Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          WhH3rlAksi4lEZylcxpACzlWG8TUvpfqD015vpaMaII=
Subject key identifier:   AE:D1:88:05:FE:C7:35:D5:A9:9A:DB:99:29:76:19:EE:7A:2D:CB:D5
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       73DAEA5FF6E9F92FC7D7D7F827440E832B65A1EF
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        2804:ad8:829e::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:da:ea:5f:f6:e9:f9:2f:c7:d7:d7:f8:27:44:0e:83:2b:65:a1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:44:45:c7:76:de:23:76:5b:aa:54:35:aa:
                    2a:55:56:46:64:6d:be:69:ab:e3:40:e8:97:65:eb:
                    a5:d6:d4:1b:b3:7f:44:c9:d4:88:7a:70:57:9c:cf:
                    43:0c:cd:17:3e:d7:88:3e:91:e1:c5:fe:c8:14:90:
                    98:9e:3c:72:96:aa:be:d0:7c:d2:22:c2:d4:89:ef:
                    af:fe:4d:ac:ae:04:51:87:20:f3:26:99:69:31:db:
                    58:ad:0f:f9:c2:0c:5b:5a:9f:85:60:11:53:a9:1c:
                    77:02:40:ad:9d:da:92:3f:7a:92:a0:2b:2d:06:10:
                    64:8a:1a:48:64:9e:70:dc:1c:b1:47:d1:69:8f:e5:
                    fa:a6:3b:d1:d6:6f:04:f2:7d:59:fa:f8:88:ae:ea:
                    36:1c:c6:ae:dc:3f:6b:4d:a4:b2:17:d8:53:44:4c:
                    e6:ef:69:27:6c:6f:0c:d1:6c:80:06:77:5b:c6:0e:
                    a5:6b:56:cc:50:2e:51:95:a8:ad:44:58:34:21:15:
                    9f:cf:b7:0c:23:46:81:9a:b2:7a:60:b2:aa:ce:ba:
                    96:8b:1a:b4:1a:7d:82:4d:04:ad:5f:0f:90:71:ba:
                    94:ca:20:76:2f:86:13:47:32:1f:52:17:10:9e:ec:
                    01:38:b8:f2:34:94:c4:5d:72:f8:e7:2f:8e:fa:1d:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D1:88:05:FE:C7:35:D5:A9:9A:DB:99:29:76:19:EE:7A:2D:CB:D5
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:829e::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:68:65:75:67:fc:97:19:c3:3c:aa:c8:e6:55:ab:97:31:
         3f:f8:c8:26:c9:c5:ac:d5:45:15:59:e5:2f:be:09:ef:45:ca:
         23:d6:85:44:29:ce:91:23:8a:2c:6b:54:c9:57:82:10:1e:72:
         46:a1:c7:2e:45:f7:6d:3b:12:6d:52:d8:dd:53:b6:f6:e3:73:
         07:33:92:c4:33:45:a3:4f:cd:c6:22:58:83:0f:2c:1d:39:67:
         c1:cc:ae:3a:ef:be:2b:d7:a5:3c:dd:4e:66:f9:92:e6:9a:4c:
         61:43:3a:4c:09:30:83:63:d4:dd:78:24:e6:53:f9:d5:3c:6e:
         e5:81:44:e9:be:9b:69:00:91:37:af:81:60:43:83:21:79:44:
         ee:1f:21:d1:aa:1b:75:63:6e:17:86:64:d2:d2:3b:98:1a:3d:
         c7:f4:54:96:ce:5b:4e:f7:a9:26:65:d0:ad:b9:c5:21:95:ae:
         ce:db:ee:dd:d5:7c:b2:de:db:ed:cb:9e:f6:00:c3:52:e5:e9:
         67:4c:0c:15:f4:e3:45:63:d6:d0:d3:a5:f0:e8:08:69:1a:53:
         f6:fe:e8:60:61:ad:d9:f7:95:33:25:b2:85:96:ff:6c:b5:09:
         2d:e8:74:41:bb:6f:39:8d:8c:59:da:a4:ac:b4:1d:3d:c5:ee:
         7b:a8:63:5e
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUc9rqX/bp+S/H19f4J0QOgytloe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDJaFw0yNTA0MDMxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJBMTQ0NDVDNzc2REUyMzc2
NUJBQTU0MzVBQTJBNTU1NjQ2NjQ2REJFNjlBQkUzNDBFODk3NjVFQkE1RDZENDFC
QjM3RjQ0QzlENDg4N0E3MDU3OUNDRjQzMENDRDE3M0VENzg4M0U5MUUxQzVGRUM4
MTQ5MDk4OUUzQzcyOTZBQUJFRDA3Q0QyMjJDMkQ0ODlFRkFGRkU0REFDQUUwNDUx
ODcyMEYzMjY5OTY5MzFEQjU4QUQwRkY5QzIwQzVCNUE5Rjg1NjAxMTUzQTkxQzc3
MDI0MEFEOUREQTkyM0Y3QTkyQTAyQjJEMDYxMDY0OEExQTQ4NjQ5RTcwREMxQ0Ix
NDdEMTY5OEZFNUZBQTYzQkQxRDY2RjA0RjI3RDU5RkFGODg4QUVFQTM2MUNDNkFF
REMzRjZCNERBNEIyMTdEODUzNDQ0Q0U2RUY2OTI3NkM2RjBDRDE2QzgwMDY3NzVC
QzYwRUE1NkI1NkNDNTAyRTUxOTVBOEFENDQ1ODM0MjExNTlGQ0ZCNzBDMjM0Njgx
OUFCMjdBNjBCMkFBQ0VCQTk2OEIxQUI0MUE3RDgyNEQwNEFENUYwRjkwNzFCQTk0
Q0EyMDc2MkY4NjEzNDczMjFGNTIxNzEwOUVFQzAxMzhCOEYyMzQ5NEM0NUQ3MkY4
RTcyRjhFRkExRDRFMzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsqFERcd23iN2W6pUNaoqVVZGZG2+aavjQOiXZeul1tQbs39EydSI
enBXnM9DDM0XPteIPpHhxf7IFJCYnjxylqq+0HzSIsLUie+v/k2srgRRhyDzJplp
MdtYrQ/5wgxbWp+FYBFTqRx3AkCtndqSP3qSoCstBhBkihpIZJ5w3ByxR9Fpj+X6
pjvR1m8E8n1Z+viIruo2HMau3D9rTaSyF9hTREzm72knbG8M0WyABndbxg6la1bM
UC5RlaitRFg0IRWfz7cMI0aBmrJ6YLKqzrqWixq0Gn2CTQStXw+QcbqUyiB2L4YT
RzIfUhcQnuwBOLjyNJTEXXL45y+O+h1ONQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FK7RiAX+xzXVqZrbmSl2Ge56LcvVMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTM4
MzIzOTY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQK2IKeMA0GCSqGSIb3DQEBCwUAA4IBAQBDOmhldWf8lxnDPKrI5lWr
lzE/+MgmycWs1UUVWeUvvgnvRcoj1oVEKc6RI4osa1TJV4IQHnJGoccuRfdtOxJt
UtjdU7b243MHM5LEM0WjT83GIliDDywdOWfBzK46774r16U83U5m+ZLmmkxhQzpM
CTCDY9TdeCTmU/nVPG7lgUTpvptpAJE3r4FgQ4MheUTuHyHRqht1Y24XhmTS0juY
Gj3H9FSWzltO96kmZdCtucUhla7O2+7d1Xyy3tvty572AMNS5elnTAwV9ONFY9bQ
06Xw6AhpGlP2/uhgYa3Z95UzJbKFlv9stQkt6HRBu285jYxZ2qSstB09xe57qGNe
-----END CERTIFICATE-----