Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a3a2f33322d3332203d3e20323632343934.roa
File:                     323830343a313531303a3a2f33322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          AIELBBv1GkrDo+7zVD0P0/Yc3jlRaz9SKAqWnYONrmo=
Subject key identifier:   E4:A9:0A:5F:C7:8F:1C:B3:97:2E:7D:26:BA:15:01:BC:E2:95:4D:74
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       7453C0999541A84332A4C0013C9AB4E77B8FCF19
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a3a2f33322d3332203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        2804:1510::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:53:c0:99:95:41:a8:43:32:a4:c0:01:3c:9a:b4:e7:7b:8f:cf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d1:3e:bf:17:ff:dd:04:8e:23:79:d7:a9:af:
                    1a:d9:e0:35:5e:ee:af:fa:d4:d8:85:54:ce:68:2a:
                    c8:3b:63:97:25:34:7f:41:8d:49:7f:de:f4:f2:ad:
                    b8:01:ac:2a:e9:bd:c3:b6:32:13:86:6e:b9:79:03:
                    a7:dc:0e:38:a8:b5:7f:75:ea:62:4d:9b:19:44:ed:
                    fb:37:f5:ff:e2:e7:1d:73:e3:60:1c:6b:77:52:d8:
                    fc:bb:5d:67:e1:23:fd:cb:e3:56:41:9c:0a:3e:64:
                    97:88:8e:c8:38:59:1b:01:66:f9:8e:29:fd:7b:c1:
                    d8:09:e1:e5:e2:2e:8f:c3:76:f4:d6:b2:37:c9:f7:
                    67:24:e1:c0:c1:be:f2:11:c5:0f:24:67:ba:d9:f8:
                    49:1b:b6:43:f1:a6:8f:ab:66:76:01:65:6f:c2:b9:
                    07:ec:4e:0a:15:f5:f5:0c:9e:58:27:51:03:11:2a:
                    6c:9f:9b:32:54:8c:27:ee:16:ff:e4:1d:28:b6:42:
                    b4:f6:b2:16:1c:ac:f0:09:d0:e2:9d:8d:d9:c0:76:
                    27:91:6b:87:00:39:13:5b:4c:c1:57:62:31:dc:7a:
                    89:bb:86:85:b6:5d:70:f8:65:30:b9:62:68:00:01:
                    fb:85:26:24:78:88:03:ad:14:55:57:59:ca:08:10:
                    25:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A9:0A:5F:C7:8F:1C:B3:97:2E:7D:26:BA:15:01:BC:E2:95:4D:74
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a3a2f33322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:37:1c:4d:d1:8d:15:54:0c:d5:26:94:c6:83:30:e1:1b:b2:
         f5:ee:38:b0:d6:5a:d1:ce:97:2f:55:ae:42:37:fc:45:0d:eb:
         c6:80:b4:c6:7f:53:87:03:a8:08:e6:18:0f:a3:51:76:fd:58:
         78:18:9d:07:9d:24:0a:43:c8:e9:d3:20:aa:8b:c8:c5:47:ab:
         b6:c2:de:b7:95:80:b6:df:d4:95:fc:1b:1c:43:bf:06:a5:a3:
         a7:28:dc:66:f3:40:6d:ef:42:52:f5:c5:e6:38:6c:19:e8:6b:
         bd:dd:a7:96:91:8c:1e:5f:52:21:68:f9:1c:2b:cc:6e:d5:d1:
         22:4b:87:3c:ac:e4:b7:99:64:b9:ec:73:3f:c9:ca:23:48:6a:
         b3:ae:e6:60:86:e4:b5:2f:3a:21:98:16:72:2f:e0:6e:e5:36:
         d9:11:48:0d:03:73:91:43:21:5a:4a:91:96:cc:a8:65:a2:c3:
         a9:bd:4f:95:c5:5f:db:42:9a:da:93:6e:97:c9:21:6d:af:05:
         64:0b:98:6a:14:e0:ca:ce:41:67:2a:fc:32:15:7e:a1:7b:bd:
         6e:1f:12:36:0c:aa:a0:04:a5:b9:05:2c:f4:a6:61:2a:82:77:
         9d:6e:69:bb:15:2c:d6:d6:ed:02:dc:3d:a0:2c:8a:d1:8f:93:
         76:71:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----