Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa
File:                     323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa (raw, json)
Hash identifier:          f8LsYI/bF3PI+ZBQRXG4iIx6JuR9hRNGP5HlkX0M3rU=
Subject key identifier:   E7:CA:1B:55:51:21:40:97:4F:C8:66:00:AA:F9:DC:95:04:E2:1E:64
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       40956C9196611C265FC6A70005EF291C8D84152C
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:44 +0000
ROA not before:           Wed 10 Apr 2024 00:15:44 +0000
ROA not after:            Wed 09 Apr 2025 00:20:44 +0000
asID:                     264550
IP address blocks:        2804:215c:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:95:6c:91:96:61:1c:26:5f:c6:a7:00:05:ef:29:1c:8d:84:15:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:15:44 2024 GMT
            Not After : Apr  9 00:20:44 2025 GMT
        Subject: CN=E7CA1B55512140974FC86600AAF9DC9504E21E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:f6:88:d7:37:33:fe:44:47:df:81:e3:fc:
                    20:e5:8e:41:0b:53:7f:79:86:bb:40:7e:a3:c6:4d:
                    b4:44:49:0b:34:f4:76:b6:60:96:98:fb:66:6e:25:
                    79:31:22:16:72:a3:10:8c:59:3f:d2:65:a3:ae:a3:
                    56:b5:b3:5a:27:6f:63:6b:d2:e1:16:4d:4a:61:fd:
                    dc:76:1a:e7:3c:91:b1:46:b2:88:c6:86:8f:da:e0:
                    b1:d3:70:5f:f9:53:45:81:45:93:93:d9:5b:42:de:
                    a9:30:a7:b3:1c:fa:0c:02:6c:3c:3d:2d:87:f8:78:
                    51:ee:ed:55:49:e7:4c:e4:54:05:8d:3c:62:78:f0:
                    85:1c:fc:82:1a:97:07:b4:ec:2d:7a:23:2f:be:6c:
                    13:c5:d8:4e:bb:9e:d8:fa:a9:09:03:45:29:82:c6:
                    3d:6e:05:39:e2:be:c4:6e:08:fc:8d:df:a0:10:4b:
                    4c:a8:aa:70:5e:99:5c:44:bb:5a:e8:b9:2e:32:34:
                    e4:ee:8f:ea:91:67:88:4d:a0:8a:a9:c8:cd:fe:9f:
                    ae:01:99:44:1f:ec:ad:f6:e4:81:95:07:39:08:23:
                    29:67:0d:51:72:32:68:10:c9:ae:b4:bd:26:d9:f0:
                    71:f9:46:70:19:77:87:0e:10:f7:6b:39:5b:cd:c7:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CA:1B:55:51:21:40:97:4F:C8:66:00:AA:F9:DC:95:04:E2:1E:64
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:2c:d6:da:a8:0a:b8:8c:b8:45:c3:55:b6:84:fe:c9:14:80:
         04:ce:fe:e1:3a:f7:4a:7e:ce:c8:d1:43:e1:b7:14:9a:d4:2d:
         90:8d:7f:e1:87:e8:a6:9f:1e:3b:3f:31:12:d3:5e:26:f4:02:
         e6:3b:c1:40:24:78:c8:d8:db:9f:49:06:60:71:c0:d2:bb:20:
         f4:57:3b:eb:2c:8a:89:0c:c8:33:01:0b:43:86:a1:f0:50:a5:
         bc:d3:d2:ba:49:95:44:8d:20:9f:71:65:87:bf:29:5e:a5:5b:
         9a:04:d5:4c:da:db:65:8c:d7:5b:ee:f9:ab:96:12:98:71:e6:
         1f:46:b1:b6:44:6a:e1:f6:8e:d4:ce:fc:c0:ba:f4:45:21:e7:
         68:02:c2:18:a9:cb:99:a5:4f:06:59:d9:90:87:80:35:be:8e:
         5b:20:0a:a2:4b:de:a6:72:ac:71:84:6f:42:9f:dc:b8:31:71:
         0b:4a:6f:64:1f:5e:62:48:17:30:00:d4:c9:90:3c:6d:9a:f1:
         7f:9f:ef:fa:b7:ba:e6:91:27:d8:eb:70:fb:a5:c1:42:2c:e7:
         15:b9:78:de:21:2d:56:b5:20:f7:8f:ff:9f:bc:b7:8a:ce:2b:
         37:b1:00:db:09:8c:9b:40:59:58:4a:de:08:66:d5:58:4a:40:
         cb:a6:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org