Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa
File:                     323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa (raw, json)
Hash identifier:          wdvwLBU4w1dHZ359YhxlzZ3oaCtXf939GvX5ZeDr+6I=
Subject key identifier:   9B:1D:BF:28:8E:6F:E6:1F:FB:53:46:5D:31:F0:48:3B:A9:7C:C8:AF
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       543DC6249D2F0AAD3C8C617C47149D56910642AD
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:53 +0000
ROA not before:           Wed 10 Apr 2024 00:15:53 +0000
ROA not after:            Wed 09 Apr 2025 00:20:53 +0000
asID:                     264550
IP address blocks:        2804:215c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3d:c6:24:9d:2f:0a:ad:3c:8c:61:7c:47:14:9d:56:91:06:42:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:15:53 2024 GMT
            Not After : Apr  9 00:20:53 2025 GMT
        Subject: CN=9B1DBF288E6FE61FFB53465D31F0483BA97CC8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:77:58:7a:4c:d7:6d:f0:1b:ef:86:51:b8:
                    2a:90:9b:4d:ad:4d:f1:9d:e9:60:6b:e4:b4:c6:56:
                    fa:9b:c7:b6:4f:bc:29:2b:17:8c:69:37:1c:b8:b5:
                    c4:72:ad:c9:67:e0:c1:5c:25:58:4f:1c:68:c2:ea:
                    f2:39:6a:b5:fd:bc:59:03:ab:a8:97:e8:c6:a9:10:
                    0e:49:17:d4:8d:30:45:99:37:cb:7a:5e:3c:13:9e:
                    33:60:be:59:a8:4b:55:c5:f8:45:50:31:42:44:5e:
                    cc:e7:00:fb:9b:bc:7e:8b:b4:92:85:97:5b:c1:b9:
                    eb:dc:01:3e:ea:fe:a4:19:7f:36:86:fe:2c:f5:2e:
                    95:95:bb:12:78:e1:d4:01:62:83:88:82:9c:d5:52:
                    d4:d3:60:32:68:9e:27:51:73:46:b8:f9:f4:8e:79:
                    a5:c0:04:12:14:42:c3:e1:2c:f7:cb:01:a1:c6:80:
                    09:c3:88:00:90:62:4c:93:38:c4:09:0e:b4:38:4b:
                    d2:8b:bc:db:14:e1:fa:cc:40:ed:07:9f:bc:6e:f0:
                    fd:0c:1f:13:64:45:e9:f5:ff:53:93:30:1a:b1:6e:
                    b1:e5:d8:db:ac:62:0e:49:15:a2:05:6a:44:df:5d:
                    be:c8:5d:d7:84:55:da:0a:97:9a:c0:8e:b6:36:16:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1D:BF:28:8E:6F:E6:1F:FB:53:46:5D:31:F0:48:3B:A9:7C:C8:AF
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:3c:58:55:6d:2d:45:d7:55:d1:fd:25:18:57:33:e6:51:12:
         9a:2d:5b:48:2d:28:0e:48:1e:fe:e7:22:de:5d:92:c8:b2:e4:
         a6:f6:26:07:76:90:4b:31:65:d3:47:7f:bd:f5:0f:ab:9d:93:
         b1:79:d1:1b:6a:76:c3:f1:3f:64:3f:09:ae:9d:1e:d8:41:af:
         b5:89:4b:50:9c:4c:2e:25:49:9a:dd:a7:08:0e:37:b5:fe:b7:
         c5:4b:a4:f9:36:26:31:08:fb:97:d1:a1:eb:05:21:24:e8:5a:
         aa:a8:e3:63:13:33:5f:71:1f:3a:ec:4e:49:5a:50:bd:15:6a:
         b8:09:8d:59:60:84:93:37:3b:7c:ed:b8:2b:94:9c:81:cd:52:
         c6:62:89:d2:50:07:6f:2d:dd:81:31:ce:1e:1d:63:e3:dd:93:
         a8:ee:53:78:69:b1:04:ea:6c:8d:a1:39:8a:7c:55:41:ca:97:
         26:c9:71:74:36:a5:79:92:d1:44:67:d4:fb:ce:b4:c2:41:c4:
         3a:bf:ae:52:4c:79:af:54:25:d1:c0:77:05:74:45:cc:55:c1:
         e0:92:a5:56:94:d4:c6:6e:97:3a:33:41:ac:b1:8d:a2:52:31:
         cb:99:de:d8:1e:db:e1:70:90:02:36:52:0b:e5:cc:f1:d5:ee:
         bf:ac:75:60
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVD3GJJ0vCq08jGF8RxSdVpEGQq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhDNEE0RDQ3RDYyMEVBRkM1QjQxNDQ1OUJDQzVBMjBE
RTZCRUREQzAeFw0yNDA0MTAwMDE1NTNaFw0yNTA0MDkwMDIwNTNaMDMxMTAvBgNV
BAMTKDlCMURCRjI4OEU2RkU2MUZGQjUzNDY1RDMxRjA0ODNCQTk3Q0M4QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbI3dYekzXbfAb74ZRuCqQm02t
TfGd6WBr5LTGVvqbx7ZPvCkrF4xpNxy4tcRyrcln4MFcJVhPHGjC6vI5arX9vFkD
q6iX6MapEA5JF9SNMEWZN8t6XjwTnjNgvlmoS1XF+EVQMUJEXsznAPubvH6LtJKF
l1vBuevcAT7q/qQZfzaG/iz1LpWVuxJ44dQBYoOIgpzVUtTTYDJonidRc0a4+fSO
eaXABBIUQsPhLPfLAaHGgAnDiACQYkyTOMQJDrQ4S9KLvNsU4frMQO0Hn7xu8P0M
HxNkRen1/1OTMBqxbrHl2NusYg5JFaIFakTfXb7IXdeEVdoKl5rAjrY2FmqHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUmx2/KI5v5h/7U0ZdMfBIO6l8yK8wHwYDVR0j
BBgwFoAUSMSk1H1iDq/FtBRFm8xaIN5r7dwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMC80OEM0QTRENDdENjIwRUFGQzVCNDE0NDU5QkNDNUEyMERFNkJFRERDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4QzRBNEQ0N0Q2MjBFQUZD
NUI0MTQ0NTlCQ0M1QTIwREU2QkVEREMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv
MzIzODMwMzQzYTMyMzEzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDM1MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEIVyAMA0GCSqGSIb3DQEBCwUA
A4IBAQASPFhVbS1F11XR/SUYVzPmURKaLVtILSgOSB7+5yLeXZLIsuSm9iYHdpBL
MWXTR3+99Q+rnZOxedEbanbD8T9kPwmunR7YQa+1iUtQnEwuJUma3acIDje1/rfF
S6T5NiYxCPuX0aHrBSEk6FqqqONjEzNfcR867E5JWlC9FWq4CY1ZYISTNzt87bgr
lJyBzVLGYonSUAdvLd2BMc4eHWPj3ZOo7lN4abEE6myNoTmKfFVBypcmyXF0NqV5
ktFEZ9T7zrTCQcQ6v65STHmvVCXRwHcFdEXMVcHgkqVWlNTGbpc6M0GssY2iUjHL
md7YHtvhcJACNlIL5czx1e6/rHVg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org