Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa
File:                     323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa (raw, json)
Hash identifier:          gBLV0jsON4NbLlc3GJGCn6kXASXWvdc7MAIb3oeEBKM=
Subject key identifier:   80:97:0D:E7:4E:07:4D:D0:C3:DF:CE:F7:97:03:8B:47:12:2C:51:DF
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       585DFF528B2704EFB2B687D7498A11821532EBA6
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:ad8:4028::/46 maxlen: 46

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5d:ff:52:8b:27:04:ef:b2:b6:87:d7:49:8a:11:82:15:32:eb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject: CN=3082010A0282010100A9D14D885DFEB09AA83C90D3008E7D322B758B48F6285BC7302D21004337C3E53D344B7E78F37DB721AB7DA1E309DA1422AB5C9A601D6637A800A680F4CCB94C945163A14C510A81DD6067D8F1B606A8ED9FA02918546CA64DE6EA93AF62252842279E433754E1D886D1DE52BBB69AEC505284E8E1AB9AA3FB7865A6FC353C954F250B761F59AD1768E9E667124EC437CF5ED1EC8E71E0BB42EF8980A8598EA2E565BA880262E2F035861E0A9C5264C82FF7900C09DD517336706DB9A0388660FAD68854BD2A50BE800CE01EC87636BE486CC28680FBDED548BC6F9AA3D9D0B8AA71A8AB34D4710D7C3CDA2ED41521BF86D7E5AB6B1019B1EA4BDD77E261C7150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:4d:88:5d:fe:b0:9a:a8:3c:90:d3:00:8e:
                    7d:32:2b:75:8b:48:f6:28:5b:c7:30:2d:21:00:43:
                    37:c3:e5:3d:34:4b:7e:78:f3:7d:b7:21:ab:7d:a1:
                    e3:09:da:14:22:ab:5c:9a:60:1d:66:37:a8:00:a6:
                    80:f4:cc:b9:4c:94:51:63:a1:4c:51:0a:81:dd:60:
                    67:d8:f1:b6:06:a8:ed:9f:a0:29:18:54:6c:a6:4d:
                    e6:ea:93:af:62:25:28:42:27:9e:43:37:54:e1:d8:
                    86:d1:de:52:bb:b6:9a:ec:50:52:84:e8:e1:ab:9a:
                    a3:fb:78:65:a6:fc:35:3c:95:4f:25:0b:76:1f:59:
                    ad:17:68:e9:e6:67:12:4e:c4:37:cf:5e:d1:ec:8e:
                    71:e0:bb:42:ef:89:80:a8:59:8e:a2:e5:65:ba:88:
                    02:62:e2:f0:35:86:1e:0a:9c:52:64:c8:2f:f7:90:
                    0c:09:dd:51:73:36:70:6d:b9:a0:38:86:60:fa:d6:
                    88:54:bd:2a:50:be:80:0c:e0:1e:c8:76:36:be:48:
                    6c:c2:86:80:fb:de:d5:48:bc:6f:9a:a3:d9:d0:b8:
                    aa:71:a8:ab:34:d4:71:0d:7c:3c:da:2e:d4:15:21:
                    bf:86:d7:e5:ab:6b:10:19:b1:ea:4b:dd:77:e2:61:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:0D:E7:4E:07:4D:D0:C3:DF:CE:F7:97:03:8B:47:12:2C:51:DF
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4028::/46

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:22:1b:4e:68:a9:a9:2a:ea:96:28:43:72:3f:a2:cd:4c:
         b4:ef:8b:e8:58:96:6e:b1:ac:c5:2f:b7:e0:87:f2:5f:98:a6:
         b3:a2:8a:b3:18:74:29:44:ca:e2:98:bd:e4:41:8c:0c:c6:08:
         d3:35:b4:87:cb:17:b1:8a:3d:a0:cc:08:90:8a:23:07:cc:94:
         3b:3d:69:c8:ba:16:73:f0:a8:c5:85:08:47:7b:a7:90:b1:4d:
         63:29:12:b7:72:7c:5b:4a:44:86:e9:20:38:20:27:b6:5e:d6:
         29:27:96:bf:d5:1b:f9:87:15:df:f3:d5:e0:29:08:5e:12:ae:
         21:b8:df:59:08:8e:14:c5:03:0f:5e:e6:18:4f:20:ea:0a:c1:
         36:93:b1:b3:c1:10:9a:c0:8a:e5:c4:03:79:1e:e1:d3:67:20:
         00:97:ce:a2:10:aa:66:64:1b:70:97:d3:cc:01:27:5d:62:29:
         36:80:f8:89:e5:7c:74:42:d1:87:6a:e0:ce:64:0b:1c:01:85:
         ed:74:76:36:65:52:7d:9c:ec:13:fe:28:ce:e8:89:38:4a:d9:
         ef:ab:d2:b3:29:91:37:98:b6:66:13:a4:8c:03:9b:a5:b0:ed:
         b7:e9:96:bf:ee:6d:28:e0:72:48:7f:7a:64:96:28:39:22:1a:
         cd:c1:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org