Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a3a2f33322d3332203d3e20323632343934.roa
File:                     323830343a343637383a3a2f33322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          XkZPWHoVPCcaMuKRLIcHZo1BXOMfXIurWQIm9KTWiDs=
Subject key identifier:   93:4F:4D:94:8B:12:03:25:B0:76:4A:5D:AC:B7:59:91:73:00:C3:B4
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       7C8AE8C46F41E22C4530E416F63EC56AB03E4AB1
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a3a2f33322d3332203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        2804:4678::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8a:e8:c4:6f:41:e2:2c:45:30:e4:16:f6:3e:c5:6a:b0:3e:4a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:62:d1:ce:6d:c9:e7:f3:d0:7f:7e:03:a1:
                    92:83:72:80:5b:44:14:59:a5:32:4d:29:14:5f:d7:
                    e1:35:29:72:e6:40:03:1b:5a:ba:64:e9:a5:b3:68:
                    b4:99:e7:a2:05:74:8e:f5:fb:79:8d:72:70:37:71:
                    c9:00:53:97:29:d1:61:ef:36:46:30:10:f4:bc:fc:
                    e1:c4:10:7b:8c:24:22:b4:d6:79:c6:d1:f9:5b:24:
                    a3:cf:72:32:0f:20:18:1f:2a:d4:78:a1:f6:ec:92:
                    9f:78:1f:1a:fc:3f:fe:d0:e5:d5:e2:8e:15:6f:10:
                    f9:24:c8:94:af:88:5f:59:a1:ec:cc:14:48:26:26:
                    90:8b:c8:f3:84:41:e6:90:0a:8a:50:1d:48:6a:b0:
                    e0:ec:f8:58:75:34:21:03:36:44:78:4b:96:72:fa:
                    ce:68:43:43:6b:ad:ad:eb:63:12:2a:12:f6:72:d3:
                    f3:fb:6d:9a:6b:7b:2a:e8:1d:11:90:4b:94:4a:10:
                    94:1a:6b:5b:8d:3d:49:96:01:0a:d1:50:66:cb:27:
                    2c:eb:9e:68:44:4f:65:40:87:33:0a:2e:5d:81:91:
                    f7:80:60:ae:82:34:55:ee:8b:4b:87:e1:cd:c6:8b:
                    55:60:c1:73:09:a3:81:25:30:96:f9:e9:00:12:70:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:4D:94:8B:12:03:25:B0:76:4A:5D:AC:B7:59:91:73:00:C3:B4
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a3a2f33322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:2c:c7:5f:3b:72:53:3d:b3:94:1b:ab:63:17:00:73:61:2e:
         a6:3a:e1:19:b7:c4:60:09:fd:1a:ee:d1:de:1c:78:87:e8:2e:
         3e:b3:94:79:36:5a:4f:c8:81:2e:4a:07:39:61:8f:db:0e:1f:
         39:51:71:ef:08:3d:5f:5c:87:ac:b4:cf:50:43:63:d9:1b:ef:
         94:9d:49:63:fb:a8:d3:be:3f:72:dc:1c:bc:44:23:69:6f:cb:
         08:99:e9:fb:19:9c:97:be:a3:4b:e5:38:7d:ca:b5:45:20:c7:
         8d:8e:97:1b:e1:04:ef:3f:20:83:48:5f:d3:64:56:4c:e2:99:
         fa:3c:be:f4:19:27:0d:c1:17:30:45:84:4a:b0:4c:0a:40:5b:
         fe:1c:c4:6f:0e:4e:5a:ae:79:c6:d9:ec:fc:9f:ec:65:3d:f6:
         c2:56:b7:e9:40:70:e1:40:41:78:6a:28:96:35:96:db:e3:a6:
         9c:8c:54:84:a8:82:e0:d1:ec:7f:87:65:3d:cd:60:24:61:4d:
         75:6d:a6:94:46:34:d8:16:51:4f:c7:ed:c2:35:a5:83:87:df:
         de:de:52:cd:6a:17:4d:92:0d:27:de:f5:f9:b4:26:d5:3a:dc:
         2a:d3:39:30:ff:cc:82:28:b6:32:59:ba:11:4c:2d:15:91:cb:
         6b:66:ae:e6
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUfIroxG9B4ixFMOQW9j7FarA+SrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDVaFw0yNTA0MDMxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZDRDYyRDFDRTZEQzlFN0Yz
RDA3RjdFMDNBMTkyODM3MjgwNUI0NDE0NTlBNTMyNEQyOTE0NUZEN0UxMzUyOTcy
RTY0MDAzMUI1QUJBNjRFOUE1QjM2OEI0OTlFN0EyMDU3NDhFRjVGQjc5OEQ3Mjcw
Mzc3MUM5MDA1Mzk3MjlEMTYxRUYzNjQ2MzAxMEY0QkNGQ0UxQzQxMDdCOEMyNDIy
QjRENjc5QzZEMUY5NUIyNEEzQ0Y3MjMyMEYyMDE4MUYyQUQ0NzhBMUY2RUM5MjlG
NzgxRjFBRkMzRkZFRDBFNUQ1RTI4RTE1NkYxMEY5MjRDODk0QUY4ODVGNTlBMUVD
Q0MxNDQ4MjYyNjkwOEJDOEYzODQ0MUU2OTAwQThBNTAxRDQ4NkFCMEUwRUNGODU4
NzUzNDIxMDMzNjQ0Nzg0Qjk2NzJGQUNFNjg0MzQzNkJBREFERUI2MzEyMkExMkY2
NzJEM0YzRkI2RDlBNkI3QjJBRTgxRDExOTA0Qjk0NEExMDk0MUE2QjVCOEQzRDQ5
OTYwMTBBRDE1MDY2Q0IyNzJDRUI5RTY4NDQ0RjY1NDA4NzMzMEEyRTVEODE5MUY3
ODA2MEFFODIzNDU1RUU4QjRCODdFMUNEQzY4QjU1NjBDMTczMDlBMzgxMjUzMDk2
RjlFOTAwMTI3MEU2MDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv81i0c5tyefz0H9+A6GSg3KAW0QUWaUyTSkUX9fhNSly5kADG1q6
ZOmls2i0meeiBXSO9ft5jXJwN3HJAFOXKdFh7zZGMBD0vPzhxBB7jCQitNZ5xtH5
WySjz3IyDyAYHyrUeKH27JKfeB8a/D/+0OXV4o4VbxD5JMiUr4hfWaHszBRIJiaQ
i8jzhEHmkAqKUB1IarDg7PhYdTQhAzZEeEuWcvrOaENDa62t62MSKhL2ctPz+22a
a3sq6B0RkEuUShCUGmtbjT1JlgEK0VBmyycs655oRE9lQIczCi5dgZH3gGCugjRV
7otLh+HNxotVYMFzCaOBJTCW+ekAEnDmBQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FJNPTZSLEgMlsHZKXay3WZFzAMO0MB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2EzNDM2MzczODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM0MzkzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
RngwDQYJKoZIhvcNAQELBQADggEBAIYsx187clM9s5Qbq2MXAHNhLqY64Rm3xGAJ
/Rru0d4ceIfoLj6zlHk2Wk/IgS5KBzlhj9sOHzlRce8IPV9ch6y0z1BDY9kb75Sd
SWP7qNO+P3LcHLxEI2lvywiZ6fsZnJe+o0vlOH3KtUUgx42OlxvhBO8/IINIX9Nk
Vkzimfo8vvQZJw3BFzBFhEqwTApAW/4cxG8OTlquecbZ7Pyf7GU99sJWt+lAcOFA
QXhqKJY1ltvjppyMVISoguDR7H+HZT3NYCRhTXVtppRGNNgWUU/H7cI1pYOH397e
Us1qF02SDSfe9fm0JtU63CrTOTD/zIIotjJZuhFMLRWRy2tmruY=
-----END CERTIFICATE-----