Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343338303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343338303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          +tz4Bu5ZTkdLKdFr+AhZc+H685IEKb9sFjMhe+RAtpY=
Subject key identifier:   32:F1:55:59:49:C0:20:41:2A:B8:6B:44:EC:94:8E:B8:12:A4:5D:13
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1637D5A52CC432F6E59FC8F82269CAC0A196A730
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343338303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:ad8:4380::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:d5:a5:2c:c4:32:f6:e5:9f:c8:f8:22:69:ca:c0:a1:96:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:ef:76:97:15:4c:4e:12:e4:d7:f2:77:45:
                    42:1e:c7:4a:ab:12:85:25:06:35:9c:f9:aa:9c:26:
                    b9:d3:c0:6f:5b:93:64:e8:c8:7c:e2:c6:c4:9c:65:
                    80:9d:e7:71:85:82:d2:2d:6e:ec:8f:59:bd:3b:a8:
                    f7:62:36:c0:5b:10:6f:91:2c:85:89:8b:51:85:cd:
                    f8:45:b3:48:22:98:4b:8c:48:ab:2c:48:a8:5f:4a:
                    21:31:8b:ed:b4:48:06:9d:88:0f:cc:1f:d0:27:02:
                    65:30:bf:a7:90:1a:8a:4c:22:b0:ba:bd:d9:00:19:
                    ff:e4:42:32:9f:11:cd:23:b4:94:e1:12:01:a5:08:
                    0d:f2:dc:44:3f:1a:aa:5e:dd:27:02:4c:e3:df:0b:
                    72:44:f6:97:c1:99:c0:eb:60:9d:ab:19:50:64:08:
                    f0:c7:1d:d1:a0:b4:f0:5a:e6:6c:00:61:38:b0:1d:
                    42:bf:24:2d:21:ad:e6:5a:3e:ec:a3:6f:72:4d:2b:
                    df:c7:9d:d4:5f:ef:17:fd:cf:8b:4c:ca:ca:da:1d:
                    7c:2f:d5:57:38:3c:d3:a4:ab:1f:fc:86:47:2e:85:
                    75:9d:85:4e:fa:ed:e8:dd:d7:06:12:f8:6c:13:87:
                    fe:47:3f:35:e9:ad:8a:d9:72:4b:eb:4e:23:65:da:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:55:59:49:C0:20:41:2A:B8:6B:44:EC:94:8E:B8:12:A4:5D:13
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343338303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4380::/41

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:24:df:3f:43:c9:33:99:d7:3b:61:c5:6d:b7:4c:76:54:
         ad:a0:48:b1:0a:87:60:c4:27:ce:3d:e8:d2:82:7a:43:01:a7:
         5f:28:c0:1d:1a:f0:36:35:b5:2e:80:d1:a7:0e:1a:8c:c3:96:
         44:b1:a1:f1:86:8d:d7:cc:ea:5d:e8:75:9d:03:06:c9:b8:7d:
         5d:88:a8:2f:2e:28:45:37:7a:d0:64:00:fb:81:6a:1e:70:ff:
         35:1e:fb:e3:9a:ee:f4:2d:3e:74:92:b9:37:0c:92:58:88:39:
         01:32:06:63:fe:7e:c7:33:9d:9d:d6:84:3b:10:0d:d9:e3:c0:
         86:53:7a:0e:af:6a:b2:f0:43:b4:b7:84:6f:f3:d1:21:d7:4e:
         66:f7:2c:13:5f:54:dd:3a:b1:83:c1:ab:fa:95:88:99:dd:ca:
         5f:01:f7:d7:99:f9:35:50:71:f1:ba:cb:ee:3c:4c:13:4f:91:
         a5:de:1b:96:08:44:22:47:74:50:4c:5e:65:3e:cc:b7:55:17:
         b2:f9:ea:68:87:6c:83:64:35:05:06:f5:d5:d4:e9:6f:03:ae:
         3c:37:6a:16:f9:77:88:e6:57:ac:d0:f2:e2:11:50:80:72:9d:
         33:15:cb:45:62:e1:a1:c5:c3:95:62:79:0e:c1:e4:aa:3b:97:
         78:f8:13:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----