Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          TT2Nms6F+c7Rm6vkZfpQ7Jp62vMAmobkkQDrggVnQHQ=
Subject key identifier:   10:F5:4E:96:E5:8B:5B:79:CC:AD:AA:7D:CE:2E:76:EE:D9:CF:45:E1
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       70018BA783139D5581FD72A598166BE57DFE2181
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        2804:4678:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:01:8b:a7:83:13:9d:55:81:fd:72:a5:98:16:6b:e5:7d:fe:21:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:e9:a7:c4:ec:dc:61:e5:9c:7f:29:76:3d:
                    d5:4f:a4:e6:71:44:b7:d8:f0:7e:43:30:57:1a:eb:
                    ff:b1:be:c2:f3:c9:80:c5:fb:e6:e3:3e:de:d3:db:
                    9e:9d:33:7d:47:13:20:10:b2:ac:6e:8e:82:e9:27:
                    cd:1e:69:1e:8a:14:3e:84:19:8a:fb:dd:92:5e:af:
                    5c:ba:91:bc:9c:20:55:97:b9:24:c6:47:89:99:e0:
                    ad:28:6b:19:1c:df:e0:5f:b8:0a:37:87:3e:6f:14:
                    09:74:23:d7:aa:44:69:b7:58:19:19:03:d3:67:04:
                    e4:f8:ec:ce:5f:0d:38:0a:21:a8:4c:49:d7:8b:50:
                    d3:9f:af:76:12:99:86:c6:29:0c:e3:b9:c1:1e:63:
                    c4:c2:e0:1d:ae:e7:04:06:fe:df:9d:7c:e8:65:34:
                    47:6a:d3:14:6d:e0:ff:db:5c:d2:7d:d5:60:27:dc:
                    be:0a:70:24:7c:0e:98:3c:7a:e8:04:b4:1f:19:68:
                    d2:d8:18:db:b6:82:8e:21:7f:60:22:d4:55:76:7a:
                    78:91:67:44:d4:0f:c6:05:0f:46:cc:ee:d7:40:2b:
                    ff:b4:03:cb:6c:47:bb:fc:6c:c0:c9:cc:9c:f2:e5:
                    ca:80:69:3a:ff:17:1c:a1:11:9a:5d:4a:3b:c5:58:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F5:4E:96:E5:8B:5B:79:CC:AD:AA:7D:CE:2E:76:EE:D9:CF:45:E1
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:a7:bc:c5:92:18:bd:74:7d:b2:93:2d:51:42:86:f3:76:8e:
         69:78:2a:85:f7:1e:0e:5c:ad:c5:76:53:a9:b5:47:0f:bc:2b:
         7d:a5:0a:58:4c:90:73:f7:86:3b:78:04:fd:dd:eb:dc:20:cf:
         af:24:2e:a8:6b:8f:6d:73:28:44:28:3e:a5:9f:82:23:10:95:
         a9:a6:fa:ac:38:a8:29:83:e6:6f:09:98:ea:2f:96:ef:70:e6:
         20:04:08:3b:e0:e5:bc:77:6e:c0:bc:c1:76:ef:ca:0d:65:42:
         64:2d:e4:d8:ba:ba:35:d6:99:2d:21:72:2c:54:e1:33:56:1e:
         5c:8e:b9:de:50:6e:46:e9:6a:01:5c:d5:f8:d7:26:b0:d4:3b:
         4c:a4:de:29:87:6f:3c:1c:b9:21:0f:84:f3:bc:5b:a2:1c:85:
         ad:87:3b:9f:cc:7b:88:1a:e0:d8:d0:a3:72:2a:c1:03:9f:6a:
         28:5c:ac:c5:63:0d:de:a5:27:fe:1d:1d:45:a9:33:c4:c2:15:
         27:88:ca:39:bc:22:84:8e:29:56:01:15:9a:ef:02:a3:70:97:
         42:6c:68:27:5c:fb:6c:b6:58:0f:69:bc:26:4d:ac:c4:89:92:
         28:3f:fc:bc:e1:32:2a:2f:83:cc:25:41:53:dd:62:a2:f0:5b:
         94:d5:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org