Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a313531303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          sS+CbHQRhTI8ErJDlyQum6U9pWCPjM3FWcTpBJhxK9k=
Subject key identifier:   8C:6E:7A:63:09:21:FB:7A:56:01:35:D1:F2:7F:33:DC:22:2D:14:4B
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       58F26A1D42CAB698A192AF9655596F6665FD3DD0
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        2804:1510::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f2:6a:1d:42:ca:b6:98:a1:92:af:96:55:59:6f:66:65:fd:3d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject: CN=3082010A0282010100C3BFDBC6F8174BAD1A8CF27E08725A23AAABE7995B584C80020BCC89DC86AAD1C4F5A306F9F8591D93DA7AAB747459385500C1FCEFA3F6F1942B56082775492D41FAD35887BEB55D613E86D81024CD2205E3EE79FC36FA8DD9E249EA4F9B06FFB51C7ADD12F830F76BDE914270F6820451DA9D402FD96F12B21BEE4A3EF750A46CA49952B063086F5C7B8BD7CDFBEACB6C7C6008E00528FF33B991B4A2B7CA4EDB9BC3006D5CD8F5D4BF3966FD7BF669B02B635CE1C231F23FD4388641ED14A4FAA7E96ABBC7D86A4305BC34F4F80ED604CEB1C75A179EADE14A1D265506361D721EC86E9492B76EAEA6A1DFE56DB0732364E482B5627DE9DE6D1DBDCF238F610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:db:c6:f8:17:4b:ad:1a:8c:f2:7e:08:72:
                    5a:23:aa:ab:e7:99:5b:58:4c:80:02:0b:cc:89:dc:
                    86:aa:d1:c4:f5:a3:06:f9:f8:59:1d:93:da:7a:ab:
                    74:74:59:38:55:00:c1:fc:ef:a3:f6:f1:94:2b:56:
                    08:27:75:49:2d:41:fa:d3:58:87:be:b5:5d:61:3e:
                    86:d8:10:24:cd:22:05:e3:ee:79:fc:36:fa:8d:d9:
                    e2:49:ea:4f:9b:06:ff:b5:1c:7a:dd:12:f8:30:f7:
                    6b:de:91:42:70:f6:82:04:51:da:9d:40:2f:d9:6f:
                    12:b2:1b:ee:4a:3e:f7:50:a4:6c:a4:99:52:b0:63:
                    08:6f:5c:7b:8b:d7:cd:fb:ea:cb:6c:7c:60:08:e0:
                    05:28:ff:33:b9:91:b4:a2:b7:ca:4e:db:9b:c3:00:
                    6d:5c:d8:f5:d4:bf:39:66:fd:7b:f6:69:b0:2b:63:
                    5c:e1:c2:31:f2:3f:d4:38:86:41:ed:14:a4:fa:a7:
                    e9:6a:bb:c7:d8:6a:43:05:bc:34:f4:f8:0e:d6:04:
                    ce:b1:c7:5a:17:9e:ad:e1:4a:1d:26:55:06:36:1d:
                    72:1e:c8:6e:94:92:b7:6e:ae:a6:a1:df:e5:6d:b0:
                    73:23:64:e4:82:b5:62:7d:e9:de:6d:1d:bd:cf:23:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6E:7A:63:09:21:FB:7A:56:01:35:D1:F2:7F:33:DC:22:2D:14:4B
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:05:90:a9:59:35:6e:44:71:34:8e:23:fc:72:02:b2:42:
         24:c7:96:29:92:53:b3:45:e0:e0:e3:67:9e:40:4c:41:fa:19:
         9a:56:7d:f4:d5:1f:8e:39:54:cc:1c:10:0b:cb:c7:ec:87:8b:
         b8:86:f2:0b:d5:46:09:93:1a:70:82:9f:7b:51:20:23:05:ef:
         08:5c:7b:50:26:ea:a9:d3:eb:0b:43:44:f3:24:a1:15:ad:5a:
         a7:97:e2:31:01:2b:ea:83:dc:3a:02:0b:e3:34:2a:88:df:3b:
         db:86:d5:36:cd:17:e4:10:e6:4b:a7:ab:d3:82:e3:67:cc:5a:
         7b:59:16:6b:62:b0:f7:70:d6:d4:1c:91:94:55:18:e5:be:ef:
         ae:6a:7c:4d:c0:55:87:b5:ba:51:2a:e0:66:a2:62:0c:15:55:
         1e:98:3f:25:9d:73:e2:d4:ff:5c:29:2b:a2:73:88:ce:7a:64:
         ca:1e:e1:65:0d:af:cb:4f:16:b7:1c:11:20:aa:74:dd:86:b6:
         ac:26:1c:b2:9e:e9:bf:bd:77:5f:6a:89:26:6e:a0:94:5d:6b:
         aa:2a:d2:31:e6:a4:4d:48:74:53:85:76:a2:7f:d7:31:6a:80:
         c5:cf:7b:8d:0b:ea:ac:f7:59:6b:2c:a5:48:b6:58:af:60:7d:
         d1:9d:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org