Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343230303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343230303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          ScEikzqHvYtk9faO8oRuTN9CnfriSqHuNjAaE6bowNs=
Subject key identifier:   AC:19:19:3A:97:96:3A:B8:FE:D3:37:07:F8:1A:7D:45:F4:4B:8E:7D
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5BBD3D181D3DD33D48145CCC9E616A640860FDF7
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343230303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        2804:ad8:4200::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bd:3d:18:1d:3d:d3:3d:48:14:5c:cc:9e:61:6a:64:08:60:fd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:f2:f1:93:ea:ba:7d:49:d9:a5:1c:9d:e5:
                    db:bf:3e:93:f9:e1:b1:42:d4:56:a4:01:e3:20:11:
                    cb:14:bb:bc:de:a5:60:b4:16:5b:96:d3:6e:c5:2f:
                    a7:88:ea:8d:40:7d:60:3a:51:89:31:ac:d0:9c:7f:
                    c8:65:58:93:c9:ba:17:06:5b:48:7e:a5:a1:cd:52:
                    6e:92:cb:a9:0a:ed:5e:ab:d2:97:32:48:c2:22:cc:
                    c9:b3:01:0a:7e:be:39:df:0f:bc:ab:b1:0f:53:bb:
                    b9:0e:44:9c:4f:e3:ad:9c:f2:f0:3d:a4:ec:85:70:
                    1c:9a:3c:11:57:4d:7e:ae:02:30:34:3a:12:56:04:
                    7f:3b:5a:28:fe:47:17:4a:b9:d3:89:56:f5:7b:2c:
                    0d:5b:8f:83:9e:46:ae:1e:13:60:fb:8e:83:60:61:
                    d4:d5:de:00:ab:ee:78:7f:65:f4:17:20:59:6a:08:
                    f1:b0:ef:36:d7:7a:62:58:c3:0b:e9:aa:19:23:d2:
                    15:c0:3b:2d:15:61:ed:02:cf:53:ee:ed:d1:c6:2d:
                    11:7c:10:a8:0c:e8:99:71:c0:eb:92:03:de:e7:a1:
                    70:cd:cc:c3:9b:b3:78:1b:fb:39:65:92:ad:54:14:
                    db:b8:dd:0d:53:88:1c:f0:1e:82:87:f6:ea:32:39:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:19:3A:97:96:3A:B8:FE:D3:37:07:F8:1A:7D:45:F4:4B:8E:7D
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343230303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4200::/41

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:99:9e:cb:2f:a5:0f:0f:1c:ba:51:59:3b:ec:40:b1:d8:
         96:ff:94:19:a3:c4:c0:9f:1e:81:0b:58:a5:ea:52:b0:d9:a1:
         c5:86:08:15:77:c2:57:f8:4d:fd:82:fe:6f:d1:fe:27:6a:55:
         9b:1c:85:dc:70:82:61:12:d3:dd:21:e3:85:6d:10:a3:6d:2a:
         fb:3f:44:4a:df:96:dd:ba:c0:30:9f:d8:cc:17:98:e7:44:03:
         22:1a:f4:15:b4:21:30:ec:c9:da:52:de:0b:96:c0:5c:71:72:
         2f:b3:25:0f:20:7b:b6:b9:b5:c2:ce:9d:c6:0c:7b:f4:00:92:
         7c:81:a0:5c:94:9c:bc:07:76:0d:fd:94:39:e1:64:97:12:cb:
         01:7d:59:04:4a:a4:8c:ee:50:9b:80:c8:41:02:4f:0d:31:62:
         46:37:6c:19:f4:90:7a:e1:b6:d4:f2:e2:35:b0:02:46:2b:fe:
         c9:d2:b9:dd:89:85:86:c6:93:31:9a:26:b0:a8:f9:ac:ca:23:
         50:37:9b:69:fa:d2:c5:21:2d:f8:84:46:16:1c:48:4a:a9:cc:
         17:d7:a8:34:a7:d3:c0:67:0f:99:d2:45:31:b8:b0:04:be:1b:
         24:62:8c:6f:c1:b2:47:ce:7d:66:05:f2:e0:d7:da:68:87:99:
         df:a8:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org