Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          DXG9JmxvdWCxcFoSlQmg3NZ0Im4VI+YungUJWzs8QNo=
Subject key identifier:   38:B9:B4:9B:80:09:B3:85:9A:62:B3:7A:05:39:F3:34:52:CF:E3:C1
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       4A357BB457B525B0CF7826203226365969C73F5F
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        2804:ad8:200::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:35:7b:b4:57:b5:25:b0:cf:78:26:20:32:26:36:59:69:c7:3f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:f1:7c:ec:88:b0:92:f5:a4:d6:89:1f:6b:
                    38:d9:31:ed:4f:d3:de:c3:7f:20:13:29:8d:7b:53:
                    42:e0:89:24:8b:b8:33:0f:a0:3e:3b:32:40:43:9b:
                    67:df:b5:fe:19:47:b5:b2:f0:bb:00:47:07:14:3d:
                    9d:6f:9e:b0:49:f0:79:f2:c5:d3:5a:85:31:52:8b:
                    e0:43:5d:67:e6:fc:f3:b6:80:0e:96:b4:cd:2e:57:
                    7d:58:54:ac:d7:f8:a0:98:8a:94:db:ef:12:64:f7:
                    a5:a5:ab:67:59:d5:81:4c:26:b7:a9:3b:cb:53:cf:
                    dc:4e:d3:3a:42:21:ac:18:6d:85:1a:82:5f:50:6c:
                    dd:d3:3b:0c:15:b8:0e:ad:84:ba:be:3d:84:ff:1f:
                    8a:d0:34:fa:8e:4f:50:b7:51:c1:8e:45:52:f8:57:
                    2a:3a:61:f9:5e:c6:6c:0d:8e:bf:14:ee:74:dc:06:
                    3c:5d:fc:69:e6:8f:45:c8:60:04:29:38:67:bf:5a:
                    36:ba:43:15:cf:66:79:e7:fb:53:02:ec:ac:d0:6f:
                    83:ab:3d:c9:dc:c7:ae:9e:df:6b:50:5b:a6:25:03:
                    63:8e:fe:db:7e:4a:26:90:eb:19:e5:37:53:60:de:
                    a1:07:78:3e:ff:c5:5a:bb:16:f1:23:8e:1c:17:f2:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:B4:9B:80:09:B3:85:9A:62:B3:7A:05:39:F3:34:52:CF:E3:C1
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:38:9c:75:4b:fa:7a:63:9a:d1:5a:bf:47:5a:fb:3b:9c:
         01:79:fc:af:ba:86:97:9e:94:99:37:6d:a1:f2:96:74:04:50:
         63:dd:93:d9:47:8f:56:73:df:2c:30:38:dc:d4:17:85:bc:0d:
         c1:fa:b8:ab:d5:c6:63:72:ce:56:03:04:cc:6b:68:87:60:ec:
         1c:c4:33:7b:52:e3:6e:62:6b:5d:34:d4:08:4e:63:56:69:dc:
         47:db:8e:f1:bf:28:ff:0f:87:f5:95:23:2d:34:63:77:01:fa:
         07:fe:fc:79:62:72:9c:18:fa:ff:de:a7:59:2d:ed:02:ca:d9:
         66:36:89:33:f2:0a:53:e2:9a:db:a8:19:e8:08:d8:30:61:f6:
         16:a5:12:c7:fb:53:80:32:3c:97:2c:9c:f0:ba:08:45:d4:04:
         80:a9:89:b0:29:73:b8:0f:7f:92:d2:ef:14:00:4c:e8:44:01:
         7d:84:50:87:c1:2f:2e:54:d4:42:20:cb:72:02:6c:ab:a0:fa:
         95:ae:55:b5:0d:4e:b4:7f:e0:f1:32:f0:13:52:58:92:20:16:
         b6:53:0a:e6:64:0e:af:03:9a:6d:9e:80:d6:37:50:20:f9:04:
         a5:86:0e:3b:59:58:7d:17:dd:b6:a8:60:ba:e6:9d:02:e2:89:
         85:1a:2d:86
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUSjV7tFe1JbDPeCYgMiY2WWnHP18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDRaFw0yNTA0MDMxOTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUZGM0YxN0NFQzg4QjA5MkY1
QTRENjg5MUY2QjM4RDkzMUVENEZEM0RFQzM3RjIwMTMyOThEN0I1MzQyRTA4OTI0
OEJCODMzMEZBMDNFM0IzMjQwNDM5QjY3REZCNUZFMTk0N0I1QjJGMEJCMDA0NzA3
MTQzRDlENkY5RUIwNDlGMDc5RjJDNUQzNUE4NTMxNTI4QkUwNDM1RDY3RTZGQ0Yz
QjY4MDBFOTZCNENEMkU1NzdENTg1NEFDRDdGOEEwOTg4QTk0REJFRjEyNjRGN0E1
QTVBQjY3NTlENTgxNEMyNkI3QTkzQkNCNTNDRkRDNEVEMzNBNDIyMUFDMTg2RDg1
MUE4MjVGNTA2Q0RERDMzQjBDMTVCODBFQUQ4NEJBQkUzRDg0RkYxRjhBRDAzNEZB
OEU0RjUwQjc1MUMxOEU0NTUyRjg1NzJBM0E2MUY5NUVDNjZDMEQ4RUJGMTRFRTc0
REMwNjNDNURGQzY5RTY4RjQ1Qzg2MDA0MjkzODY3QkY1QTM2QkE0MzE1Q0Y2Njc5
RTdGQjUzMDJFQ0FDRDA2RjgzQUIzREM5RENDN0FFOUVERjZCNTA1QkE2MjUwMzYz
OEVGRURCN0U0QTI2OTBFQjE5RTUzNzUzNjBERUExMDc3ODNFRkZDNTVBQkIxNkYx
MjM4RTFDMTdGMjg3MjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn/PxfOyIsJL1pNaJH2s42THtT9Pew38gEymNe1NC4Ikki7gzD6A+
OzJAQ5tn37X+GUe1svC7AEcHFD2db56wSfB58sXTWoUxUovgQ11n5vzztoAOlrTN
Lld9WFSs1/igmIqU2+8SZPelpatnWdWBTCa3qTvLU8/cTtM6QiGsGG2FGoJfUGzd
0zsMFbgOrYS6vj2E/x+K0DT6jk9Qt1HBjkVS+FcqOmH5XsZsDY6/FO503AY8Xfxp
5o9FyGAEKThnv1o2ukMVz2Z55/tTAuys0G+Dqz3J3Meunt9rUFumJQNjjv7bfkom
kOsZ5TdTYN6hB3g+/8VauxbxI44cF/KHJQIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FDi5tJuACbOFmmKzegU58zRSz+PBMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTMy
MzAzMDNhM2EyZjM0MzEyZDM0MzEyMDNkM2UyMDMyMzYzMjM0MzkzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBygECtgCADANBgkqhkiG9w0BAQsFAAOCAQEAYg44nHVL+npjmtFav0da+zuc
AXn8r7qGl56UmTdtofKWdARQY92T2UePVnPfLDA43NQXhbwNwfq4q9XGY3LOVgME
zGtoh2DsHMQze1LjbmJrXTTUCE5jVmncR9uO8b8o/w+H9ZUjLTRjdwH6B/78eWJy
nBj6/96nWS3tAsrZZjaJM/IKU+Ka26gZ6AjYMGH2FqUSx/tTgDI8lyyc8LoIRdQE
gKmJsClzuA9/ktLvFABM6EQBfYRQh8EvLlTUQiDLcgJsq6D6la5VtQ1OtH/g8TLw
E1JYkiAWtlMK5mQOrwOabZ6A1jdQIPkEpYYOO1lYfRfdtqhguuadAuKJhRothg==
-----END CERTIFICATE-----