Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          tA+xMww+W33M+79ALJ9+sLXTVZNjVD5lwOIFgqKzVdE=
Subject key identifier:   DC:16:E4:B6:D3:DA:01:F5:99:B4:FF:3C:09:37:10:E3:12:01:0A:FA
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       37B17DFDDB2E747247DB99197C15CB933EE6D47B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        2804:ad8:4180::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b1:7d:fd:db:2e:74:72:47:db:99:19:7c:15:cb:93:3e:e6:d4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:9b:55:45:0e:68:dc:86:a0:e3:d3:32:a3:
                    94:18:5e:da:c9:14:69:76:35:09:7f:fe:bb:98:2f:
                    04:d9:4c:da:54:db:87:55:0f:4c:d5:dc:2b:f7:bd:
                    ae:a4:84:05:5e:00:54:3f:74:73:92:04:4c:93:17:
                    9b:d2:55:96:80:33:14:50:ed:84:59:b8:94:5f:d6:
                    3c:60:03:13:b5:fa:42:5e:41:b6:d1:a3:fc:98:fa:
                    3d:7d:00:74:db:3e:f4:04:ed:6a:52:84:53:b5:14:
                    42:20:76:0b:c0:16:70:5f:9d:df:28:48:e0:d4:48:
                    39:1a:c8:a4:81:a8:99:77:63:6a:b6:1a:23:76:c2:
                    66:5f:4f:9d:1b:e9:1e:64:54:5f:11:f4:c1:11:a8:
                    ae:61:90:c5:d9:ee:fa:a9:e4:3f:fb:dc:67:fd:39:
                    25:d9:59:22:98:b4:c8:86:16:e3:a2:f6:50:ee:f1:
                    13:ab:77:4c:2b:6b:0f:1a:3b:71:b2:37:be:48:f7:
                    a0:7e:34:61:8c:bd:7c:e4:36:05:3b:13:43:f0:a3:
                    5f:3c:35:a1:25:f6:e8:12:e3:25:5d:83:25:6d:1a:
                    73:a2:31:90:9e:ce:8a:15:59:fa:1a:c0:58:0f:1b:
                    38:97:eb:5e:29:26:0e:2e:45:db:75:fc:cf:42:e1:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:16:E4:B6:D3:DA:01:F5:99:B4:FF:3C:09:37:10:E3:12:01:0A:FA
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4180::/41

    Signature Algorithm: sha256WithRSAEncryption
         50:ce:e5:2e:90:54:f4:52:0f:40:ce:45:e0:2e:58:f9:8d:89:
         2d:73:98:0f:44:b3:f5:21:73:28:72:48:db:43:a7:40:5b:de:
         ee:d6:21:bb:27:26:dd:1e:39:e9:06:a0:e3:5a:dd:5c:51:2a:
         28:b9:03:e6:2b:fe:d3:81:69:12:a2:10:d9:96:d6:ad:20:9f:
         f4:09:b0:7a:6c:d8:08:99:64:59:27:9c:c9:d0:89:9c:4d:6b:
         f4:a3:3c:5e:48:72:50:d2:c9:b9:36:92:69:7a:86:40:8a:60:
         97:a2:88:66:5a:a5:ce:e3:41:03:5a:e3:f7:2b:6c:97:d5:bc:
         0f:c1:d9:3f:c2:48:2b:3c:00:ea:a8:46:26:6f:e5:87:d9:83:
         ae:67:8b:69:65:27:73:21:72:87:a7:e4:4a:4e:b1:ec:d8:9a:
         53:e1:30:86:5c:9f:3d:79:a7:22:c0:5e:9c:83:6e:78:65:e5:
         01:84:b6:86:7a:21:8d:32:9d:68:90:9a:78:6a:9b:17:73:78:
         2e:ca:4e:4f:bb:08:a6:7c:d3:dd:f7:b7:b3:b1:a8:d2:c7:24:
         af:01:2f:0e:2b:20:15:24:9d:40:9f:36:13:65:db:a2:d7:9c:
         29:5a:c1:b8:a6:59:b3:58:86:f5:6f:5b:6b:c3:c7:de:17:f1:
         06:ac:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----