Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          +hOZn7GxQJeY2wGLidB2WZ+epvg5UOAfn1ciNGHpOFE=
Subject key identifier:   42:12:58:48:1E:4C:E6:F8:21:E6:CC:5C:C0:CC:7A:28:99:6C:A7:AC
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2006C8EF720464C27BBCB469D632BF29D77AE80B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        2804:1510:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:06:c8:ef:72:04:64:c2:7b:bc:b4:69:d6:32:bf:29:d7:7a:e8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:6c:5e:da:28:84:66:18:68:0a:ff:16:ae:
                    0a:f4:96:fd:6d:0c:19:b6:6f:e7:68:34:11:c5:ae:
                    b5:b0:1c:b5:79:8f:af:85:2f:25:c5:b8:28:57:ff:
                    a2:56:c4:ba:63:f1:00:7a:58:3c:af:a7:57:ab:03:
                    9d:89:0f:19:49:0d:0d:ec:44:27:84:49:e3:9c:c2:
                    73:46:ec:da:64:ef:bd:20:8f:5c:03:3c:02:f2:83:
                    0f:00:34:e3:5c:78:d9:51:4f:58:b1:72:c6:0b:1a:
                    14:57:47:01:9c:af:5b:d4:24:24:b7:6f:c7:b8:82:
                    86:69:03:2e:c9:8e:12:16:25:4d:50:86:7b:fe:ab:
                    34:3b:7b:b6:7b:18:46:60:8f:a0:c4:84:81:11:60:
                    b2:ee:b2:35:24:0b:27:e1:e8:6a:0f:0c:e2:ed:06:
                    fd:fb:7c:02:ea:f2:be:c4:58:c2:16:e6:13:1e:fe:
                    60:77:a9:a9:a6:38:56:b5:24:25:b0:19:66:93:4d:
                    41:68:19:14:31:9a:be:a9:02:0e:45:57:4e:cd:06:
                    5b:7a:2d:bf:90:ef:82:70:f6:aa:fd:df:b7:3f:e8:
                    72:28:a0:64:25:2c:6f:18:8f:1e:65:89:4d:1c:7e:
                    2b:f3:d5:6c:af:3c:e2:9e:06:bb:8c:08:04:5d:82:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:58:48:1E:4C:E6:F8:21:E6:CC:5C:C0:CC:7A:28:99:6C:A7:AC
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:b9:88:3e:db:c1:98:f5:18:d9:29:b6:1f:fe:a9:73:fd:
         e2:30:d9:20:56:4a:a1:7b:a4:83:7b:a4:80:e2:c9:20:b5:5d:
         6f:e3:dd:23:a5:e4:e6:a4:5e:21:c5:62:46:aa:58:92:cc:a5:
         a9:0f:cf:44:b5:ca:16:72:b7:4d:fb:95:f9:21:7c:06:f3:c5:
         f1:53:2e:c8:86:9e:95:7a:d5:79:f0:d7:44:99:9b:58:17:ce:
         e4:e6:1f:1f:28:7d:36:22:e6:46:0a:92:f3:db:6c:e1:38:6b:
         9e:3c:de:52:cf:e2:57:f6:2f:42:f8:c2:3a:ca:10:e6:39:bf:
         1b:d9:7d:28:c5:a0:fd:4a:58:2e:d3:16:ce:6e:bb:a1:1a:82:
         85:f8:d1:fe:b4:f5:eb:38:f3:17:df:4b:66:0f:c4:41:e1:0d:
         e0:41:f5:cf:38:ca:2b:a3:f6:e4:39:17:7a:f0:fe:21:09:0d:
         b1:5f:78:38:86:11:02:71:46:1f:dc:2d:e8:48:3d:fc:51:1c:
         e7:5e:43:0c:ca:7f:24:0c:f8:0f:93:8c:43:73:72:b3:70:b2:
         fb:69:28:ab:f5:bc:11:be:4f:34:43:84:3e:cc:00:9e:c5:d0:
         45:44:c7:ea:9e:fd:9f:e5:f6:4e:92:04:27:f2:27:01:94:ec:
         47:54:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----