Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383238393a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383238393a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          mAlJ0EZFXwfRXCICcdJQRXRi/s8OoPNHQFt6jITagk8=
Subject key identifier:   85:4E:23:3F:52:FA:F7:6D:FF:82:83:8A:41:FC:AB:21:BF:BE:E9:9E
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6112DBC73BC5890CF379072098C9F9B9F694DEF4
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383238393a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:ad8:8289::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:12:db:c7:3b:c5:89:0c:f3:79:07:20:98:c9:f9:b9:f6:94:de:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:d5:15:dc:35:48:a1:22:26:f5:54:c7:c6:
                    af:94:f2:91:dc:4f:62:47:cb:a0:f0:12:a8:e6:fa:
                    91:61:99:39:01:e2:d8:e9:85:43:79:ba:30:e3:2b:
                    1d:78:fc:a3:be:81:d3:40:ab:55:8e:7a:42:90:87:
                    bd:73:64:3e:6a:28:8c:05:31:c9:3a:87:5f:57:b7:
                    8e:3c:f5:50:5b:58:35:47:9c:7a:ef:5a:00:8f:34:
                    cc:cd:5f:59:1e:ae:7d:90:29:d7:bc:60:1b:0f:9e:
                    d3:55:ed:33:9b:06:4e:67:90:75:5c:32:5c:54:3b:
                    cb:94:a9:9e:be:28:19:9e:c4:ae:65:48:43:d8:e4:
                    38:10:39:4a:d6:11:e5:f5:8f:e3:8d:c2:81:05:b1:
                    4e:7f:c8:d1:14:cc:26:5e:c8:09:2f:d1:27:5b:68:
                    86:2e:be:96:22:96:a1:d0:1b:a2:6d:4c:6b:bb:8b:
                    71:cd:ec:0f:9b:70:23:cd:1e:91:46:e9:ee:a2:6c:
                    10:e0:c7:5e:51:19:d0:6c:fa:8a:20:ec:d1:c5:39:
                    8f:ab:42:07:1a:b3:4a:a5:55:5d:35:95:c0:49:57:
                    6a:3d:6d:eb:0a:08:54:3c:03:cc:de:86:9b:9d:3a:
                    69:cd:9b:de:48:b0:32:3e:46:7e:72:34:71:65:3e:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4E:23:3F:52:FA:F7:6D:FF:82:83:8A:41:FC:AB:21:BF:BE:E9:9E
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383238393a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8289::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:86:da:3e:ea:5d:4e:e6:e0:29:33:d7:21:54:5a:45:ea:
         47:0c:f9:d1:21:fa:4c:09:7a:6a:33:ae:a8:91:d0:ee:5b:08:
         90:01:57:2d:f5:dd:24:28:36:41:d1:98:48:fc:84:26:64:fa:
         fe:b0:9b:85:e7:f2:89:20:07:6c:e3:3f:be:5f:58:55:53:d8:
         80:89:5e:2f:6c:cd:03:2d:8b:13:9d:73:f3:58:3c:b8:79:65:
         74:bc:7f:c9:90:7b:c6:88:e4:b1:08:45:66:f4:96:8a:ab:43:
         fb:5a:b3:23:4c:78:30:be:d8:09:97:02:6f:92:b2:c4:bf:8c:
         92:52:81:a6:ca:05:7a:16:bc:84:bb:65:6e:6d:fe:a3:0b:76:
         c7:71:ee:91:a4:b3:95:64:14:f1:5f:b4:49:fd:71:8a:ca:19:
         ca:d0:c5:40:8f:1d:6f:aa:b3:44:cd:41:d2:be:88:70:9f:72:
         98:72:ab:81:90:ee:19:7c:87:2d:25:a0:5a:01:84:29:72:d0:
         1e:f9:d6:34:77:f8:fb:b5:cf:84:82:1e:0c:71:65:83:35:85:
         b1:a6:9f:54:11:9b:36:fe:77:ee:41:c1:c6:12:80:a0:4c:12:
         39:ca:99:32:a8:56:29:2c:30:96:87:34:95:94:76:da:38:1a:
         92:7c:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org