaqsN
rhpj3CqWjsOC2IPd7SHSm3ktyKC25Op0c/Tu7ik4+f5qRMUUZaj9TMR36V55zEHs
z9/xMkTUG16N0VPGFRNj8nMP
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net