Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          WbBUzM8eWAcQFV1AykhL//vuOjpPFu3HpRhqJ4zUsog=
Subject key identifier:   ED:11:F3:2B:13:0B:B2:08:E2:FD:AE:28:05:C5:D6:A6:A3:14:A7:A6
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       3E02AE298B8530635F7144F8FAA570FAC31E3FB7
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        2804:1510:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:02:ae:29:8b:85:30:63:5f:71:44:f8:fa:a5:70:fa:c3:1e:3f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1a:cb:6c:9e:c6:da:58:57:a5:4e:d8:68:ca:
                    32:ad:e8:c4:e6:aa:23:8f:85:aa:d1:0b:ee:4b:9d:
                    65:9c:d7:e7:d7:a5:00:3a:b0:3a:89:07:bf:d8:6d:
                    dc:7d:a1:8c:73:eb:d5:32:35:1e:5d:4a:ad:69:ba:
                    54:be:02:a0:a8:6b:50:d9:5c:bc:74:14:bb:8f:d0:
                    24:95:ac:da:70:ea:a4:c9:ee:97:fc:b2:00:64:49:
                    f8:ae:67:da:54:c9:64:5b:f5:81:05:4e:76:4e:96:
                    7d:e4:43:be:7c:6e:41:46:b1:ae:4f:e0:06:75:00:
                    83:dc:ae:97:a1:eb:e4:57:a6:e8:1f:81:10:dd:3f:
                    f3:d2:2b:c0:12:94:24:c6:14:a7:48:66:64:bc:77:
                    c0:df:77:05:57:9d:24:1a:c7:c3:50:a4:ff:bb:0b:
                    e2:61:09:7f:35:2d:2c:4b:04:08:e7:b8:b3:ac:21:
                    35:e1:e7:49:8c:d5:b6:87:f1:38:18:28:fc:1b:ef:
                    b6:36:06:87:10:bc:9c:bd:d2:ba:7b:f0:11:4c:3a:
                    8f:72:55:be:ed:5b:7d:e9:21:67:0e:be:82:d1:77:
                    fd:21:c9:96:0d:7d:05:09:ef:33:01:f6:b0:26:75:
                    98:24:bd:c5:a1:8b:39:6c:b4:ef:a1:94:f2:9e:d2:
                    cd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:11:F3:2B:13:0B:B2:08:E2:FD:AE:28:05:C5:D6:A6:A3:14:A7:A6
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:05:69:a1:3c:2c:d8:7f:80:e3:fd:0b:3d:06:58:2b:b5:f0:
         f8:f4:47:9c:c7:f9:d9:2a:99:5c:11:a9:94:e8:cb:78:7b:cc:
         b4:34:7d:76:8c:40:65:87:22:a6:4d:b5:f4:5b:83:50:10:e8:
         d2:3f:d0:8d:4c:0c:03:1a:28:b0:a2:c5:11:12:d5:25:33:6f:
         b8:71:a6:52:fe:d2:fb:dd:48:f5:bd:0b:05:40:6f:4e:07:1a:
         de:65:a5:74:20:0d:73:fd:38:38:b1:66:bb:dd:77:67:ca:68:
         94:64:bb:39:38:d3:dc:9f:0c:a4:48:02:a7:1f:45:7e:40:da:
         e7:95:27:0e:13:15:39:87:d3:8c:22:8d:e5:92:94:19:9c:0d:
         d9:95:7f:1f:87:84:73:15:a2:df:6a:7b:33:d5:1b:69:27:fd:
         56:cd:77:41:7c:db:6b:75:7d:0b:e4:52:6d:de:a2:a7:6a:62:
         2f:a3:fc:d8:d9:27:82:20:4d:6e:d7:0f:bc:61:60:42:0f:e7:
         78:7d:11:4e:4e:ed:72:2f:26:27:51:4d:94:79:66:de:71:32:
         ee:49:74:ee:3f:60:f8:2a:99:31:ea:7b:4b:12:e6:a9:18:73:
         a8:50:24:72:b8:44:e9:90:ce:8d:b7:d8:64:28:00:45:92:d4:
         f7:5e:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org