Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          ZkMg4awdX5SpkYetxJyNaHU5hBlFe8kMl/raAfPGMKU=
Subject key identifier:   DC:B3:FB:D2:FD:D5:96:9B:28:87:94:4A:36:02:2F:B8:C7:35:66:E6
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       03BCAEB2AC042CC6B644673E0761785A2750F141
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262494
IP address blocks:        2804:ad8:8296::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bc:ae:b2:ac:04:2c:c6:b6:44:67:3e:07:61:78:5a:27:50:f1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:d0:0f:35:33:13:7a:6f:e0:1e:e3:63:d7:
                    a2:1d:cc:d7:e2:f3:44:6d:18:9b:1a:70:eb:44:a6:
                    9d:ce:50:aa:a4:ea:00:cc:c6:09:a1:0e:60:28:94:
                    1c:15:a7:03:95:88:8c:b4:44:9f:fe:69:aa:78:93:
                    5c:6f:f1:91:8c:13:53:01:f3:93:dd:b4:70:87:a6:
                    ea:bd:d9:4f:09:68:42:b8:50:9f:15:42:b6:13:31:
                    60:7c:86:43:d2:70:5e:30:44:6c:a7:38:2f:bc:38:
                    e5:b0:11:44:ff:c2:c0:00:c8:37:a4:cf:24:ba:15:
                    b3:89:e8:c5:10:7e:02:fc:26:f7:69:ac:81:b9:7c:
                    59:e0:ec:a9:e4:f4:0c:b5:b8:f5:82:3f:bc:2c:d8:
                    8d:cb:a4:f9:3a:5d:c0:a0:bd:4e:1b:da:00:c3:4f:
                    27:20:49:e3:d0:ff:70:fd:35:75:63:a1:36:d9:a1:
                    5b:68:d8:13:67:a5:5c:df:e4:00:44:2c:5d:a7:22:
                    5b:29:26:3b:a9:59:5f:ae:d7:d1:c2:58:9e:70:9b:
                    68:f4:9b:d1:41:28:4e:82:64:c2:77:0f:ee:36:dd:
                    66:0a:1f:9f:28:d9:9e:d7:64:cb:a4:29:64:97:13:
                    fa:73:d4:48:fe:bb:a5:e1:2b:ad:00:25:0d:c0:78:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B3:FB:D2:FD:D5:96:9B:28:87:94:4A:36:02:2F:B8:C7:35:66:E6
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8296::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:44:68:6f:bf:e4:25:27:41:ac:ba:2f:d2:24:93:49:c2:07:
         b7:03:25:d4:00:53:b4:96:f1:71:04:48:e6:7b:a9:a1:6a:37:
         03:44:cd:31:a1:a1:e7:94:28:72:81:0b:3c:44:24:a8:a6:f2:
         a3:c3:45:74:4c:22:44:8e:71:36:6b:35:d5:4b:5e:3e:31:33:
         f3:53:32:0b:22:c3:3c:a4:56:8c:dd:e3:fc:51:8f:69:2b:40:
         34:08:8d:84:8a:f8:4d:53:f2:6c:48:14:3d:b9:1d:8f:98:51:
         7f:1e:2c:8b:ca:ab:5e:77:1a:cf:7a:4c:5a:60:b4:7f:78:33:
         be:70:ba:ef:92:f4:66:fd:c8:14:60:c5:92:0f:9c:a9:1b:82:
         77:5e:50:e8:8f:6a:9c:82:ca:ba:f0:c7:36:05:65:41:fe:03:
         fd:7b:d1:48:9d:6f:13:58:63:8c:64:88:97:1e:43:fd:5d:95:
         05:f6:c6:04:84:2f:26:00:ee:c9:d3:6b:58:42:d4:e1:0e:a9:
         d6:b1:9f:f2:0e:01:6d:4a:03:da:3b:e4:6f:2c:86:4f:90:98:
         16:14:19:cb:70:e6:49:58:2a:e5:dd:6b:67:96:dc:20:5c:13:
         03:70:92:97:7c:07:77:ac:77:b9:51:9c:e6:f6:98:a9:a2:08:
         98:9e:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----