Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a343637383a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          B2itpHBWa2VXMVkhMhhYPNIGkZPkgZkarnyH6LpVGpk=
Subject key identifier:   9C:15:30:C7:84:D9:4E:A7:8B:1C:04:B4:35:13:70:E4:EA:A7:89:04
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1F3A9AF38CA7484129B3361F3F0CC899F7833610
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        2804:4678::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:9a:f3:8c:a7:48:41:29:b3:36:1f:3f:0c:c8:99:f7:83:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject: CN=3082010A0282010100B757D1EE7C0DC9387C2F567279827C3C683473AEDB1B1E04862527F5662A2FB5431EB27D885D43D34BFD59264137C4D5B661A549B09B700FD30E7FB34767C250F598BD044DB08CD4E8F5021A410C0FDE9B470FCC987303771AD47E672F53D367312ACE425AECC996B0D30160E41951A785D6B763F40B0D1C2600A7162B3E09CA8B6AF1C129EC84642965F509EC24ED35ABCCDBC80917C651C1016CBAD383348C5347EC4C3A5CE28DD7249B2F88EAA94E808F480ADF660D7A3C371FF100047B4618218115D2ABD60762EDCCDEC2F5EBBC9A099224F2B674E9528B77095B9564F56D409587706A80B585EF31BECA387D9E28F841774389BC244B425E4CE121A9CF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:d1:ee:7c:0d:c9:38:7c:2f:56:72:79:82:
                    7c:3c:68:34:73:ae:db:1b:1e:04:86:25:27:f5:66:
                    2a:2f:b5:43:1e:b2:7d:88:5d:43:d3:4b:fd:59:26:
                    41:37:c4:d5:b6:61:a5:49:b0:9b:70:0f:d3:0e:7f:
                    b3:47:67:c2:50:f5:98:bd:04:4d:b0:8c:d4:e8:f5:
                    02:1a:41:0c:0f:de:9b:47:0f:cc:98:73:03:77:1a:
                    d4:7e:67:2f:53:d3:67:31:2a:ce:42:5a:ec:c9:96:
                    b0:d3:01:60:e4:19:51:a7:85:d6:b7:63:f4:0b:0d:
                    1c:26:00:a7:16:2b:3e:09:ca:8b:6a:f1:c1:29:ec:
                    84:64:29:65:f5:09:ec:24:ed:35:ab:cc:db:c8:09:
                    17:c6:51:c1:01:6c:ba:d3:83:34:8c:53:47:ec:4c:
                    3a:5c:e2:8d:d7:24:9b:2f:88:ea:a9:4e:80:8f:48:
                    0a:df:66:0d:7a:3c:37:1f:f1:00:04:7b:46:18:21:
                    81:15:d2:ab:d6:07:62:ed:cc:de:c2:f5:eb:bc:9a:
                    09:92:24:f2:b6:74:e9:52:8b:77:09:5b:95:64:f5:
                    6d:40:95:87:70:6a:80:b5:85:ef:31:be:ca:38:7d:
                    9e:28:f8:41:77:43:89:bc:24:4b:42:5e:4c:e1:21:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:15:30:C7:84:D9:4E:A7:8B:1C:04:B4:35:13:70:E4:EA:A7:89:04
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:37:37:04:1a:7a:e5:da:2a:7a:58:c0:29:f5:68:35:e5:
         53:19:cc:25:75:d3:dc:58:16:f3:62:a9:bb:40:cf:9b:9e:a5:
         cd:72:2f:07:dd:f4:30:fa:4a:68:7e:cb:ce:9f:19:fb:53:56:
         e0:e9:ca:a9:08:fe:13:76:df:8b:1c:01:1e:c4:04:39:b0:39:
         f5:0e:61:65:12:20:38:e2:6c:28:19:26:c5:6e:35:e9:9c:ff:
         53:b5:6c:17:b0:e0:05:31:f4:a2:d9:b1:5b:fe:6f:38:b4:86:
         47:75:dc:83:21:a4:8c:97:ea:71:9e:2d:3d:a5:b0:d5:c9:ea:
         12:d0:db:2a:7e:ed:9b:7a:64:fc:29:b1:46:b9:c1:85:40:54:
         ab:8b:82:5f:52:a9:e5:7b:ea:54:5b:8b:82:16:6b:96:35:94:
         4b:88:2f:14:03:c7:32:5b:ed:6b:2d:2a:b6:18:d8:bf:27:40:
         dd:f2:79:ba:10:02:15:46:a7:0d:93:bd:62:60:c8:6a:eb:e0:
         fd:c0:40:e3:37:62:15:60:57:34:7f:a2:e7:f5:e5:54:ba:bd:
         af:4b:4c:a2:9c:f0:cf:89:ad:5c:6e:f2:e1:d6:de:e0:92:f9:
         ad:13:b5:5a:19:2a:8d:04:5c:61:ce:ea:63:9d:00:83:9c:cc:
         11:9d:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org