Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          wBPQ9mRYHd2QMyNhIvA3oC4TXvxZ3EgTMQL8egbr4JU=
Subject key identifier:   56:24:95:E0:6D:41:F5:FD:76:A9:4E:08:6B:B2:3E:3A:64:B2:59:93
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5188E0ED1869D24039D98E701164CFF98FE6EA2A
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:4678:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:88:e0:ed:18:69:d2:40:39:d9:8e:70:11:64:cf:f9:8f:e6:ea:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:7f:f9:60:f5:63:a4:f5:e8:25:40:2c:80:
                    7d:20:ae:b8:2a:ab:f4:5e:72:55:9a:a7:36:2e:62:
                    53:aa:1f:21:25:21:4c:8a:fe:75:75:eb:6e:1c:7e:
                    ba:b0:d4:64:b9:19:7a:b4:77:74:d3:59:81:45:c9:
                    e5:47:ab:ee:05:ae:57:86:b6:b0:fb:df:10:f7:7f:
                    3f:69:b2:61:da:38:4b:00:d2:1f:fc:86:8e:85:74:
                    24:cd:47:df:b0:f7:78:7f:b7:b7:7f:c7:85:5a:59:
                    f5:95:d7:21:37:e1:ba:68:41:ef:ad:87:67:57:0a:
                    4f:0b:04:99:d5:04:57:94:9f:01:c5:20:cc:d7:dc:
                    03:22:e1:69:06:d3:06:01:43:4b:f1:01:9c:15:41:
                    e2:c2:89:3e:3c:d1:ab:fb:93:cc:18:c1:3c:bb:4d:
                    f5:8d:4a:9e:6d:e3:c3:83:c7:2b:e9:e0:5b:af:ba:
                    ea:39:b8:f6:f2:8b:ce:17:8d:57:12:1f:0c:ab:5b:
                    cd:de:cd:0c:20:1d:6b:27:73:19:a2:b6:af:da:55:
                    fd:a8:75:61:0f:40:9f:ee:3d:ae:7a:d7:56:bf:4d:
                    4b:52:82:92:92:d0:f8:f2:8b:9c:da:36:f9:fb:6f:
                    b9:63:e9:71:bd:01:f2:e1:0b:48:06:45:4c:eb:d9:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:24:95:E0:6D:41:F5:FD:76:A9:4E:08:6B:B2:3E:3A:64:B2:59:93
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:4a:60:0c:c0:a5:a4:8e:f7:9a:ae:19:17:ff:71:62:90:
         08:05:d5:a2:9f:81:22:4e:0c:1f:61:a7:00:de:98:2f:09:a6:
         58:ee:c6:d5:30:a8:b1:aa:b6:09:ff:09:90:2e:6a:a9:23:fa:
         c3:c9:35:dc:46:a6:fc:e4:a8:00:ab:d2:2b:d8:97:08:d4:61:
         a1:90:89:dc:e0:3c:6d:58:67:98:63:a8:b8:68:9c:74:a4:b8:
         8d:f3:3b:0d:7f:09:7b:63:ca:61:3c:5f:ef:52:e8:59:5c:68:
         28:56:ac:47:20:4e:47:41:4e:67:54:df:a0:93:10:97:56:9e:
         4e:0a:be:00:dc:ab:56:42:aa:c0:a8:88:37:55:f2:9a:db:22:
         e5:d7:ae:a9:9b:b9:84:1d:ce:1f:17:ff:f3:14:e3:74:12:44:
         6c:9f:a5:be:4a:85:5d:41:c8:21:fa:cf:ac:c6:3a:0c:41:99:
         f7:a8:df:df:98:21:aa:2a:d3:4e:f8:95:47:14:c6:ac:f6:e6:
         8e:47:7a:31:b9:32:b1:10:e0:72:b0:b3:36:61:7e:48:cd:08:
         e5:95:45:b9:45:95:35:d9:ed:db:d9:5b:df:68:25:0e:22:ed:
         d6:06:94:c9:3b:f8:01:01:8c:2d:89:52:e9:be:50:31:71:cb:
         a1:dc:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----