Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          yxjbrGLYoqvXS/tf0gUoEEA3+pD/NCLsq3cSJo7gsgQ=
Subject key identifier:   84:9F:19:61:1C:D7:D8:45:A5:2E:30:C4:91:32:E5:AE:AA:59:82:29
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       227A48293288E804151F7953154B7E6F20F7C8E4
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262494
IP address blocks:        2804:ad8:4280::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7a:48:29:32:88:e8:04:15:1f:79:53:15:4b:7e:6f:20:f7:c8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:71:29:f9:c7:0f:1c:35:06:0f:78:83:40:
                    67:6c:b2:c8:85:b6:7b:21:d3:a7:de:16:f9:ea:de:
                    fd:0e:1a:b5:3f:72:95:a8:32:15:2c:b0:f8:b7:df:
                    c0:4f:3d:69:b2:af:cb:cf:3c:ea:3a:06:5a:43:4e:
                    dc:97:cb:a8:07:b7:b8:0d:07:ea:47:87:3a:d2:46:
                    b1:01:fe:b7:5b:bb:2e:b2:be:87:05:47:af:35:f8:
                    da:aa:78:80:7e:81:b5:2a:7c:5d:23:1c:49:4f:86:
                    45:7e:69:73:8c:25:84:32:bf:89:15:77:3a:4b:85:
                    12:9c:45:24:4c:2e:60:a4:d2:d0:f3:25:31:75:30:
                    96:12:e2:0d:71:29:a8:d4:66:a3:03:b0:47:a2:fa:
                    61:06:f9:c0:da:6c:7b:f2:4a:27:97:95:34:5e:a2:
                    67:31:71:47:b0:6b:df:db:6c:ca:e9:50:f5:15:b1:
                    dd:3a:4d:ef:c5:15:e6:24:77:5f:fa:4f:d7:ce:90:
                    af:91:6d:89:ef:f2:70:fe:7a:7e:06:ac:f8:13:91:
                    30:34:6e:75:ce:72:47:81:13:c1:c4:f4:64:36:ff:
                    71:a7:29:01:61:e4:ba:47:73:2c:d6:b7:bc:22:73:
                    5c:6e:95:cc:f5:d1:d5:14:d3:94:87:da:84:c2:05:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:19:61:1C:D7:D8:45:A5:2E:30:C4:91:32:E5:AE:AA:59:82:29
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4280::/41

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:d6:98:fa:6b:a1:2f:5e:c3:b0:67:ea:95:34:15:f3:e7:
         15:ff:87:81:21:16:61:5a:41:1e:e4:9d:ef:7b:b0:e5:33:4e:
         f2:a6:2a:c8:26:26:a6:fc:ce:ff:23:df:69:31:cf:30:e8:0b:
         65:c2:07:c1:fb:24:7c:be:c1:14:4b:12:47:e9:31:14:10:75:
         2a:6c:19:f5:a8:92:6c:d5:a7:95:f7:86:16:36:dc:90:f1:8a:
         58:0b:d5:f8:b7:1e:0d:90:2b:4a:76:8b:70:e9:bd:48:15:f5:
         8b:a3:54:fa:d3:f7:d0:11:24:9e:2a:ac:82:f6:06:27:15:d3:
         e1:35:4d:5b:05:ae:98:c9:f2:f5:5f:2f:66:c6:ac:14:77:a9:
         ef:b2:f9:1e:7d:89:5c:72:85:70:95:f6:c6:46:4b:48:ed:54:
         a1:36:48:2f:42:bd:07:45:3f:24:10:23:b4:80:a3:b1:0d:51:
         e7:5b:a3:b1:ca:f4:cb:31:f7:e2:d3:8c:d7:cf:27:d3:01:b5:
         15:c9:4a:dd:e0:fa:4a:ed:5b:bb:92:6e:39:0e:d8:71:6d:c9:
         52:7c:7c:26:d6:2f:cd:25:ba:cf:b5:c6:12:12:11:37:fb:ed:
         85:c7:00:89:a3:6c:78:d7:42:48:39:b5:6c:88:2c:42:fb:96:
         c9:3d:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----