Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa
File:                     323830343a323635303a3a2f33322d3438203d3e20323634333430.roa (raw, json)
Hash identifier:          TsVVyaZ2OPX/rrlqjSLc++J80aRUCV/tM5O/1sGnjJw=
Subject key identifier:   A1:20:34:98:CF:0C:BE:A1:D9:13:C2:AD:32:86:26:4A:8C:FC:03:36
Certificate issuer:       /CN=4A6149A4F78C72B47BD82323BFC897F76AFA79B7
Certificate serial:       56315E1EBC6F22F1D0A98686B9440B386913E51E
Authority key identifier: 4A:61:49:A4:F7:8C:72:B4:7B:D8:23:23:BF:C8:97:F7:6A:FA:79:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa
Signing time:             Thu 04 Apr 2024 08:05:46 +0000
ROA not before:           Thu 04 Apr 2024 08:00:46 +0000
ROA not after:            Thu 03 Apr 2025 08:05:46 +0000
asID:                     264340
IP address blocks:        2804:2650::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:31:5e:1e:bc:6f:22:f1:d0:a9:86:86:b9:44:0b:38:69:13:e5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A6149A4F78C72B47BD82323BFC897F76AFA79B7
        Validity
            Not Before: Apr  4 08:00:46 2024 GMT
            Not After : Apr  3 08:05:46 2025 GMT
        Subject: CN=A1203498CF0CBEA1D913C2AD3286264A8CFC0336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:74:0f:c0:84:c0:61:ea:fa:0d:10:94:06:
                    72:00:a0:3c:0b:07:81:ed:94:70:59:aa:41:e0:64:
                    b6:f2:4d:e4:b4:16:51:9b:ef:7c:79:81:45:2b:99:
                    f2:2e:d6:68:29:42:d6:90:d6:4d:1b:9d:08:41:a0:
                    bd:81:c9:fb:5d:12:d6:90:78:68:9b:12:2a:76:3f:
                    d1:af:b1:dc:be:2e:4f:ca:a2:36:a3:2d:3c:aa:b1:
                    33:9d:f6:92:05:2e:71:c4:2d:df:d1:59:01:f5:04:
                    18:e9:d9:31:1a:40:14:3f:ff:6a:37:9f:b0:b2:d7:
                    84:4c:c3:3a:80:e9:54:7d:08:1f:4b:4f:9d:e0:c7:
                    41:07:5e:96:06:ad:14:ac:c0:f0:5c:8c:c7:ac:4b:
                    58:25:d3:64:f3:05:0b:3d:e0:66:ea:ce:c7:89:be:
                    94:d0:0a:31:7f:12:49:90:58:af:9d:d1:f1:56:8b:
                    a2:52:f4:f2:a5:2d:28:d2:43:7f:2b:cc:d7:91:49:
                    e6:f6:12:be:19:06:a4:c0:c7:ad:70:81:4f:d7:28:
                    79:e7:46:48:67:af:51:65:84:e1:d2:b2:97:f5:ca:
                    af:bf:e1:d4:fa:ae:89:60:c6:ae:8c:92:11:f2:99:
                    0e:f6:3d:64:34:f3:85:12:15:f1:69:43:7f:f3:82:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:20:34:98:CF:0C:BE:A1:D9:13:C2:AD:32:86:26:4A:8C:FC:03:36
            X509v3 Authority Key Identifier:
                keyid:4A:61:49:A4:F7:8C:72:B4:7B:D8:23:23:BF:C8:97:F7:6A:FA:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2650::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:6c:14:c8:71:01:f7:70:48:13:33:4c:cc:1a:e2:03:05:89:
         43:74:91:66:7a:22:a6:43:e3:a2:ea:2f:ef:18:19:b9:eb:b9:
         7b:8d:29:92:db:14:70:b5:55:c8:d6:40:d3:36:fe:93:4a:04:
         bd:4d:7e:68:96:cd:f9:3f:16:ee:1e:3c:cc:5d:5c:90:64:13:
         ad:23:2b:a3:ef:2d:98:18:c6:40:98:5f:2f:93:a2:ac:74:52:
         d3:e8:3b:c9:77:f0:4d:ef:b4:aa:25:64:9b:46:94:11:7d:08:
         f2:32:b2:39:7f:27:62:de:6e:79:b3:23:bd:fc:a4:e3:ff:94:
         5c:99:64:8b:65:47:d7:2e:b1:4f:e6:ec:b6:12:ba:96:40:2a:
         7a:ab:9e:4c:d6:65:f7:7b:a6:f0:95:74:9a:da:ee:4f:e0:b0:
         4a:6f:71:d1:e9:5d:08:dd:9d:f7:60:99:b1:83:c4:20:91:9a:
         ab:03:0d:8f:8a:1b:e5:35:76:4f:74:c2:fe:86:2d:08:7e:03:
         f4:a2:cd:57:b5:b6:20:95:40:bc:8a:cc:58:ca:3f:52:dc:5e:
         73:29:6e:42:0d:96:41:1c:eb:bb:36:58:2b:ed:9f:7d:e4:a5:
         47:fe:f9:8c:f0:3d:61:7a:5f:e2:25:dd:97:1a:ab:47:34:97:
         f5:68:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:39:20 2024 by rpki-client on console-ams.rpki-client.org