Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          gxyXPcQJNMkBUVqtgj31bxR1P4zcy/FoWPdtB5D5030=
Subject key identifier:   E3:6A:15:82:03:1B:39:7F:B8:BA:0B:85:42:DC:12:D3:29:FA:6C:D9
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       305F421DFB2229E58D8549E69700919A5E7A5B4E
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Thu 11 Apr 2024 12:08:55 +0000
ROA not before:           Thu 11 Apr 2024 12:03:55 +0000
ROA not after:            Fri 11 Apr 2025 12:08:55 +0000
asID:                     262494
IP address blocks:        2804:ad8:8300::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5f:42:1d:fb:22:29:e5:8d:85:49:e6:97:00:91:9a:5e:7a:5b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 11 12:03:55 2024 GMT
            Not After : Apr 11 12:08:55 2025 GMT
        Subject: CN=3082010A0282010100E53E04078B238D191C1B955C8573BD29DF04E67622D72889701F63D7AF9387569A1E90784D304895B50BF1A2BBD44719B1BEB019848638E70C015EACEC294D97A634EF6D283D2DBC590F43835A03E39B8D01B5B9C2DFACFD99A8AA5C6DA5F519C33A86509A0B6AE39862AA07F676932992CB79B4710E3BEEB2CF709C511817641DD417E83719657E9CCC1718AC4237296E8F9CFEED8D5A76243C8CF0F962B97CA3961B08DD9532C746A01DEBC05A1DD4826FD940B5B48619DD74CBDBEA6DFB04629C1432EFFEF814C7451FB8E4FC1E1ECFECAA7CA07D70662FBFEB694B556038371106B220CF7E0B9D794D879B74678B11A7403D82F4F3C889A3BFA68CCAA8C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:04:07:8b:23:8d:19:1c:1b:95:5c:85:73:
                    bd:29:df:04:e6:76:22:d7:28:89:70:1f:63:d7:af:
                    93:87:56:9a:1e:90:78:4d:30:48:95:b5:0b:f1:a2:
                    bb:d4:47:19:b1:be:b0:19:84:86:38:e7:0c:01:5e:
                    ac:ec:29:4d:97:a6:34:ef:6d:28:3d:2d:bc:59:0f:
                    43:83:5a:03:e3:9b:8d:01:b5:b9:c2:df:ac:fd:99:
                    a8:aa:5c:6d:a5:f5:19:c3:3a:86:50:9a:0b:6a:e3:
                    98:62:aa:07:f6:76:93:29:92:cb:79:b4:71:0e:3b:
                    ee:b2:cf:70:9c:51:18:17:64:1d:d4:17:e8:37:19:
                    65:7e:9c:cc:17:18:ac:42:37:29:6e:8f:9c:fe:ed:
                    8d:5a:76:24:3c:8c:f0:f9:62:b9:7c:a3:96:1b:08:
                    dd:95:32:c7:46:a0:1d:eb:c0:5a:1d:d4:82:6f:d9:
                    40:b5:b4:86:19:dd:74:cb:db:ea:6d:fb:04:62:9c:
                    14:32:ef:fe:f8:14:c7:45:1f:b8:e4:fc:1e:1e:cf:
                    ec:aa:7c:a0:7d:70:66:2f:bf:eb:69:4b:55:60:38:
                    37:11:06:b2:20:cf:7e:0b:9d:79:4d:87:9b:74:67:
                    8b:11:a7:40:3d:82:f4:f3:c8:89:a3:bf:a6:8c:ca:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6A:15:82:03:1B:39:7F:B8:BA:0B:85:42:DC:12:D3:29:FA:6C:D9
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8300::/41

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:c8:7f:dd:6d:0b:36:cd:0f:88:1a:0c:55:5a:c6:55:d5:
         a2:a7:ed:17:91:09:63:2e:1a:20:ef:bb:8a:72:b1:c0:9c:46:
         ed:1e:0a:00:03:b4:2b:7e:ba:d6:cf:90:b9:b8:e2:23:e9:95:
         1d:bb:95:74:4f:2b:19:9b:64:a5:e8:30:b1:f4:2b:f5:33:3c:
         33:b5:b5:ac:67:b9:43:7c:7d:87:20:bd:fa:1d:94:20:21:e3:
         aa:8b:df:34:93:c3:c7:47:21:88:f6:15:14:a1:12:21:96:76:
         58:56:96:b3:71:16:0e:2b:22:4a:d1:73:ec:69:53:dd:00:c0:
         a2:b7:f4:7f:b9:ef:2e:c5:2e:52:49:ed:1c:7c:e6:72:44:a3:
         a4:b8:70:5e:01:78:68:b8:d7:81:31:a9:ef:a5:1a:6b:b0:9a:
         08:1d:d0:63:81:69:21:94:c6:6e:63:de:e4:1e:36:d2:b9:7b:
         74:05:fa:df:91:68:38:1f:8a:04:d4:95:75:fc:36:37:2e:ca:
         39:69:e4:15:12:1a:0b:07:fb:8a:13:39:22:15:15:b2:1f:7f:
         4e:d8:c0:a1:be:2d:b5:61:8c:1c:9b:8c:a4:69:a6:e7:86:21:
         3b:3e:cd:93:94:55:40:e5:3f:17:3d:c2:35:1d:f8:7b:a4:c0:
         df:a8:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----