Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a633030303a3a2f33342d3334203d3e20323634353530.roa
File:                     323830343a323135633a633030303a3a2f33342d3334203d3e20323634353530.roa (raw, json)
Hash identifier:          manX9tzzddOh4fCjG4ot7OlfdkRi7s8NXbmqGx1SKTY=
Subject key identifier:   44:C7:6B:7C:07:73:98:DE:1F:AA:0C:BE:4B:D4:E0:16:CF:1D:51:04
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       07C59B7D901431FE9D26A14C7F42F6EC3C10BA03
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a633030303a3a2f33342d3334203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:07 +0000
ROA not before:           Wed 10 Apr 2024 00:16:07 +0000
ROA not after:            Wed 09 Apr 2025 00:21:07 +0000
asID:                     264550
IP address blocks:        2804:215c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c5:9b:7d:90:14:31:fe:9d:26:a1:4c:7f:42:f6:ec:3c:10:ba:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:16:07 2024 GMT
            Not After : Apr  9 00:21:07 2025 GMT
        Subject: CN=44C76B7C077398DE1FAA0CBE4BD4E016CF1D5104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:90:39:42:f2:18:53:ac:91:b1:18:8d:a0:
                    a1:12:aa:b8:f6:2b:aa:ee:14:c8:0e:0f:32:20:f3:
                    24:f7:cd:c4:69:3a:1a:3d:4a:47:3d:3b:d6:ee:3c:
                    ff:1c:47:ce:f6:82:99:eb:ed:68:8f:9a:3e:8f:3e:
                    80:cb:0b:21:4b:22:05:17:81:bf:e3:af:1c:a3:4e:
                    d9:90:d5:bb:cb:d7:df:4b:af:b7:3d:1d:95:35:f0:
                    ef:e8:04:da:9f:39:50:b6:9e:8c:77:b2:37:ef:ef:
                    f1:a3:70:54:e2:63:76:dd:27:a6:b3:af:7c:83:a5:
                    70:eb:38:d4:17:b6:9b:eb:0c:17:74:1a:45:01:b3:
                    25:3d:c2:7e:ac:dd:47:50:42:30:90:11:d5:a9:61:
                    84:19:be:5e:b7:29:1d:f6:7e:19:e4:e3:80:4a:24:
                    5c:fb:33:f4:3f:b6:3d:e5:f0:f3:65:bb:14:c8:f7:
                    39:ef:12:d5:3e:a5:91:b5:11:af:40:ee:d2:a8:64:
                    45:ff:58:f4:1e:97:f5:f1:3d:10:92:b1:a2:bf:50:
                    02:6e:b3:fd:83:be:cb:f6:75:a2:58:85:f8:fc:0a:
                    5b:00:88:1a:86:f2:1a:43:01:c4:de:29:9f:f0:0d:
                    93:bc:7c:9a:79:50:66:59:10:34:86:6a:5c:28:4f:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:6B:7C:07:73:98:DE:1F:AA:0C:BE:4B:D4:E0:16:CF:1D:51:04
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a633030303a3a2f33342d3334203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:34:26:07:7d:fc:09:7c:80:36:c0:92:fc:02:b1:f6:bf:3f:
         d0:08:c9:53:37:a3:3d:72:e0:44:9d:ef:f7:5f:f3:b5:48:b1:
         1c:ca:39:20:0c:c1:b6:e5:82:37:76:be:50:68:41:74:9b:1b:
         44:0e:3c:9c:97:a2:ba:d1:ee:f9:3b:55:05:1d:12:6a:1c:90:
         3b:26:68:9d:88:c5:eb:24:1d:e9:16:c5:da:ae:28:ec:ed:62:
         ea:81:c4:bb:bb:aa:f8:99:cf:54:02:db:e0:25:d2:98:fb:1e:
         ba:a6:46:07:f7:35:25:6a:f5:a1:0c:0a:55:d3:a3:64:e2:82:
         83:99:b3:d5:18:b4:94:bd:a0:ce:8c:70:bf:2c:f9:56:29:51:
         4b:c4:33:03:ae:5f:39:ba:8a:d4:84:e4:40:b1:f1:8a:1e:75:
         d4:94:2a:f6:6b:c4:d0:22:aa:73:f9:58:44:56:53:66:87:b0:
         1d:48:73:eb:e5:ce:76:4e:e5:c9:73:ff:5c:34:ee:a4:a9:49:
         3b:ff:f4:89:6c:4a:ae:39:19:65:97:9a:56:af:be:29:bc:cc:
         90:26:8b:ae:b1:51:5e:00:9e:47:96:43:52:ec:7c:de:c8:28:
         00:c2:aa:f2:7a:16:e7:cc:07:f4:4e:5b:27:8a:00:d1:32:90:
         a9:6d:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org