Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa
File:                     323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa (raw, json)
Hash identifier:          /2Lq7KbHO+BstHvuRNBXbx80N6pa4hGoq8M2u2x9wKs=
Subject key identifier:   F1:0F:46:33:B3:27:47:89:5A:88:48:0A:7C:1B:13:C6:2E:C3:EE:4F
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       3A5B8368CC38A818655CB3099BD24BB981FBE7AF
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:02 +0000
ROA not before:           Wed 10 Apr 2024 00:16:02 +0000
ROA not after:            Wed 09 Apr 2025 00:21:02 +0000
asID:                     264550
IP address blocks:        2804:215c:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5b:83:68:cc:38:a8:18:65:5c:b3:09:9b:d2:4b:b9:81:fb:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:16:02 2024 GMT
            Not After : Apr  9 00:21:02 2025 GMT
        Subject: CN=F10F4633B32747895A88480A7C1B13C62EC3EE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:80:a4:31:30:f7:e4:6c:9f:ff:5a:0f:fb:
                    2e:42:ff:49:0f:0a:0a:25:ef:4b:72:8d:42:e6:c3:
                    ed:ef:15:4c:b4:ed:45:ee:19:57:99:7b:79:fd:48:
                    43:02:6c:4c:85:9f:af:04:37:dc:0c:79:73:56:dc:
                    f8:37:8f:f1:51:5c:e9:58:d4:e6:bf:6f:39:00:9f:
                    26:d0:2e:45:98:43:da:23:c2:79:1a:51:b4:93:dd:
                    ff:64:ef:c0:91:bf:c9:cd:6f:6e:e5:a2:d0:a7:fc:
                    9f:c3:1c:c5:36:73:56:80:6f:a3:f6:19:65:aa:57:
                    53:d6:2f:54:fa:17:23:5a:46:dd:41:e6:ae:0b:ad:
                    cb:ba:d2:ad:7b:63:38:e2:39:fc:46:eb:64:e3:0f:
                    1e:29:ee:b8:fa:87:45:50:08:09:58:af:e0:1a:53:
                    a1:8f:c9:40:31:91:1c:1e:82:62:d8:e3:68:9d:b8:
                    60:a6:c7:3a:23:09:55:2c:29:7d:2c:0a:2b:2c:04:
                    35:9a:f9:fd:85:ec:68:d3:0c:de:05:a6:ee:81:2c:
                    c5:c9:d2:01:bc:4d:b6:c7:40:4e:e8:03:e7:a6:5b:
                    21:bb:8a:e2:6a:15:d1:0e:b3:da:5c:a9:7e:75:20:
                    99:65:f0:69:a8:ec:bf:6e:5d:e8:43:f5:4e:f5:6f:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0F:46:33:B3:27:47:89:5A:88:48:0A:7C:1B:13:C6:2E:C3:EE:4F
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:74:77:92:6e:ab:20:91:64:02:42:25:81:5d:5f:f1:bc:
         a2:aa:df:66:26:49:8f:0b:65:1e:a2:9d:2e:37:50:4f:88:ac:
         b3:ff:ac:46:bd:4d:e0:8e:2b:fd:0b:4b:70:5c:29:25:61:08:
         ce:31:a8:ea:27:ba:01:31:58:7a:97:53:0f:6c:a9:e8:90:ae:
         d6:51:55:c7:66:d1:09:7e:08:07:3f:d6:9d:ce:0c:bd:37:e1:
         82:2a:4f:28:c8:8f:96:1a:55:89:85:9b:0a:ca:e7:db:49:fc:
         82:27:4e:21:bd:3c:2f:02:97:40:89:4a:ff:4d:c7:63:4c:51:
         4f:63:a7:46:10:c8:53:2a:ac:43:50:66:88:ec:52:4b:c8:e3:
         28:b7:35:82:0d:e5:6d:84:67:79:c4:24:77:dc:6d:5c:92:43:
         51:de:3d:2f:f6:4b:3c:86:fa:dd:c8:02:49:b7:85:e5:ca:7f:
         8b:1f:42:9d:0f:8e:c2:46:42:d6:bd:71:89:83:d6:0a:4f:b6:
         63:dd:02:d9:5a:3b:f1:6d:bb:31:7e:0a:d9:3a:b2:b1:ad:57:
         85:4f:87:c7:76:45:25:bb:68:ba:c4:7d:ba:f6:82:cd:c1:4c:
         69:d8:fc:46:97:e6:74:7f:36:86:8c:1b:89:94:c2:96:36:3d:
         77:f9:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org