Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          5xaY1lKyAowF/PYQVv2ajPBOUjSiodOUZdmvKs1cdgU=
Subject key identifier:   BC:4B:D2:80:F6:81:98:DE:88:7E:DC:44:5A:45:F8:3F:60:39:BF:74
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       35D7AB0963F976500F73D6E8F57F699A8353FA8A
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        2804:ad8::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d7:ab:09:63:f9:76:50:0f:73:d6:e8:f5:7f:69:9a:83:53:fa:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:69:3e:44:5b:d5:02:81:d0:ff:83:8e:7c:
                    93:f1:74:67:ae:f6:8c:4d:ff:23:32:e4:c1:d9:28:
                    28:59:5f:98:4d:af:24:cf:9f:59:9b:ef:e7:79:b8:
                    15:ae:8f:22:fb:01:08:c2:b7:79:69:d6:22:b1:16:
                    4e:ce:fd:7a:2e:4a:8b:bd:ae:0c:e4:90:6d:a7:fb:
                    67:d8:0e:b7:26:48:91:9b:d4:a5:2a:14:c3:cd:57:
                    5a:48:ca:92:35:42:48:bc:4f:d0:37:8c:41:4e:5b:
                    87:02:ee:ed:45:fe:18:d3:41:6b:f5:de:a7:f5:c0:
                    74:41:09:a9:67:ab:58:b0:8c:c2:c8:43:74:1a:ba:
                    4b:59:04:6d:91:33:6a:48:57:c6:ad:e6:d0:d2:c8:
                    1e:e1:e5:d8:35:a8:37:67:31:72:32:1a:b9:f0:5f:
                    5e:58:1b:b5:6e:24:d3:1c:3e:48:a2:09:21:c8:41:
                    79:e2:c4:5f:ed:3a:b7:e6:7e:c8:84:4e:b9:97:04:
                    cc:2f:ba:64:9b:d8:36:23:68:0c:98:41:ef:a8:dc:
                    ad:cf:75:27:ca:bb:da:86:71:ce:a6:51:5c:1e:16:
                    bc:e2:8e:3a:b9:68:b4:78:40:9d:dd:2e:67:84:d7:
                    20:58:ad:2f:a1:c6:ce:50:75:f1:14:b6:c5:6b:c1:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:D2:80:F6:81:98:DE:88:7E:DC:44:5A:45:F8:3F:60:39:BF:74
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8::/34

    Signature Algorithm: sha256WithRSAEncryption
         20:79:51:ff:1d:c6:52:3a:1b:9f:b9:f0:58:8f:17:37:06:8e:
         b4:1a:e0:50:ab:7b:a9:ca:a6:70:23:0a:f6:31:62:41:79:12:
         a4:c0:49:c7:44:35:70:26:86:48:65:4c:31:03:ae:77:b3:98:
         fb:3c:c6:bb:81:29:d6:82:05:b5:bd:f6:9b:a5:43:03:1a:28:
         d5:64:48:09:cd:2b:07:52:92:02:da:49:d4:66:0b:95:ca:46:
         32:7e:e9:69:c9:ba:9f:57:f7:b0:1b:1a:84:55:26:50:84:2d:
         29:fc:a9:bf:80:b4:0b:b3:36:84:f0:65:ca:3e:e4:aa:96:3c:
         78:40:61:e3:c9:21:28:5b:7b:43:a7:45:e0:92:de:26:1c:7a:
         48:2d:54:ef:8d:75:c4:cd:29:8d:6e:94:d8:92:cf:4c:d6:f9:
         ec:d0:d1:5c:f3:d6:b5:d9:19:40:7c:25:8e:46:75:8d:3f:47:
         c3:18:75:13:fc:c7:55:66:6e:22:b5:cd:89:29:e0:0a:1d:6e:
         33:00:9b:58:07:93:3d:57:3f:e8:1d:e6:05:ee:bb:ea:d0:2d:
         e1:a7:f4:36:9d:85:15:25:d8:e6:ee:8c:60:6f:03:7d:51:31:
         c6:ee:c1:76:21:4e:4c:60:0a:6f:51:d7:bf:2b:04:fb:7a:be:
         ed:fb:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----