Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          ZZvpTUEcRO7V8SyuJn30tO6Qtyf7v/Oo6s9W3L27opE=
Subject key identifier:   83:63:24:A7:E3:07:2F:3B:CD:1A:CB:B3:7F:E2:F9:41:A8:1D:93:9B
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6599186C843A24BAF41866D213F9EF85C6328246
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        2804:ad8:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:99:18:6c:84:3a:24:ba:f4:18:66:d2:13:f9:ef:85:c6:32:82:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:fb:c6:d6:20:4d:ec:8c:94:98:bb:dd:db:
                    7e:9f:90:49:e0:52:dc:29:b5:3c:d9:dc:89:c3:60:
                    13:02:de:3f:c8:ef:16:f8:88:2f:7c:48:73:0c:a3:
                    8a:6a:95:1c:6e:2f:42:de:9d:71:34:06:ec:7c:d6:
                    e0:09:9d:b4:c0:50:96:d9:ae:98:10:f1:35:f0:4e:
                    32:b9:18:20:06:e4:22:44:4e:ae:09:e4:1f:1a:c2:
                    9e:c1:26:dc:41:7f:0c:c2:00:57:03:c8:21:00:c8:
                    c0:a9:80:29:92:f8:5a:bf:ab:ce:41:23:cd:b3:2c:
                    01:91:b1:7b:e5:97:ef:9d:b4:7b:7b:19:44:8a:d6:
                    d4:f3:0a:58:a9:44:de:c5:e3:db:bf:25:04:b7:7b:
                    e5:09:60:76:50:ce:50:b8:07:20:b3:4c:2e:cf:12:
                    6b:ec:95:3b:48:9a:7d:d0:cd:31:25:d3:61:ee:47:
                    0b:20:2e:d0:84:ef:b7:52:55:3d:59:0c:b3:db:14:
                    d3:d8:03:58:c4:8c:e2:53:2b:d4:20:4e:79:00:68:
                    83:54:7e:53:28:23:be:f1:bc:08:42:14:4b:8d:a9:
                    44:97:01:1b:60:ef:19:9c:c2:7a:45:29:17:f4:28:
                    3e:52:c8:15:7b:0a:ea:89:ec:82:72:31:e2:74:4d:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:63:24:A7:E3:07:2F:3B:CD:1A:CB:B3:7F:E2:F9:41:A8:1D:93:9B
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:ba:ca:4b:33:18:dd:54:59:9f:c9:64:24:d8:43:44:ed:
         a7:ff:2f:84:2a:f0:4e:24:76:b5:d3:43:b7:0a:1e:c8:3c:17:
         83:68:68:4b:f0:ff:dd:bc:9d:d2:48:d6:b5:97:26:1c:bf:98:
         72:a3:2a:b8:32:9e:41:db:2d:51:81:c0:fb:43:89:3a:8c:4c:
         68:18:7c:be:00:4d:76:18:67:e2:04:b7:bd:59:11:d1:19:e3:
         56:95:91:b9:80:46:0e:1f:1c:31:02:68:37:4b:1e:26:8e:76:
         16:a0:eb:44:36:9c:d1:a9:01:78:5d:73:7f:53:d6:64:aa:dd:
         3d:5c:23:8d:84:c8:ae:b7:15:43:78:d0:8d:60:b0:ef:15:86:
         f6:0c:b0:ed:3d:a2:02:29:92:b9:f8:34:54:24:a8:43:56:fa:
         54:07:cb:16:2c:3b:f1:50:c3:73:d8:2c:8b:04:0f:fb:7b:2a:
         9d:2b:cc:31:b8:3b:60:06:04:a7:5b:43:cd:86:0d:2b:4b:50:
         60:79:c4:23:f8:75:1c:95:72:e4:b1:48:ae:f1:ab:49:2a:7d:
         a9:1a:2c:e7:43:40:f6:11:bb:14:86:38:0b:06:07:0d:6f:d0:
         20:31:fe:a4:42:0a:ca:a9:5f:ea:6a:66:2d:0a:3f:eb:54:be:
         71:d8:ad:38
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUZZkYbIQ6JLr0GGbSE/nvhcYygkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDRaFw0yNTA0MDMxOTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzUwOUZCQzZENjIwNERFQzhD
OTQ5OEJCREREQjdFOUY5MDQ5RTA1MkRDMjlCNTNDRDlEQzg5QzM2MDEzMDJERTNG
QzhFRjE2Rjg4ODJGN0M0ODczMENBMzhBNkE5NTFDNkUyRjQyREU5RDcxMzQwNkVD
N0NENkUwMDk5REI0QzA1MDk2RDlBRTk4MTBGMTM1RjA0RTMyQjkxODIwMDZFNDIy
NDQ0RUFFMDlFNDFGMUFDMjlFQzEyNkRDNDE3RjBDQzIwMDU3MDNDODIxMDBDOEMw
QTk4MDI5OTJGODVBQkZBQkNFNDEyM0NEQjMyQzAxOTFCMTdCRTU5N0VGOURCNDdC
N0IxOTQ0OEFENkQ0RjMwQTU4QTk0NERFQzVFM0RCQkYyNTA0Qjc3QkU1MDk2MDc2
NTBDRTUwQjgwNzIwQjM0QzJFQ0YxMjZCRUM5NTNCNDg5QTdERDBDRDMxMjVEMzYx
RUU0NzBCMjAyRUQwODRFRkI3NTI1NTNENTkwQ0IzREIxNEQzRDgwMzU4QzQ4Q0Uy
NTMyQkQ0MjA0RTc5MDA2ODgzNTQ3RTUzMjgyM0JFRjFCQzA4NDIxNDRCOERBOTQ0
OTcwMTFCNjBFRjE5OUNDMjdBNDUyOTE3RjQyODNFNTJDODE1N0IwQUVBODlFQzgy
NzIzMUUyNzQ0RDYyRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxQn7xtYgTeyMlJi73dt+n5BJ4FLcKbU82dyJw2ATAt4/yO8W+Igv
fEhzDKOKapUcbi9C3p1xNAbsfNbgCZ20wFCW2a6YEPE18E4yuRggBuQiRE6uCeQf
GsKewSbcQX8MwgBXA8ghAMjAqYApkvhav6vOQSPNsywBkbF75ZfvnbR7exlEitbU
8wpYqUTexePbvyUEt3vlCWB2UM5QuAcgs0wuzxJr7JU7SJp90M0xJdNh7kcLIC7Q
hO+3UlU9WQyz2xTT2ANYxIziUyvUIE55AGiDVH5TKCO+8bwIQhRLjalElwEbYO8Z
nMJ6RSkX9Cg+UsgVewrqieyCcjHidE1i8QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FINjJKfjBy87zRrLs3/i+UGoHZObMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTM4
MzAzMDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYGKAQK2IAwDQYJKoZIhvcNAQELBQADggEBAHIPuspLMxjdVFmfyWQk2ENE
7af/L4Qq8E4kdrXTQ7cKHsg8F4NoaEvw/928ndJI1rWXJhy/mHKjKrgynkHbLVGB
wPtDiTqMTGgYfL4ATXYYZ+IEt71ZEdEZ41aVkbmARg4fHDECaDdLHiaOdhag60Q2
nNGpAXhdc39T1mSq3T1cI42EyK63FUN40I1gsO8VhvYMsO09ogIpkrn4NFQkqENW
+lQHyxYsO/FQw3PYLIsED/t7Kp0rzDG4O2AGBKdbQ82GDStLUGB5xCP4dRyVcuSx
SK7xq0kqfakaLOdDQPYRuxSGOAsGBw1v0CAx/qRCCsqpX+pqZi0KP+tUvnHYrTg=
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org