Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          sUkfqZdV7mhgnDF5UKW5twdIErdE8zB6Xqj+LU1ot/M=
Subject key identifier:   AF:FE:5E:9C:16:F3:EC:01:87:53:1C:50:3F:D8:57:C5:C6:78:13:C3
Certificate issuer:       /CN=E06071166208659C852E797F8525D625D8FA07FC
Certificate serial:       55B2C936CAE7CD6811036A45874D6296F884290A
Authority key identifier: E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Mon 07 Apr 2025 21:14:54 +0000
ROA not before:           Mon 07 Apr 2025 21:09:54 +0000
ROA not after:            Mon 06 Apr 2026 21:14:54 +0000
asID:                     268746
IP address blocks:        2804:5a10:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b2:c9:36:ca:e7:cd:68:11:03:6a:45:87:4d:62:96:f8:84:29:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06071166208659C852E797F8525D625D8FA07FC
        Validity
            Not Before: Apr  7 21:09:54 2025 GMT
            Not After : Apr  6 21:14:54 2026 GMT
        Subject: CN=AFFE5E9C16F3EC0187531C503FD857C5C67813C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:ea:d7:c7:ee:b2:4c:2e:c0:c0:1b:75:90:
                    27:b8:91:2b:d0:93:b0:cf:5b:a3:7e:5e:98:8c:37:
                    1d:f6:ca:41:f8:ef:9d:0c:c8:6d:5d:e4:8f:df:e0:
                    ff:a5:52:df:be:84:24:bd:14:5f:25:6d:3a:ce:a6:
                    0b:ce:c8:a5:3d:83:87:de:c9:31:d3:8c:85:23:dc:
                    36:a1:dd:1d:a5:a9:c7:c8:c6:84:0b:86:e9:bd:c9:
                    6e:79:b9:09:2f:4c:da:9b:32:a8:d4:bd:07:38:df:
                    5d:e1:9e:2e:f5:08:22:8f:56:60:7d:34:cb:2c:c2:
                    cb:aa:48:f9:ae:86:50:f0:82:00:d7:df:04:87:9c:
                    bc:04:21:b2:38:1f:83:0c:b6:a9:14:06:ac:cf:cd:
                    94:f5:1b:d7:f8:dd:7a:59:30:49:07:24:bd:fd:f9:
                    d8:76:d2:c7:06:8e:79:a5:81:82:f7:dd:a4:6a:34:
                    53:07:d5:5f:fa:d8:c3:c1:45:4e:92:73:d7:09:24:
                    60:44:91:dd:f3:1f:35:f3:d5:cc:30:ad:42:c3:ca:
                    f5:71:79:c6:52:fe:74:65:b5:15:1c:db:7f:f6:01:
                    3a:9d:c5:0e:64:b9:0d:d6:eb:a1:fc:00:b6:8f:e2:
                    07:53:c9:5f:0a:de:15:e1:e6:ce:7a:08:55:0d:07:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FE:5E:9C:16:F3:EC:01:87:53:1C:50:3F:D8:57:C5:C6:78:13:C3
            X509v3 Authority Key Identifier:
                keyid:E0:60:71:16:62:08:65:9C:85:2E:79:7F:85:25:D6:25:D8:FA:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/E06071166208659C852E797F8525D625D8FA07FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E06071166208659C852E797F8525D625D8FA07FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:65:8f:7a:32:99:bf:5d:91:89:ff:89:53:e0:ba:a2:61:6b:
         d3:a5:38:63:e2:12:d5:6a:cd:00:31:42:50:27:1b:f2:78:33:
         ea:a9:4a:69:65:3a:3e:47:25:36:be:fb:eb:71:de:b2:b8:3c:
         66:e1:a0:0b:fc:3c:f9:98:3c:82:ea:a3:02:1c:bd:29:aa:8d:
         27:34:e4:9a:16:ec:f8:d2:17:d3:3b:a6:dc:0d:6e:8c:ac:88:
         6d:9c:92:8a:e2:05:b0:60:f3:f1:32:fa:31:f7:1e:2e:07:a9:
         aa:9f:c2:38:31:27:15:ee:18:b0:78:a0:e1:47:80:87:bc:8d:
         16:4c:06:80:02:dd:84:dc:80:e4:9d:51:fa:dc:13:c2:12:f3:
         73:58:24:aa:f3:a6:f7:9f:4b:d1:bf:44:02:28:e8:ac:87:32:
         49:e7:7b:c0:5d:c5:d4:c0:fe:11:f1:11:82:df:f6:13:a2:3b:
         88:e2:c3:a8:ae:76:ab:bd:e0:39:fe:cf:96:d9:00:26:37:b7:
         99:ac:3d:25:ce:bf:d5:c0:06:52:54:65:95:f8:dc:f4:28:9f:
         ea:1b:ac:b7:91:ff:c3:72:f9:3c:a4:31:4d:04:76:6c:ef:62:
         38:2b:d8:58:00:35:58:ae:cf:60:20:66:81:7b:c2:68:21:a9:
         1d:cc:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net