Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343031633a3a2f34362d3436203d3e20323632343934.roa
File:                     323830343a6164383a343031633a3a2f34362d3436203d3e20323632343934.roa (raw, json)
Hash identifier:          MqYkXfR/tmgDt//m8PCHrx8WonNQKEE+rHqGcJ7oNyQ=
Subject key identifier:   2F:49:A5:DC:9B:CA:A6:E1:36:69:D4:5E:6D:17:AF:D1:33:AA:C1:48
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       36B1B34D6D0ABC91FC2DBBDCDC04C394C15992A0
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343031633a3a2f34362d3436203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        2804:ad8:401c::/46 maxlen: 46

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:b3:4d:6d:0a:bc:91:fc:2d:bb:dc:dc:04:c3:94:c1:59:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:be:27:b4:35:4f:d3:a4:8d:8f:be:90:96:
                    e8:01:28:f7:cd:e0:ba:2d:d1:9f:8c:46:63:a3:54:
                    3e:79:77:5c:cf:13:83:53:7b:b2:51:43:e5:2e:66:
                    bd:c9:22:d4:1a:46:45:f9:22:ff:6a:69:26:55:b6:
                    ef:f1:8f:d7:0d:df:f4:16:aa:cc:d3:ac:59:7d:33:
                    21:ec:93:ef:62:9e:3b:b2:a7:61:4b:f2:f9:af:64:
                    fc:54:d2:bc:67:cc:17:21:ea:46:f5:de:97:13:a2:
                    91:1c:ef:83:41:8d:a4:36:97:3c:08:99:60:30:34:
                    9f:af:f9:8b:d7:58:c4:7d:a3:ea:43:00:f5:a5:f0:
                    c8:05:0a:34:90:cb:0b:fa:15:a2:04:05:63:56:92:
                    32:10:31:67:1d:1d:0e:d0:55:37:a7:30:4e:ea:6f:
                    e6:ef:aa:b5:22:5d:b2:d4:b8:f1:de:1a:a6:ac:72:
                    a7:ff:f5:79:dc:c0:fd:ac:e7:57:54:5a:54:07:38:
                    71:e6:2c:00:cb:ba:9e:cf:5c:61:f2:af:52:f1:05:
                    6e:50:4e:d7:a8:5c:84:22:58:c7:b8:38:1e:5d:2f:
                    47:d1:d7:50:6c:37:46:bf:ac:ec:e8:7a:f7:1e:c0:
                    fc:91:ab:ca:ad:4c:f0:57:17:47:0c:8d:a7:54:56:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:A5:DC:9B:CA:A6:E1:36:69:D4:5E:6D:17:AF:D1:33:AA:C1:48
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343031633a3a2f34362d3436203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:401c::/46

    Signature Algorithm: sha256WithRSAEncryption
         34:29:58:00:c2:c1:3a:81:38:60:ca:86:cc:94:af:08:e4:2f:
         a9:b4:8e:36:13:89:3a:7b:14:39:7b:cc:39:ee:3b:01:b7:dc:
         6e:9c:9b:b3:63:58:fb:57:44:1e:7a:a2:53:6f:4c:f8:13:36:
         6c:b0:bf:0b:ec:3a:da:cb:c8:34:34:9a:81:1f:a0:77:f3:59:
         f5:fb:98:a9:ff:de:a2:5e:9b:08:81:88:62:4f:ac:64:17:49:
         ba:02:d0:ad:5f:8a:e1:79:85:5c:6c:44:37:62:c9:61:d2:b6:
         4a:e9:1c:00:29:1c:c8:16:14:83:97:af:20:b7:41:d3:db:a6:
         b5:cc:eb:94:60:db:2c:22:66:7a:0a:a7:4b:6e:a6:0d:de:38:
         ae:54:1b:e8:54:98:3f:7f:8b:fa:c7:16:e5:ae:10:a1:ff:36:
         87:de:b9:05:f0:3d:3a:ca:83:7a:71:89:35:72:17:f4:36:24:
         19:07:b5:76:8e:24:32:12:0d:df:d8:98:76:4c:28:46:a7:69:
         90:cd:b4:b4:b0:dc:1f:ae:1a:3c:ac:8a:5e:1d:12:de:0a:58:
         4b:3d:0b:06:6c:4d:aa:36:72:8d:a4:3c:1e:e3:5d:59:ab:43:
         8d:c6:95:43:e4:7a:75:6b:1e:f4:ba:69:b5:4e:6d:b9:dd:57:
         96:35:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----