Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          nk4QwBYD3guKgTIzxM/Dp8jwsI2T+RS9I/u8gFfo4sM=
Subject key identifier:   DA:37:8F:2F:D5:86:3A:CA:6F:D1:54:DA:CE:C2:8A:E4:59:21:76:CE
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1E99EC77202D0C89EDE24FE0C09ABFC76937C841
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        2804:ad8:3f80::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:99:ec:77:20:2d:0c:89:ed:e2:4f:e0:c0:9a:bf:c7:69:37:c8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:00:9e:63:1d:e6:d9:7d:69:e7:61:1e:b5:
                    6f:33:a7:87:a5:c6:f5:23:a7:4d:19:8a:a6:d3:82:
                    35:59:8e:68:d5:50:54:22:f3:1c:7f:73:c1:f9:3c:
                    8a:ab:ab:71:04:d6:5f:43:f0:62:b1:9b:ae:83:af:
                    48:ae:c7:8f:d4:85:48:3e:12:d8:ea:5e:81:cf:18:
                    34:c4:bf:56:09:d8:11:f9:a3:4c:75:2e:27:b7:a1:
                    ac:fa:b1:7e:31:44:5b:c7:c7:ed:eb:c8:d8:79:0f:
                    15:5a:78:9e:ec:94:9b:79:ff:ad:ee:df:ac:35:9e:
                    9c:ad:b6:eb:1d:f6:11:cd:8d:d9:82:52:97:a9:55:
                    b4:65:04:74:01:e9:de:3a:1b:07:7a:15:22:9f:79:
                    1c:01:d1:3e:b8:c3:c8:9d:4b:ae:c6:d2:eb:14:b2:
                    df:1c:b7:e2:4f:91:3e:ae:18:3b:d2:f1:f3:b0:75:
                    33:b6:c6:10:f8:d3:fc:81:2b:f6:fd:89:8d:ce:d6:
                    72:2f:9b:40:44:6a:97:31:eb:4c:1e:d9:0c:ee:29:
                    41:22:a5:7c:fa:bd:3b:8e:71:ce:6b:91:ac:52:11:
                    d2:81:c3:16:2e:d0:20:44:44:c7:c7:1b:fc:d7:02:
                    a0:e1:0f:8b:e3:b0:f9:4b:d7:0f:a0:8a:ca:4a:b9:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:37:8F:2F:D5:86:3A:CA:6F:D1:54:DA:CE:C2:8A:E4:59:21:76:CE
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:3f80::/41

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:4b:ca:ae:2a:b3:67:50:9e:bd:c6:39:dd:58:c9:08:da:
         a3:46:09:9f:d0:02:3e:2f:44:26:ec:fd:6e:33:60:e8:4a:e0:
         b2:08:c5:98:a4:a7:08:4a:34:93:c9:1d:ba:e0:aa:c8:53:8f:
         2a:6a:bd:24:b2:02:b3:c4:5d:eb:c3:57:13:80:a7:b4:14:d3:
         e1:cb:28:dc:95:ee:c3:e3:78:47:25:d8:7e:0a:39:c0:f8:6b:
         03:cc:07:47:9e:2e:5e:8a:18:bd:a2:52:68:02:76:1c:1a:bf:
         ba:41:9f:ae:8b:86:99:a2:a7:c8:bb:15:eb:61:fb:86:12:e6:
         ee:cf:19:93:12:f7:d9:c4:ef:fd:01:f2:c4:61:8e:c9:e2:75:
         3e:87:9b:e4:2c:16:20:80:09:f5:56:48:11:89:9c:fc:99:80:
         f1:1c:be:c2:e5:7e:41:16:88:f7:ce:97:9a:73:47:9c:f4:50:
         16:88:31:43:eb:86:94:0d:dc:f2:37:8b:53:a5:f6:06:44:2d:
         a1:a2:37:1d:d3:16:ce:ac:5e:dd:86:31:d3:65:8b:58:ba:de:
         36:05:50:a5:3c:7e:57:2a:22:91:c7:32:d1:81:c3:2a:87:cd:
         80:32:ec:86:99:be:a2:24:65:ad:0d:97:c8:c8:8b:62:68:66:
         60:52:73:80
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUHpnsdyAtDInt4k/gwJq/x2k3yEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDlaFw0yNTA0MDMxOTAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk4RjAwOUU2MzFERTZEOTdE
NjlFNzYxMUVCNTZGMzNBNzg3QTVDNkY1MjNBNzREMTk4QUE2RDM4MjM1NTk4RTY4
RDU1MDU0MjJGMzFDN0Y3M0MxRjkzQzhBQUJBQjcxMDRENjVGNDNGMDYyQjE5QkFF
ODNBRjQ4QUVDNzhGRDQ4NTQ4M0UxMkQ4RUE1RTgxQ0YxODM0QzRCRjU2MDlEODEx
RjlBMzRDNzUyRTI3QjdBMUFDRkFCMTdFMzE0NDVCQzdDN0VERUJDOEQ4NzkwRjE1
NUE3ODlFRUM5NDlCNzlGRkFERUVERkFDMzU5RTlDQURCNkVCMURGNjExQ0Q4REQ5
ODI1Mjk3QTk1NUI0NjUwNDc0MDFFOURFM0ExQjA3N0ExNTIyOUY3OTFDMDFEMTNF
QjhDM0M4OUQ0QkFFQzZEMkVCMTRCMkRGMUNCN0UyNEY5MTNFQUUxODNCRDJGMUYz
QjA3NTMzQjZDNjEwRjhEM0ZDODEyQkY2RkQ4OThEQ0VENjcyMkY5QjQwNDQ2QTk3
MzFFQjRDMUVEOTBDRUUyOTQxMjJBNTdDRkFCRDNCOEU3MUNFNkI5MUFDNTIxMUQy
ODFDMzE2MkVEMDIwNDQ0NEM3QzcxQkZDRDcwMkEwRTEwRjhCRTNCMEY5NEJENzBG
QTA4QUNBNEFCOTRGMDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyY8AnmMd5tl9aedhHrVvM6eHpcb1I6dNGYqm04I1WY5o1VBUIvMc
f3PB+TyKq6txBNZfQ/BisZuug69IrseP1IVIPhLY6l6Bzxg0xL9WCdgR+aNMdS4n
t6Gs+rF+MURbx8ft68jYeQ8VWnie7JSbef+t7t+sNZ6crbbrHfYRzY3ZglKXqVW0
ZQR0AeneOhsHehUin3kcAdE+uMPInUuuxtLrFLLfHLfiT5E+rhg70vHzsHUztsYQ
+NP8gSv2/YmNztZyL5tARGqXMetMHtkM7ilBIqV8+r07jnHOa5GsUhHSgcMWLtAg
RETHxxv81wKg4Q+L47D5S9cPoIrKSrlPBwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FNo3jy/VhjrKb9FU2s7CiuRZIXbOMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTMz
NjYzODMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcHKAQK2D+AMA0GCSqGSIb3DQEBCwUAA4IBAQA3/EvKriqzZ1CevcY53VjJ
CNqjRgmf0AI+L0Qm7P1uM2DoSuCyCMWYpKcISjSTyR264KrIU48qar0ksgKzxF3r
w1cTgKe0FNPhyyjcle7D43hHJdh+CjnA+GsDzAdHni5eihi9olJoAnYcGr+6QZ+u
i4aZoqfIuxXrYfuGEubuzxmTEvfZxO/9AfLEYY7J4nU+h5vkLBYggAn1VkgRiZz8
mYDxHL7C5X5BFoj3zpeac0ec9FAWiDFD64aUDdzyN4tTpfYGRC2hojcd0xbOrF7d
hjHTZYtYut42BVClPH5XKiKRxzLRgcMqh82AMuyGmb6iJGWtDZfIyItiaGZgUnOA
-----END CERTIFICATE-----