Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          0fie7IR/OTzMbRy1XkD35T6nHyAudp+8LM160H3+sGo=
Subject key identifier:   91:7F:05:A1:B9:34:98:55:35:B2:34:E3:3B:56:83:87:00:3C:5C:B4
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       25472B681DB80815EB49DA22AEAFCD7F801E9DDD
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        2804:ad8:d::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:47:2b:68:1d:b8:08:15:eb:49:da:22:ae:af:cd:7f:80:1e:9d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject: CN=3082010A0282010100B74C22E297643A0317679AD7F52CCA97B83A2B9FD7855B44895943BDAD7793C22C8CF5FD4EE85085536EDC9C13D8831BAF2B284393C33DFEDDB4C581370DE368903DF879D59A9FBF157B7CC2F34F3214C40D8C19F51DB46293AC53494C87E05AAEC52CCCAB60574C1E2E663E0B1FD154D80A823939B252AED1AC666B2C2095249EB24FF7CB1558A58CF44998A0858E64277F44DE889F988FC91331AE1AC5B639D64EBC7B7817F61903F6D5690B3B25B99F86B8C0C6E03CB5457DC837A31F24DDB205CD3E3C3348D8D72E0DAFDEBE333A30239FBDAA18CEDAEC3E8295229223808188EC927DBC718DBBF76A50C66F82352FA5F56B814C745D6692165C15CEA6690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:22:e2:97:64:3a:03:17:67:9a:d7:f5:2c:
                    ca:97:b8:3a:2b:9f:d7:85:5b:44:89:59:43:bd:ad:
                    77:93:c2:2c:8c:f5:fd:4e:e8:50:85:53:6e:dc:9c:
                    13:d8:83:1b:af:2b:28:43:93:c3:3d:fe:dd:b4:c5:
                    81:37:0d:e3:68:90:3d:f8:79:d5:9a:9f:bf:15:7b:
                    7c:c2:f3:4f:32:14:c4:0d:8c:19:f5:1d:b4:62:93:
                    ac:53:49:4c:87:e0:5a:ae:c5:2c:cc:ab:60:57:4c:
                    1e:2e:66:3e:0b:1f:d1:54:d8:0a:82:39:39:b2:52:
                    ae:d1:ac:66:6b:2c:20:95:24:9e:b2:4f:f7:cb:15:
                    58:a5:8c:f4:49:98:a0:85:8e:64:27:7f:44:de:88:
                    9f:98:8f:c9:13:31:ae:1a:c5:b6:39:d6:4e:bc:7b:
                    78:17:f6:19:03:f6:d5:69:0b:3b:25:b9:9f:86:b8:
                    c0:c6:e0:3c:b5:45:7d:c8:37:a3:1f:24:dd:b2:05:
                    cd:3e:3c:33:48:d8:d7:2e:0d:af:de:be:33:3a:30:
                    23:9f:bd:aa:18:ce:da:ec:3e:82:95:22:92:23:80:
                    81:88:ec:92:7d:bc:71:8d:bb:f7:6a:50:c6:6f:82:
                    35:2f:a5:f5:6b:81:4c:74:5d:66:92:16:5c:15:ce:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7F:05:A1:B9:34:98:55:35:B2:34:E3:3B:56:83:87:00:3C:5C:B4
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:44:e5:82:0c:6e:6b:7b:26:3b:1d:30:9d:f0:f0:05:b7:
         f3:e9:08:b7:b8:bc:f9:6d:6f:8c:3e:68:9c:43:18:ff:6a:a4:
         24:e7:87:e4:bd:e2:26:18:35:ea:ed:69:d2:26:00:b0:3d:57:
         a4:32:be:8a:00:94:5a:74:c6:f8:e8:88:b6:4b:5d:34:25:6d:
         a9:cc:a5:b3:60:c8:d4:49:7a:0c:f9:e0:3c:a2:10:48:c0:c0:
         ad:e7:9c:bb:8e:d4:2e:d3:c2:8e:e7:b1:1e:87:1b:98:d8:4c:
         1d:2a:48:e8:25:f3:28:ed:b0:b1:ce:2c:ba:c1:63:51:fa:d4:
         1c:b6:79:c0:e0:13:7d:88:2d:ac:80:0f:91:0e:fa:90:a6:2e:
         7f:fd:b4:96:a1:56:00:99:d6:7e:a3:1b:50:19:1b:cf:10:28:
         56:b3:fd:ed:17:84:40:ed:a0:58:79:19:55:44:85:a0:2a:e1:
         9d:0b:47:23:c1:6c:03:cc:f7:83:4c:19:1f:14:d1:44:0f:d0:
         ec:dc:98:81:0e:ec:5c:59:7d:1d:d1:fa:58:91:ec:a5:ab:10:
         f7:ab:2f:94:ba:2b:b9:bf:72:7d:4b:80:9e:c2:04:03:fd:3d:
         1d:41:85:03:b8:5c:0b:ad:9f:cf:69:e6:0e:a2:17:f6:3e:88:
         61:a5:65:da
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUJUcraB24CBXrSdoirq/Nf4Aend0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDdaFw0yNTA0MDMxOTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc0QzIyRTI5NzY0M0EwMzE3
Njc5QUQ3RjUyQ0NBOTdCODNBMkI5RkQ3ODU1QjQ0ODk1OTQzQkRBRDc3OTNDMjJD
OENGNUZENEVFODUwODU1MzZFREM5QzEzRDg4MzFCQUYyQjI4NDM5M0MzM0RGRURE
QjRDNTgxMzcwREUzNjg5MDNERjg3OUQ1OUE5RkJGMTU3QjdDQzJGMzRGMzIxNEM0
MEQ4QzE5RjUxREI0NjI5M0FDNTM0OTRDODdFMDVBQUVDNTJDQ0NBQjYwNTc0QzFF
MkU2NjNFMEIxRkQxNTREODBBODIzOTM5QjI1MkFFRDFBQzY2NkIyQzIwOTUyNDlF
QjI0RkY3Q0IxNTU4QTU4Q0Y0NDk5OEEwODU4RTY0Mjc3RjQ0REU4ODlGOTg4RkM5
MTMzMUFFMUFDNUI2MzlENjRFQkM3Qjc4MTdGNjE5MDNGNkQ1NjkwQjNCMjVCOTlG
ODZCOEMwQzZFMDNDQjU0NTdEQzgzN0EzMUYyNEREQjIwNUNEM0UzQzMzNDhEOEQ3
MkUwREFGREVCRTMzM0EzMDIzOUZCREFBMThDRURBRUMzRTgyOTUyMjkyMjM4MDgx
ODhFQzkyN0RCQzcxOERCQkY3NkE1MEM2NkY4MjM1MkZBNUY1NkI4MTRDNzQ1RDY2
OTIxNjVDMTVDRUE2NjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt0wi4pdkOgMXZ5rX9SzKl7g6K5/XhVtEiVlDva13k8IsjPX9TuhQ
hVNu3JwT2IMbrysoQ5PDPf7dtMWBNw3jaJA9+HnVmp+/FXt8wvNPMhTEDYwZ9R20
YpOsU0lMh+BarsUszKtgV0weLmY+Cx/RVNgKgjk5slKu0axmaywglSSesk/3yxVY
pYz0SZighY5kJ39E3oifmI/JEzGuGsW2OdZOvHt4F/YZA/bVaQs7JbmfhrjAxuA8
tUV9yDejHyTdsgXNPjwzSNjXLg2v3r4zOjAjn72qGM7a7D6ClSKSI4CBiOySfbxx
jbv3alDGb4I1L6X1a4FMdF1mkhZcFc6maQIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FJF/BaG5NJhVNbI04ztWg4cAPFy0MB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTY0
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KAQK2AANMA0GCSqGSIb3DQEBCwUAA4IBAQBLGkTlggxua3smOx0wnfDwBbfz6Qi3
uLz5bW+MPmicQxj/aqQk54fkveImGDXq7WnSJgCwPVekMr6KAJRadMb46Ii2S100
JW2pzKWzYMjUSXoM+eA8ohBIwMCt55y7jtQu08KO57EehxuY2EwdKkjoJfMo7bCx
ziy6wWNR+tQctnnA4BN9iC2sgA+RDvqQpi5//bSWoVYAmdZ+oxtQGRvPEChWs/3t
F4RA7aBYeRlVRIWgKuGdC0cjwWwDzPeDTBkfFNFED9Ds3JiBDuxcWX0d0fpYkeyl
qxD3qy+Uuiu5v3J9S4CewgQD/T0dQYUDuFwLrZ/PaeYOohf2PohhpWXa
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org