Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa
File:                     323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa (raw, json)
Hash identifier:          DlSKC07rkDh86Mwsz6MkKZSh0zpscwkDQDQ4lh+5kN0=
Subject key identifier:   C5:10:2A:47:89:A7:B9:18:BF:AC:E1:C0:EC:B0:46:01:58:91:1F:AF
Certificate issuer:       /CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
Certificate serial:       47BCCA1F44050BCBB8D4B28DFFE0D8DDA1B85B97
Authority key identifier: 93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa
Signing time:             Thu 04 Apr 2024 08:15:35 +0000
ROA not before:           Thu 04 Apr 2024 08:10:35 +0000
ROA not after:            Thu 03 Apr 2025 08:15:35 +0000
asID:                     271309
IP address blocks:        2804:7980:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bc:ca:1f:44:05:0b:cb:b8:d4:b2:8d:ff:e0:d8:dd:a1:b8:5b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Validity
            Not Before: Apr  4 08:10:35 2024 GMT
            Not After : Apr  3 08:15:35 2025 GMT
        Subject: CN=C5102A4789A7B918BFACE1C0ECB0460158911FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:63:9d:88:d5:51:df:a6:89:7f:bd:e9:bc:
                    e6:c4:41:87:2d:d7:fe:80:86:b9:33:f9:a5:fe:82:
                    35:c5:16:8a:38:43:5e:5f:cf:e7:9c:79:f8:91:23:
                    1f:24:41:bd:22:bc:49:b4:ae:50:d3:7a:cf:4e:37:
                    2f:75:cd:57:e5:f0:2f:0b:4f:59:6c:e5:d6:f7:de:
                    c6:ac:39:72:f6:46:06:58:11:a7:1d:8f:d6:00:46:
                    af:d8:b2:2a:ba:a1:16:43:8e:c3:3f:65:71:77:94:
                    db:d6:8e:43:0c:74:93:a5:c8:e5:20:f4:c0:95:bc:
                    3f:de:7f:41:c4:0e:ca:25:55:fa:48:c8:77:fb:3d:
                    62:4c:96:00:5b:8d:de:b0:1a:e8:82:d4:de:e0:31:
                    a1:38:68:5e:10:93:47:df:ea:a1:fb:31:12:f3:45:
                    94:fe:03:60:85:28:44:fe:f1:e6:63:fa:fd:ad:d2:
                    87:de:6d:70:e6:84:ba:c6:47:e8:48:78:07:da:6c:
                    32:81:86:bc:69:a3:d1:a7:72:b3:18:1a:89:4a:bd:
                    a2:7a:ff:a6:61:2e:30:c8:dc:46:dd:b3:d5:81:cc:
                    64:76:44:d8:78:af:0e:15:a8:d7:49:38:79:55:ea:
                    e1:fa:f0:ca:82:bd:ea:fe:c6:fd:31:8b:d5:eb:33:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:10:2A:47:89:A7:B9:18:BF:AC:E1:C0:EC:B0:46:01:58:91:1F:AF
            X509v3 Authority Key Identifier:
                keyid:93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b6:68:ef:bc:85:23:76:af:d6:0e:49:06:a8:38:a7:23:01:7e:
         6e:46:3e:25:46:95:82:d9:cd:8d:6d:e4:a2:ca:92:b8:fa:0e:
         73:93:9c:3f:92:a3:7a:15:d6:a4:ef:19:6e:e4:d8:64:9b:16:
         b5:73:71:d4:3a:d2:cc:05:36:27:d5:3e:46:bd:15:b9:f6:de:
         0e:9a:a9:8f:57:da:39:87:36:28:bf:88:ea:dd:cf:8d:8a:c8:
         0f:96:d2:04:d8:d7:0d:78:22:2d:3d:93:60:b4:60:f4:ed:7e:
         ad:a2:5b:79:93:6d:1e:68:64:01:94:66:02:df:16:e9:b3:2d:
         0c:6e:da:38:02:b4:6d:cf:8c:ef:24:98:69:b7:a2:29:dc:c5:
         70:30:7d:42:2d:f3:92:d9:ac:39:6c:9e:a6:9c:f2:65:d9:d5:
         71:fd:a9:b1:c0:12:47:2c:79:64:e7:ac:48:9c:75:d3:60:40:
         d0:29:02:f0:db:55:d6:5c:54:50:f6:0d:4c:f2:59:6f:5a:54:
         20:2e:14:4d:53:ad:23:0d:a5:79:74:ce:f6:97:b7:1b:ce:bf:
         c7:47:8b:92:66:67:70:8b:45:3f:ac:18:9b:48:52:ae:d2:3b:
         c4:e7:c8:df:6a:30:8a:6b:8e:19:1d:0a:86:7f:98:e5:52:16:
         a7:63:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:07:11 2024 by rpki-client on console-fra.rpki-client.org