Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          w7K+aOkJ83Hb2nneDRuG4jlVQp+sL3gMPTUgirdYba8=
Subject key identifier:   EF:7D:FA:F5:2B:7D:8B:49:57:48:D1:20:37:72:3A:68:DD:B2:BE:D7
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       262FAB1E51B96F849B0C20B61C65E933B0551B38
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:ad8:82a5::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2f:ab:1e:51:b9:6f:84:9b:0c:20:b6:1c:65:e9:33:b0:55:1b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:4b:36:02:db:b2:3a:d8:89:58:25:31:4f:
                    95:e1:12:b5:e9:98:6f:66:94:54:c3:75:08:17:fa:
                    26:16:54:5c:5b:95:4e:75:88:75:fc:3a:e6:79:75:
                    2b:48:1d:fc:34:9f:f9:20:8b:f1:c0:c1:ea:f5:88:
                    62:70:c9:e5:8e:b8:cc:f3:d3:d0:92:ed:20:f0:fd:
                    56:01:0e:21:6c:3d:8c:84:0b:95:d4:8d:e4:9b:ec:
                    4e:ff:65:9c:5e:63:ea:de:8d:05:c5:d6:8a:97:22:
                    12:16:cc:bd:59:af:e4:48:29:5f:24:6b:63:8a:a8:
                    e4:2b:ea:1a:ea:f2:15:29:4b:b6:c6:67:91:4a:f8:
                    c2:e9:2d:14:68:ca:3d:4c:d4:e1:b2:19:c4:6e:9b:
                    11:bd:e9:d1:2e:73:4d:74:16:3a:09:02:2c:51:75:
                    21:a8:95:22:99:a9:1b:87:c6:40:d7:b4:5a:3c:26:
                    d0:05:30:50:73:29:32:3e:46:70:52:54:70:9b:c2:
                    1b:8a:bc:69:a4:9b:4a:1c:41:8b:f3:b5:86:b7:f1:
                    ac:c4:31:8b:70:78:1c:33:01:03:4f:58:58:c1:52:
                    8b:a6:ea:21:28:9c:52:df:b6:db:74:e3:3d:17:92:
                    95:eb:d8:06:f3:a6:2f:16:37:12:d3:e7:8b:e6:66:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7D:FA:F5:2B:7D:8B:49:57:48:D1:20:37:72:3A:68:DD:B2:BE:D7
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:82a5::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:0c:eb:9b:ea:d1:78:ff:a6:e9:04:a3:b8:13:7e:a5:89:
         2e:a1:b4:53:e0:8e:61:30:82:19:5d:e6:29:2b:f7:55:7f:e6:
         ff:65:1e:64:fc:c7:bb:69:48:e0:08:f5:e6:40:9d:cb:aa:b7:
         81:b5:34:8e:40:4f:7a:3f:17:62:11:26:56:88:55:2a:72:98:
         6c:aa:b8:e4:07:89:4a:21:a1:d3:d9:8b:7b:61:50:40:b6:5f:
         b4:9b:47:ef:a6:ec:bf:d1:19:63:b8:a7:68:3a:ac:9e:91:e8:
         18:a8:77:81:da:9c:a7:34:a9:5d:9f:28:65:44:cc:80:19:bd:
         55:92:26:cc:6b:a9:d2:3a:71:91:4c:a7:bb:1e:61:1c:2a:32:
         5f:bc:46:47:b3:22:7f:61:c9:9d:e5:d8:c3:19:2b:fa:8b:96:
         3e:60:8b:06:e6:f4:0a:1e:f6:5a:4d:8f:4a:4e:e2:fb:dc:cf:
         77:c7:6c:ec:e4:aa:b8:72:f6:5e:86:7f:1a:b2:78:a2:02:ed:
         ca:69:4b:82:be:b0:85:45:bf:18:2e:96:90:89:3e:69:4f:89:
         64:fd:b3:30:1d:90:e0:b8:9b:c4:6b:0b:fe:46:15:32:82:b0:
         b2:95:72:f1:1c:28:2b:7f:1d:53:66:49:d3:b2:32:71:11:0d:
         80:78:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org