Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3a2f33322d3332203d3e20323632343934.roa
File:                     323830343a6164383a3a2f33322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          Qa7Yy9yzuBiWzgUyedCCuIdp2t3ATsyoNcaRBOXowoE=
Subject key identifier:   6C:17:C5:18:F7:8C:E1:15:F7:D7:4D:A5:40:60:89:3A:46:9A:75:9B
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       07422133EE15F6F55AFF35EEB7FF7DE49151E705
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3a2f33322d3332203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        2804:ad8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:42:21:33:ee:15:f6:f5:5a:ff:35:ee:b7:ff:7d:e4:91:51:e7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject: CN=3082010A0282010100A30A164D06E09A594C7D2EADCCEDA1442C1C5559CCBBD9DD8B24FD5E648188CC603CB130B08BD10CF23376C330EDB327A7D008B523D0757215BD23032D7C19BA627CC9EF276C1F90ABC034220F3C9504CDCCA0044D72A6EBCF0C28F1BE84DEB7EAF10C019EA2BFEC380E26DF123831D0D9D04547A88E2254A154A32FDE4FCA1565C0985F646C342D33D8D78EF4B13AE2A6CD956AB4906E9185BBB0F31C050643A8AD71B64E8CE2FB4CA7FD742BBAA0CF379297E8EE00CA0F469F579141C7DC6E3123A27124DC6FD9B11C7A66BD3EE9C33BD02B66EF0ABD93939001F523F91AE55034EAB734AAC01460DA9B144CF6BEA0CFAC733B5F35D9AF9B157E30B5C2DC850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:16:4d:06:e0:9a:59:4c:7d:2e:ad:cc:ed:
                    a1:44:2c:1c:55:59:cc:bb:d9:dd:8b:24:fd:5e:64:
                    81:88:cc:60:3c:b1:30:b0:8b:d1:0c:f2:33:76:c3:
                    30:ed:b3:27:a7:d0:08:b5:23:d0:75:72:15:bd:23:
                    03:2d:7c:19:ba:62:7c:c9:ef:27:6c:1f:90:ab:c0:
                    34:22:0f:3c:95:04:cd:cc:a0:04:4d:72:a6:eb:cf:
                    0c:28:f1:be:84:de:b7:ea:f1:0c:01:9e:a2:bf:ec:
                    38:0e:26:df:12:38:31:d0:d9:d0:45:47:a8:8e:22:
                    54:a1:54:a3:2f:de:4f:ca:15:65:c0:98:5f:64:6c:
                    34:2d:33:d8:d7:8e:f4:b1:3a:e2:a6:cd:95:6a:b4:
                    90:6e:91:85:bb:b0:f3:1c:05:06:43:a8:ad:71:b6:
                    4e:8c:e2:fb:4c:a7:fd:74:2b:ba:a0:cf:37:92:97:
                    e8:ee:00:ca:0f:46:9f:57:91:41:c7:dc:6e:31:23:
                    a2:71:24:dc:6f:d9:b1:1c:7a:66:bd:3e:e9:c3:3b:
                    d0:2b:66:ef:0a:bd:93:93:90:01:f5:23:f9:1a:e5:
                    50:34:ea:b7:34:aa:c0:14:60:da:9b:14:4c:f6:be:
                    a0:cf:ac:73:3b:5f:35:d9:af:9b:15:7e:30:b5:c2:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:C5:18:F7:8C:E1:15:F7:D7:4D:A5:40:60:89:3A:46:9A:75:9B
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3a2f33322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:76:1a:94:ad:2b:b8:8a:16:21:79:1f:97:fb:01:9f:13:03:
         b6:0f:8f:45:8d:26:f6:de:9e:4a:92:bd:9a:44:c5:e4:1f:de:
         bf:9d:fb:d3:b5:2b:c2:68:ad:64:9d:13:a8:87:35:29:0a:84:
         aa:5e:22:34:9e:65:cd:cd:91:d6:02:d0:4f:8d:db:48:51:95:
         a9:45:e2:26:9f:0c:af:ac:17:89:3e:9f:42:f7:71:a0:1b:d0:
         70:90:17:aa:a8:7b:60:35:c9:64:f2:ce:11:49:64:5e:e4:95:
         61:cc:ae:be:cc:9f:25:7c:a3:a3:82:9b:e7:a3:50:80:d4:e4:
         69:ae:f5:a8:f3:a4:b4:97:cc:55:38:14:64:6f:16:51:df:7b:
         38:15:c7:11:50:43:65:95:b5:b7:f8:58:0f:cb:87:7b:b4:84:
         f2:a6:5b:4e:52:c6:03:74:3e:e8:de:4f:16:89:46:a7:9e:d2:
         ed:d3:56:0c:6d:84:ec:7c:bf:62:be:94:3e:f5:eb:df:84:41:
         c9:61:7e:bc:c3:bc:ba:97:ae:7b:07:17:ec:f4:be:67:fa:22:
         14:9a:37:54:a7:ec:70:35:33:4b:e6:4c:12:70:c4:bf:64:0b:
         8c:22:ea:57:a5:98:a1:04:3f:2d:d0:ef:10:5f:7c:06:4e:dc:
         82:47:31:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----