Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a323030303a3a2f34382d3438203d3e20323633353138.roa
File:                     323830343a313332343a323030303a3a2f34382d3438203d3e20323633353138.roa (raw, json)
Hash identifier:          vTKcMHei6fcBv0C2bv/3FsGpuXZF/ZNoluo87nPcKbA=
Subject key identifier:   E4:7E:5F:1B:4A:9C:EE:41:F7:84:77:73:54:9D:EF:D9:0C:A5:F6:15
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       46FC4A685AD6FD969C34485599AF02F4693724B4
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a323030303a3a2f34382d3438203d3e20323633353138.roa
Signing time:             Mon 14 Oct 2024 15:21:11 +0000
ROA not before:           Mon 14 Oct 2024 15:16:11 +0000
ROA not after:            Mon 13 Oct 2025 15:21:11 +0000
asID:                     263518
IP address blocks:        2804:1324:2000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fc:4a:68:5a:d6:fd:96:9c:34:48:55:99:af:02:f4:69:37:24:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Oct 14 15:16:11 2024 GMT
            Not After : Oct 13 15:21:11 2025 GMT
        Subject: CN=E47E5F1B4A9CEE41F7847773549DEFD90CA5F615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:b0:f5:ec:ce:89:05:30:c1:b5:61:39:63:
                    e7:4d:5c:2b:8c:72:31:fc:2f:57:0c:ab:41:68:d2:
                    dc:ef:46:95:ce:d2:73:27:61:55:fd:7c:b3:94:f8:
                    27:0d:75:d9:77:37:e1:60:9c:25:41:ee:d1:24:69:
                    5e:e4:2e:7b:a4:27:49:c5:2b:d4:45:b8:f2:8e:16:
                    3c:2d:65:c8:63:b1:72:51:f1:07:f1:83:44:90:a4:
                    da:26:29:b0:61:3a:b7:15:e6:09:5a:d5:be:0a:19:
                    a8:b3:9e:10:f1:d3:9e:b3:2f:7a:c9:6c:b2:3e:80:
                    27:7a:6d:19:a8:25:c3:df:dc:4a:76:31:92:f1:91:
                    e9:38:48:16:ad:79:7e:60:fd:03:dd:f3:28:8a:59:
                    6b:e2:06:67:57:ce:3b:dc:77:5d:56:b9:a8:ca:72:
                    78:f0:6f:20:f6:f5:18:3e:75:66:67:4e:64:4f:5e:
                    d4:68:5e:8e:03:ba:99:2b:a5:1a:50:5e:3e:11:0c:
                    f1:fb:d3:46:b2:8f:b8:98:0f:fc:f9:a1:39:b2:27:
                    bc:10:ea:9d:2d:49:a0:3e:b5:aa:09:e9:cb:27:14:
                    76:81:e6:c2:1b:a8:d8:05:85:06:f2:8e:e3:5f:03:
                    50:91:1b:37:8a:1a:57:44:ed:6b:f3:e5:d5:3e:13:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7E:5F:1B:4A:9C:EE:41:F7:84:77:73:54:9D:EF:D9:0C:A5:F6:15
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a323030303a3a2f34382d3438203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:34:1f:2f:d9:c6:e2:1f:23:63:f8:12:1a:e8:e1:0e:80:
         5d:d8:cc:d7:b5:67:c7:9e:29:d4:7d:13:ee:b5:1b:be:76:f9:
         ef:b0:d4:53:81:cf:94:2a:ce:40:79:ff:98:8e:ae:d2:cf:04:
         c6:49:b6:88:4c:ee:13:b9:41:b8:6c:16:16:79:cc:c4:8f:06:
         68:75:be:b3:5e:e2:95:98:c0:4f:59:6c:0c:c0:73:b9:f7:0f:
         02:57:f4:53:af:73:9d:a7:6f:c5:ee:9b:59:8f:0e:90:2f:c1:
         31:84:84:9e:83:04:97:9f:48:63:29:3f:04:a9:1e:ee:4d:8e:
         8c:c9:37:66:34:ec:2b:d6:8c:b0:a7:4c:66:17:f2:5d:f0:28:
         54:ac:79:82:d6:13:e7:9d:a6:7b:1a:02:b3:31:82:e6:7c:80:
         5a:42:55:a0:c0:8f:b3:4d:b5:ba:6b:d6:9d:ba:a5:6a:22:98:
         0e:b0:79:fe:a8:53:49:34:21:ad:17:b4:3c:43:b7:51:e1:9a:
         c8:96:2a:f6:4e:0e:49:ec:5f:24:6f:78:6f:03:7d:3c:c2:9b:
         29:e5:ec:bd:c2:fd:df:bf:02:a1:f6:15:27:6b:1f:6b:9d:a5:
         af:d7:27:c7:9e:4c:c6:7f:56:18:bc:26:d4:76:00:0f:ce:22:
         27:15:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 05:14:14 2024 by rpki-client on console-fra.rpki-client.org