Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          xUgpLHdqn170MP2DThRvrA0tsbVBX/QTN/j62h1igGU=
Subject key identifier:   30:BA:AC:93:84:98:01:04:82:C0:47:59:74:EE:11:EF:CD:01:E7:DB
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       7E2B1B29001C36D468ADB8C61722CD805A48A438
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        2804:ad8:8298::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2b:1b:29:00:1c:36:d4:68:ad:b8:c6:17:22:cd:80:5a:48:a4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:cf:27:f5:6c:a2:61:07:79:26:be:e4:eb:
                    66:1c:60:d2:b0:d3:15:0f:69:84:db:a7:ec:f4:ba:
                    f2:dc:59:7e:ca:9f:37:bf:14:26:23:45:df:15:f0:
                    b9:2b:b2:cd:37:66:33:55:01:04:32:c2:b8:9a:5f:
                    e4:8b:df:64:29:e8:62:20:06:44:58:ed:74:22:fc:
                    03:55:b5:db:ca:65:cb:df:0b:b2:40:09:7a:37:f2:
                    f3:eb:75:9e:02:dd:bd:2f:1a:cf:48:1c:77:8b:6a:
                    cf:cc:ac:61:6a:a6:a7:44:7e:d3:90:10:31:37:b5:
                    58:4d:09:2c:37:03:45:da:2f:a8:81:db:22:0f:88:
                    75:04:6d:22:39:ca:74:e1:8b:ad:a5:e2:c6:87:08:
                    f1:63:f9:89:07:72:5c:ce:41:e9:79:40:d7:93:b9:
                    f3:3a:03:fd:e3:d6:c9:0b:d2:82:74:ae:5d:d5:f8:
                    dd:a0:3b:ee:ad:0b:44:c7:0a:96:ba:f8:f9:0f:f1:
                    09:2e:f9:47:d0:31:1e:d9:f1:ee:db:b4:40:41:4b:
                    d1:0e:7b:60:a7:bd:0e:a5:3d:8f:75:66:62:50:cb:
                    82:cf:52:fc:48:bf:f2:4f:ae:c9:4f:2b:f8:1f:29:
                    69:16:3a:8b:3e:16:ef:01:df:73:48:51:48:63:13:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BA:AC:93:84:98:01:04:82:C0:47:59:74:EE:11:EF:CD:01:E7:DB
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8298::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:69:5e:eb:3a:98:1d:c2:38:28:39:5f:b3:fa:76:11:a0:
         52:98:47:d1:80:df:b7:ea:5a:00:72:ac:45:6d:5e:49:f8:59:
         55:06:d3:30:73:e1:4f:32:06:17:75:bf:16:4f:81:71:ee:db:
         b4:75:4a:6f:71:0a:e0:76:5c:b3:6f:d0:19:7d:52:b9:63:e5:
         3a:25:89:f9:fa:c9:b1:92:74:71:a2:ac:22:de:da:14:f8:bd:
         f6:6c:85:45:21:24:14:b9:f8:7f:04:32:3f:93:c3:57:4b:2c:
         7e:50:e6:a8:c5:d5:79:a0:57:36:de:0d:f8:11:cf:58:eb:a0:
         95:08:53:3f:5d:19:7d:0b:90:5d:9d:f8:13:54:1f:6b:41:3e:
         a6:2e:cf:6d:14:cd:51:50:1a:17:1c:f2:44:20:32:83:a8:b9:
         b1:38:ad:e7:15:d1:3a:6d:c2:b8:f8:90:a3:e5:55:e6:53:6f:
         1b:91:42:07:4d:6a:88:e3:14:46:5a:d7:f1:1d:78:19:e6:00:
         1f:7d:aa:bd:9a:e7:ca:30:5a:34:e2:81:0a:32:71:22:ec:04:
         e2:5a:2c:5c:5a:43:e7:68:9d:f4:67:55:39:e6:7f:f2:62:ab:
         95:7b:02:d4:58:4a:78:83:f7:40:b8:f5:ab:05:1a:db:ca:4c:
         fc:86:09:cd
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUfisbKQAcNtRorbjGFyLNgFpIpDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDhaFw0yNTA0MDMxOTAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzIwQ0NGMjdGNTZDQTI2MTA3
NzkyNkJFRTRFQjY2MUM2MEQyQjBEMzE1MEY2OTg0REJBN0VDRjRCQUYyREM1OTdF
Q0E5RjM3QkYxNDI2MjM0NURGMTVGMEI5MkJCMkNEMzc2NjMzNTUwMTA0MzJDMkI4
OUE1RkU0OEJERjY0MjlFODYyMjAwNjQ0NThFRDc0MjJGQzAzNTVCNURCQ0E2NUNC
REYwQkIyNDAwOTdBMzdGMkYzRUI3NTlFMDJEREJEMkYxQUNGNDgxQzc3OEI2QUNG
Q0NBQzYxNkFBNkE3NDQ3RUQzOTAxMDMxMzdCNTU4NEQwOTJDMzcwMzQ1REEyRkE4
ODFEQjIyMEY4ODc1MDQ2RDIyMzlDQTc0RTE4QkFEQTVFMkM2ODcwOEYxNjNGOTg5
MDc3MjVDQ0U0MUU5Nzk0MEQ3OTNCOUYzM0EwM0ZERTNENkM5MEJEMjgyNzRBRTVE
RDVGOEREQTAzQkVFQUQwQjQ0QzcwQTk2QkFGOEY5MEZGMTA5MkVGOTQ3RDAzMTFF
RDlGMUVFREJCNDQwNDE0QkQxMEU3QjYwQTdCRDBFQTUzRDhGNzU2NjYyNTBDQjgy
Q0Y1MkZDNDhCRkYyNEZBRUM5NEYyQkY4MUYyOTY5MTYzQThCM0UxNkVGMDFERjcz
NDg1MTQ4NjMxMzhDRjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwgzPJ/VsomEHeSa+5OtmHGDSsNMVD2mE26fs9Lry3Fl+yp83vxQm
I0XfFfC5K7LNN2YzVQEEMsK4ml/ki99kKehiIAZEWO10IvwDVbXbymXL3wuyQAl6
N/Lz63WeAt29LxrPSBx3i2rPzKxhaqanRH7TkBAxN7VYTQksNwNF2i+ogdsiD4h1
BG0iOcp04YutpeLGhwjxY/mJB3JczkHpeUDXk7nzOgP949bJC9KCdK5d1fjdoDvu
rQtExwqWuvj5D/EJLvlH0DEe2fHu27RAQUvRDntgp70OpT2PdWZiUMuCz1L8SL/y
T67JTyv4HylpFjqLPhbvAd9zSFFIYxOM9QIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FDC6rJOEmAEEgsBHWXTuEe/NAefbMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTM4
MzIzOTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQK2IKYMA0GCSqGSIb3DQEBCwUAA4IBAQBjWmle6zqYHcI4KDlfs/p2
EaBSmEfRgN+36loAcqxFbV5J+FlVBtMwc+FPMgYXdb8WT4Fx7tu0dUpvcQrgdlyz
b9AZfVK5Y+U6JYn5+smxknRxoqwi3toU+L32bIVFISQUufh/BDI/k8NXSyx+UOao
xdV5oFc23g34Ec9Y66CVCFM/XRl9C5BdnfgTVB9rQT6mLs9tFM1RUBoXHPJEIDKD
qLmxOK3nFdE6bcK4+JCj5VXmU28bkUIHTWqI4xRGWtfxHXgZ5gAffaq9mufKMFo0
4oEKMnEi7ATiWixcWkPnaJ30Z1U55n/yYquVewLUWEp4g/dAuPWrBRrbykz8hgnN
-----END CERTIFICATE-----