Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261643a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383261643a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          3f6MdPlSE/8j7ATnuqedLaKz6EWF75IZvzPJlCbHghc=
Subject key identifier:   AA:2F:D2:5D:64:96:6C:2B:B0:4E:BA:33:BF:2C:87:84:72:6C:70:D5
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       0CDDF6DDD3D6F05DD57CEFDDC8A59B6141BC0799
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261643a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Thu 11 Apr 2024 12:08:36 +0000
ROA not before:           Thu 11 Apr 2024 12:03:36 +0000
ROA not after:            Fri 11 Apr 2025 12:08:36 +0000
asID:                     262494
IP address blocks:        2804:ad8:82ad::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:dd:f6:dd:d3:d6:f0:5d:d5:7c:ef:dd:c8:a5:9b:61:41:bc:07:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 11 12:03:36 2024 GMT
            Not After : Apr 11 12:08:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:47:c4:29:bc:7f:43:2e:46:4d:a0:3c:4f:
                    88:80:d7:c2:9d:18:c8:d9:38:c8:3b:60:4e:8f:90:
                    fc:7d:f1:18:5e:73:45:15:38:a0:78:44:c5:cd:60:
                    3a:c3:26:58:5c:e4:59:07:2c:98:07:45:e1:8c:cc:
                    a8:77:52:8a:ac:75:d5:23:fe:c8:37:bc:60:cc:52:
                    fe:66:96:4d:cd:c9:77:98:75:e7:d6:34:52:22:d3:
                    07:0f:b5:7d:58:b8:3b:8c:1e:e6:93:e5:7d:a8:e5:
                    51:40:ed:49:b7:40:9d:b6:15:ef:1f:52:14:b4:52:
                    22:1d:8b:8e:e8:93:f5:ab:0f:0a:d9:f9:b2:e0:b9:
                    82:15:2a:41:b3:31:bc:20:27:52:f7:44:d5:b1:0f:
                    a7:f0:55:e0:ad:9c:06:5e:d5:bf:c5:09:19:e4:30:
                    f0:be:69:cd:c9:6a:cc:31:89:32:2b:4e:c2:3c:7c:
                    a0:61:df:8f:81:5b:ff:38:15:0d:b7:e7:1a:00:b9:
                    b1:28:6c:5f:49:0e:79:04:83:77:6e:c1:97:72:09:
                    1a:b2:1f:bd:f2:7d:61:4a:94:e6:28:01:01:23:b8:
                    1f:9a:e2:da:ee:f1:46:1c:29:a2:f8:0a:8d:de:7d:
                    21:19:64:76:7f:c1:49:61:21:13:db:3b:df:3d:bf:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2F:D2:5D:64:96:6C:2B:B0:4E:BA:33:BF:2C:87:84:72:6C:70:D5
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261643a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:82ad::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:e2:80:ae:36:3b:7d:af:6e:a6:d2:fd:2a:80:63:1c:41:c4:
         b8:61:97:e1:6e:6c:f5:e5:62:3c:dc:ab:42:e9:c8:71:2f:91:
         88:10:01:38:93:20:c1:84:0e:50:6e:57:b1:9d:47:6d:c4:e8:
         b5:6b:03:1d:4e:50:e7:fe:d1:6e:96:e6:35:f5:89:99:33:db:
         ea:18:38:10:1b:f3:c5:42:fc:aa:0e:be:1b:84:2e:3b:ba:0d:
         8b:32:38:c8:44:cb:6d:47:ca:26:e5:35:00:f9:51:a2:f7:d9:
         c5:92:9e:e5:84:a0:72:dd:bb:e3:b0:60:f0:c3:f8:da:ec:d3:
         5e:94:55:c1:3c:3b:cb:cd:7c:07:16:0b:3c:c6:37:70:47:11:
         f0:84:ab:41:20:7e:d0:f7:64:a9:e8:ce:8d:80:c7:47:c9:57:
         d9:51:ca:46:8e:d1:69:05:4f:ff:cd:08:03:ac:1a:25:01:13:
         11:0a:fc:f3:73:57:d9:1f:e3:6b:3e:09:99:23:8f:a1:89:37:
         c5:60:9a:4b:98:3f:4d:48:19:12:c4:59:82:4f:56:1f:68:b6:
         1a:c6:61:74:ae:34:87:45:de:a7:96:89:5a:37:9f:39:2a:8e:
         60:f4:9f:2c:ec:1f:67:2c:ca:b5:da:0f:eb:1b:3d:fb:6a:19:
         43:dc:83:ca
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUDN323dPW8F3VfO/dyKWbYUG8B5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MTExMjAzMzZaFw0yNTA0MTExMjA4MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VBRTQ3QzQyOUJDN0Y0MzJF
NDY0REEwM0M0Rjg4ODBEN0MyOUQxOEM4RDkzOEM4M0I2MDRFOEY5MEZDN0RGMTE4
NUU3MzQ1MTUzOEEwNzg0NEM1Q0Q2MDNBQzMyNjU4NUNFNDU5MDcyQzk4MDc0NUUx
OENDQ0E4Nzc1MjhBQUM3NUQ1MjNGRUM4MzdCQzYwQ0M1MkZFNjY5NjREQ0RDOTc3
OTg3NUU3RDYzNDUyMjJEMzA3MEZCNTdENThCODNCOEMxRUU2OTNFNTdEQThFNTUx
NDBFRDQ5Qjc0MDlEQjYxNUVGMUY1MjE0QjQ1MjIyMUQ4QjhFRTg5M0Y1QUIwRjBB
RDlGOUIyRTBCOTgyMTUyQTQxQjMzMUJDMjAyNzUyRjc0NEQ1QjEwRkE3RjA1NUUw
QUQ5QzA2NUVENUJGQzUwOTE5RTQzMEYwQkU2OUNEQzk2QUNDMzE4OTMyMkI0RUMy
M0M3Q0EwNjFERjhGODE1QkZGMzgxNTBEQjdFNzFBMDBCOUIxMjg2QzVGNDkwRTc5
MDQ4Mzc3NkVDMTk3NzIwOTFBQjIxRkJERjI3RDYxNEE5NEU2MjgwMTAxMjNCODFG
OUFFMkRBRUVGMTQ2MUMyOUEyRjgwQThEREU3RDIxMTk2NDc2N0ZDMTQ5NjEyMTEz
REIzQkRGM0RCRkQ2RkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzq5HxCm8f0MuRk2gPE+IgNfCnRjI2TjIO2BOj5D8ffEYXnNFFTig
eETFzWA6wyZYXORZByyYB0XhjMyod1KKrHXVI/7IN7xgzFL+ZpZNzcl3mHXn1jRS
ItMHD7V9WLg7jB7mk+V9qOVRQO1Jt0CdthXvH1IUtFIiHYuO6JP1qw8K2fmy4LmC
FSpBszG8ICdS90TVsQ+n8FXgrZwGXtW/xQkZ5DDwvmnNyWrMMYkyK07CPHygYd+P
gVv/OBUNt+caALmxKGxfSQ55BIN3bsGXcgkash+98n1hSpTmKAEBI7gfmuLa7vFG
HCmi+AqN3n0hGWR2f8FJYSET2zvfPb/W/wIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FKov0l1klmwrsE66M78sh4RybHDVMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTM4
MzI2MTY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQK2IKtMA0GCSqGSIb3DQEBCwUAA4IBAQBC4oCuNjt9r26m0v0qgGMc
QcS4YZfhbmz15WI83KtC6chxL5GIEAE4kyDBhA5QblexnUdtxOi1awMdTlDn/tFu
luY19YmZM9vqGDgQG/PFQvyqDr4bhC47ug2LMjjIRMttR8om5TUA+VGi99nFkp7l
hKBy3bvjsGDww/ja7NNelFXBPDvLzXwHFgs8xjdwRxHwhKtBIH7Q92Sp6M6NgMdH
yVfZUcpGjtFpBU//zQgDrBolARMRCvzzc1fZH+NrPgmZI4+hiTfFYJpLmD9NSBkS
xFmCT1YfaLYaxmF0rjSHRd6nlolaN585Ko5g9J8s7B9nLMq12g/rGz37ahlD3IPK
-----END CERTIFICATE-----