Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383262323a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383262323a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          Czlg9nDwB1FqChTcy5MAwfpdV/cnKleSV20Fqk1KMSo=
Subject key identifier:   6D:4B:95:26:6C:CD:7D:D9:8B:8E:EB:2A:C8:B2:40:A0:05:EF:F3:50
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       59FF250ED0FF0EF41C33F32AE7D6366CE8828E5B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383262323a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Mon 15 Apr 2024 18:35:43 +0000
ROA not before:           Mon 15 Apr 2024 18:30:43 +0000
ROA not after:            Tue 15 Apr 2025 18:35:43 +0000
asID:                     262494
IP address blocks:        2804:ad8:82b2::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ff:25:0e:d0:ff:0e:f4:1c:33:f3:2a:e7:d6:36:6c:e8:82:8e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 15 18:30:43 2024 GMT
            Not After : Apr 15 18:35:43 2025 GMT
        Subject: CN=3082010A0282010100BEA4AC12ADC550D4751F745BE99C49C6F16DE0D96BCF668E3142BEB8458D0F40ACE1B0E4D44333DDE1B707745A9EEB3E42A84D008B4F48A75A52B95CBA0719D6AB3F120B6E5DF80D56CE11C4BB3F473C88002FD26CB5B35245EB95512D093EF5BAF5364705B0444C544D89F07143AF9CEA53BD1A5F15C911B1B90205405A090ECF18F3AFE66E0219BFE0D5E87E73BA45BD86F321C9E573C6300FA89C1390D8EFBA037F3743ADD61251EB9392B45F4C71BF1D4FA9F7E509C6B0A7751B4487163DF65792BF8BFE34B9403092C00E78AB1A70C2EB0A5A31E6961289DA0BC4EF4BF5A412875BF4478BAC2AE4952EB59F324423E2D8B46DF00A1801A4097315F9E3650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:ac:12:ad:c5:50:d4:75:1f:74:5b:e9:9c:
                    49:c6:f1:6d:e0:d9:6b:cf:66:8e:31:42:be:b8:45:
                    8d:0f:40:ac:e1:b0:e4:d4:43:33:dd:e1:b7:07:74:
                    5a:9e:eb:3e:42:a8:4d:00:8b:4f:48:a7:5a:52:b9:
                    5c:ba:07:19:d6:ab:3f:12:0b:6e:5d:f8:0d:56:ce:
                    11:c4:bb:3f:47:3c:88:00:2f:d2:6c:b5:b3:52:45:
                    eb:95:51:2d:09:3e:f5:ba:f5:36:47:05:b0:44:4c:
                    54:4d:89:f0:71:43:af:9c:ea:53:bd:1a:5f:15:c9:
                    11:b1:b9:02:05:40:5a:09:0e:cf:18:f3:af:e6:6e:
                    02:19:bf:e0:d5:e8:7e:73:ba:45:bd:86:f3:21:c9:
                    e5:73:c6:30:0f:a8:9c:13:90:d8:ef:ba:03:7f:37:
                    43:ad:d6:12:51:eb:93:92:b4:5f:4c:71:bf:1d:4f:
                    a9:f7:e5:09:c6:b0:a7:75:1b:44:87:16:3d:f6:57:
                    92:bf:8b:fe:34:b9:40:30:92:c0:0e:78:ab:1a:70:
                    c2:eb:0a:5a:31:e6:96:12:89:da:0b:c4:ef:4b:f5:
                    a4:12:87:5b:f4:47:8b:ac:2a:e4:95:2e:b5:9f:32:
                    44:23:e2:d8:b4:6d:f0:0a:18:01:a4:09:73:15:f9:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4B:95:26:6C:CD:7D:D9:8B:8E:EB:2A:C8:B2:40:A0:05:EF:F3:50
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383262323a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:82b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:cc:da:fc:88:dc:d7:cd:e4:d5:90:79:3a:a2:63:6b:76:bb:
         a2:03:38:14:8c:b1:f0:e5:3c:58:3a:9b:83:13:bf:2c:8e:1b:
         f3:6a:cc:a3:0e:bf:22:66:e2:6a:70:47:91:de:bb:46:8f:e1:
         86:8e:cd:d5:f7:93:79:88:b5:7c:f7:10:6a:5a:bd:eb:2c:7b:
         df:b1:75:29:97:38:c7:27:cb:db:46:36:ce:15:4c:79:96:c7:
         91:a0:fb:0e:3e:70:5d:23:24:e1:b9:09:17:c2:ad:d5:d2:88:
         54:d2:8c:90:26:74:12:23:ba:3d:a2:87:71:1b:b0:a4:5d:68:
         e1:2c:6e:39:12:98:8c:cb:ba:cd:d8:16:e2:64:d3:97:81:eb:
         3d:1c:e6:ea:0d:cc:42:4f:62:6c:f3:80:b7:a2:7f:80:02:af:
         05:c3:22:04:d8:11:96:c6:a1:e6:18:a0:29:28:ad:fc:e5:d4:
         3a:2f:70:14:da:9d:4f:20:6b:0b:a5:5d:99:7f:90:cc:2a:a5:
         83:0c:58:c1:be:76:bf:73:4a:96:74:d6:5c:a3:54:fc:6b:b5:
         e2:72:25:4b:e9:c5:1f:5b:db:74:53:09:22:13:db:af:2f:d6:
         28:b0:3a:46:cf:c9:f8:cd:71:b5:c2:35:b0:bf:df:f5:2f:02:
         8b:97:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----