Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          R50+QKcs29GusYwv8NYGR7j0AQgs/q2jSQzVX1vYEE0=
Subject key identifier:   E7:E2:7B:4F:A4:97:87:95:D3:88:9B:13:0E:EA:B3:74:58:0D:60:CC
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       179C4CD3A14E6B6ED1F8408908F97622DFDAF47C
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        2804:ad8:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9c:4c:d3:a1:4e:6b:6e:d1:f8:40:89:08:f9:76:22:df:da:f4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:20:92:41:f7:fa:70:50:26:79:41:55:5c:c9:
                    d4:1b:fc:62:33:9f:b6:15:65:51:58:64:21:98:69:
                    82:ca:3d:48:3b:06:59:f7:82:a0:2f:d7:f4:ce:fb:
                    f8:0a:58:f9:c7:f0:cd:fe:e8:81:6a:c1:99:d1:7f:
                    93:10:76:11:60:be:fd:e6:80:0e:1a:2a:97:39:f8:
                    3d:79:42:7f:5b:b4:fd:00:dc:ea:11:bd:5a:b3:8d:
                    97:3c:69:d8:1b:f6:1a:b8:4c:5c:12:d1:46:d2:5d:
                    6c:9a:32:de:23:8f:ea:00:d6:df:a9:f4:72:a6:b4:
                    50:b1:38:69:c6:ef:d0:ee:4f:40:d4:03:8e:10:09:
                    bf:7c:67:3e:ad:bd:cd:18:09:2d:2a:16:d0:f0:1d:
                    ce:7d:ef:87:27:4a:c6:5b:96:1f:7e:22:1e:c5:07:
                    3a:30:68:81:14:55:2b:88:3e:7e:1a:21:c8:d0:0e:
                    39:3b:39:34:d4:8a:57:07:6e:11:ea:19:98:b1:fc:
                    42:ff:af:a5:d8:ea:34:fc:54:47:37:df:13:61:ab:
                    b9:30:90:8c:53:bb:31:9b:33:be:4a:b3:71:0d:4b:
                    f0:d0:54:55:ac:0b:dc:f5:86:f7:7f:74:f7:a7:4e:
                    63:19:14:66:a9:ca:ca:9b:1e:8e:1b:bd:74:47:5b:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:7B:4F:A4:97:87:95:D3:88:9B:13:0E:EA:B3:74:58:0D:60:CC
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:c9:82:69:3a:d7:27:ad:18:40:ea:f1:db:8f:dc:7d:cb:78:
         79:42:43:21:7a:82:cd:87:ac:b8:14:31:d3:2a:03:64:e7:ce:
         38:95:99:ef:46:f2:9b:7b:7d:98:e9:ff:70:98:b9:32:fb:ab:
         f4:a5:10:6a:5b:1c:73:29:95:df:50:db:d2:bc:21:4e:9b:3e:
         18:ca:a9:96:bf:9e:e5:9e:1d:c6:55:cc:10:77:a3:cb:b7:c4:
         3c:01:ea:4f:a1:b0:fb:68:0f:01:e2:07:ef:63:35:df:7a:82:
         ba:4f:5a:10:77:1a:a7:35:fd:86:bf:23:bd:44:32:5f:f1:3b:
         3b:1d:f6:fd:e5:c7:69:ef:ce:76:19:39:fe:79:b0:ac:b0:70:
         d9:b1:38:c2:17:5f:07:fe:52:38:34:a7:18:5c:a5:d4:0b:b2:
         4e:f1:9e:23:32:26:12:06:0e:4b:94:32:f3:c2:95:ca:81:8c:
         7a:58:10:53:e4:19:f5:5b:d0:63:f2:0e:f9:23:53:33:a8:a1:
         2d:af:fa:6e:cd:39:81:16:18:d2:54:c2:1c:5a:f8:7e:97:c9:
         9d:f6:73:5d:13:8e:67:a1:2d:60:45:4e:f2:61:fe:ab:03:ae:
         27:b5:80:bf:b3:4d:6d:01:86:a3:e3:36:33:be:68:bd:ab:a4:
         34:43:1b:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----