Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          letDfAFkyZZOj4ULAo3OdOi6gnxpM6x+ZlMqeo5Sn+k=
Subject key identifier:   1F:86:B5:F2:A0:BB:D0:C6:E3:2C:C7:6C:1A:E5:FE:15:B0:A4:55:84
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       46252A0476A87D73BAA120C7ED025DBFA241F2B9
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        179.125.124.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:25:2a:04:76:a8:7d:73:ba:a1:20:c7:ed:02:5d:bf:a2:41:f2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8b:88:83:dc:fe:2c:40:94:90:7b:98:92:c2:
                    ee:04:c9:84:56:2a:dc:c5:57:64:55:ee:a4:9b:86:
                    bd:e0:8d:e2:0a:7e:69:24:a8:73:ea:58:de:48:b1:
                    db:82:d8:40:56:fe:44:a7:92:2a:d5:98:e6:d2:91:
                    2b:87:61:c9:98:aa:a3:0f:c1:75:18:aa:f8:55:a8:
                    14:f0:1b:5a:b7:1e:06:16:17:56:bd:c8:7b:86:88:
                    80:c2:ae:b3:98:93:0d:75:85:73:a3:bf:f1:42:a2:
                    de:51:0f:a6:1a:5c:d3:ff:28:55:3f:ef:13:ce:c6:
                    09:c1:ff:62:96:5b:01:a3:21:57:08:35:de:7d:96:
                    ed:3f:55:c7:cd:34:75:25:d2:91:c6:35:e6:c1:c7:
                    78:e2:94:3d:0b:f2:cd:4e:90:f5:2f:65:b5:36:7c:
                    1d:c1:c3:c9:ab:98:25:00:f1:a2:28:56:80:cf:e3:
                    5c:0a:a0:7e:ef:c0:79:c3:c9:9c:ae:92:5b:bd:70:
                    62:a3:eb:ee:64:73:97:ab:8e:88:df:ba:16:d0:9e:
                    ee:0e:e2:df:ea:ef:cf:d0:88:9e:4f:89:91:3d:92:
                    41:cb:91:7f:11:ee:75:e2:81:24:54:24:c3:68:2d:
                    68:ba:26:7c:d3:58:9c:cb:62:d9:7f:89:39:04:5f:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:86:B5:F2:A0:BB:D0:C6:E3:2C:C7:6C:1A:E5:FE:15:B0:A4:55:84
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:69:d5:48:55:86:ad:2d:24:0c:30:4b:eb:93:9b:d1:29:
         7f:b9:05:48:87:f1:f3:f2:0d:fd:06:3a:48:89:bd:f2:29:10:
         84:ed:93:9f:72:35:f0:51:3b:25:28:cf:34:84:0b:fa:11:b0:
         40:c4:27:66:b1:71:8b:bc:1a:8a:10:1a:f8:5d:43:73:0a:56:
         e7:a8:0b:7e:3b:30:bd:b7:d0:6b:a3:15:4b:f9:18:3e:f6:13:
         6f:bc:80:8b:70:bc:5a:93:0c:35:d8:c3:b0:67:e8:c0:58:f2:
         3a:07:a3:df:b3:40:2b:1b:5b:90:89:cc:cd:39:3e:a2:d0:fd:
         03:05:af:36:91:3c:eb:24:cc:65:00:eb:6a:7f:a7:1f:f5:10:
         7b:1a:ad:3f:71:3e:8e:bf:22:e0:5e:19:ce:8d:a2:a7:21:51:
         6c:8c:be:1c:0e:88:09:e7:ff:88:bd:20:4e:70:8d:4b:8a:8c:
         93:25:11:aa:a4:7f:ba:84:35:03:79:10:d5:eb:17:c1:f3:a0:
         2f:c6:f5:f2:e5:42:ab:58:1b:43:4b:26:1a:8f:fb:bc:01:ff:
         0d:bb:fe:53:01:4e:2e:67:ec:18:66:83:54:5c:60:a6:eb:67:
         d6:2c:91:0c:7b:4a:eb:67:b0:8d:b6:bc:3d:a5:b3:a9:30:4d:
         a6:bf:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----