Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          g61hRIXse7VC0HScwvWi1H+NASe/GxxPE4bWlEKhjiU=
Subject key identifier:   1F:43:AF:F9:58:E5:35:1E:B3:28:D2:ED:A4:B0:72:96:4A:20:67:5A
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       66C54CC17A39AD814A406F041165604AC2266DF9
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Thu 11 Apr 2024 12:07:52 +0000
ROA not before:           Thu 11 Apr 2024 12:02:52 +0000
ROA not after:            Fri 11 Apr 2025 12:07:52 +0000
asID:                     262494
IP address blocks:        2804:ad8:828d::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c5:4c:c1:7a:39:ad:81:4a:40:6f:04:11:65:60:4a:c2:26:6d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 11 12:02:52 2024 GMT
            Not After : Apr 11 12:07:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:be:a2:3d:1e:a4:99:a2:42:33:51:82:f1:
                    06:a2:1a:ff:65:ff:2c:14:f5:44:20:a4:eb:25:8f:
                    fe:d4:a7:74:61:01:fd:19:46:09:21:de:2a:34:70:
                    75:b5:03:19:85:5b:22:bc:30:f3:81:12:99:16:aa:
                    75:9d:3b:c0:1d:71:00:6f:f1:7e:73:cb:5b:6d:69:
                    9e:f3:66:50:c3:71:42:11:41:ee:3f:c0:3a:d4:00:
                    0c:c5:e7:11:81:10:59:e2:9b:c2:a1:17:2a:1c:d8:
                    29:3b:45:d2:4c:a1:6a:d1:80:8c:fc:f0:f3:50:eb:
                    46:e6:96:60:e5:e3:8f:b4:30:88:50:19:2d:16:d3:
                    92:d1:f7:9d:95:8a:3c:9b:58:36:11:d8:56:62:c9:
                    9a:ff:0d:87:1a:03:66:7c:ef:99:11:a8:2f:22:69:
                    15:a8:c3:2b:4e:fb:09:4d:eb:c5:4d:01:49:8c:0f:
                    e6:b4:91:1b:0a:d5:7b:39:e6:8f:de:1d:54:1f:98:
                    d5:9a:96:b1:35:92:4e:ae:5a:61:44:bd:43:4f:46:
                    9a:d0:d4:e4:7c:08:d8:ce:09:00:c7:3f:64:d0:9d:
                    27:c2:e5:06:8e:38:b4:fb:da:b2:83:20:9b:21:b8:
                    03:a3:4f:d8:31:e6:97:ce:6c:0d:ad:de:67:c3:53:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:43:AF:F9:58:E5:35:1E:B3:28:D2:ED:A4:B0:72:96:4A:20:67:5A
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:828d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:1d:bf:34:3d:1b:6e:64:ac:11:ee:66:c1:c9:30:84:ba:
         86:1b:0c:d6:4e:94:a9:5f:59:91:9b:1d:e4:fd:07:de:45:ec:
         31:54:d8:77:31:25:c0:fd:6a:ad:ca:37:41:5f:66:77:c6:54:
         e9:2a:23:50:55:f9:48:c2:94:93:06:17:21:cf:d3:97:c9:37:
         0d:96:48:77:5f:dc:12:6a:67:73:a1:67:fc:d4:51:8a:a6:9e:
         9a:aa:3d:a7:7f:c1:b5:d1:d5:a0:39:b6:a9:ad:08:61:4c:63:
         7c:5f:d1:73:e5:6d:fb:ae:d4:8c:c1:e0:64:d1:c2:bf:0c:ca:
         dd:64:13:f0:23:ac:7b:1c:df:a4:b8:bb:51:86:4c:9b:e2:64:
         3a:bb:c8:71:c0:c0:8f:00:f6:7d:38:db:0a:67:ae:9a:03:b4:
         54:de:29:97:1c:33:e2:44:bd:a1:ba:cc:56:13:bc:62:d4:01:
         c8:2b:61:1e:9f:44:b5:91:65:76:d4:4f:94:55:cf:0e:2c:2c:
         95:07:05:d4:67:ee:2e:d1:a0:be:2c:b2:2d:7c:9c:73:43:6a:
         81:c6:fd:23:54:a0:21:4f:1e:1a:96:7d:c0:62:40:07:db:cd:
         34:8d:a8:68:e1:71:94:cb:ab:21:55:47:ed:00:a6:e0:b7:17:
         42:2f:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----