Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          abOFKYED6QiMGJDpGmFhnM42Peg8MbWmGJD14Bl1z3w=
Subject key identifier:   AF:57:D6:2F:FC:B9:50:DD:F6:C1:79:35:F5:57:E2:79:9B:D7:78:EC
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       78BB8149F73124231B90CF1A1C79EAB4CD5D83D1
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:ad8:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bb:81:49:f7:31:24:23:1b:90:cf:1a:1c:79:ea:b4:cd:5d:83:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:bf:73:61:44:86:b0:1b:7b:0f:af:af:14:
                    fc:16:ce:39:f5:80:cc:18:0b:2a:39:84:57:a4:82:
                    a1:36:48:8c:c2:14:ba:36:0e:3a:f7:0f:42:c6:a7:
                    7e:53:cf:a9:35:43:c9:b7:07:8d:7d:ec:d9:a6:1a:
                    97:a4:6c:5c:25:95:bf:64:2d:f4:80:dc:5f:60:a9:
                    5d:99:9e:71:14:45:ba:d4:b4:e3:0d:37:ee:9a:c1:
                    6b:3c:17:2a:42:e6:36:59:a1:75:bb:1b:9c:45:78:
                    f2:eb:da:00:9e:f6:b6:bd:72:0f:0a:47:ed:7d:83:
                    86:7d:a1:90:80:4d:ea:38:c2:1c:3f:a4:af:f0:71:
                    fb:2a:19:df:0a:8a:b9:fd:34:b1:11:86:ea:f6:40:
                    c8:d7:ae:3f:d9:f6:0e:b1:80:f0:cb:9d:06:89:66:
                    50:2c:1d:90:61:b7:6b:ea:d4:5a:ec:67:6f:d8:a2:
                    03:80:a7:cd:2f:ee:6e:8d:56:1f:2e:04:b3:b6:db:
                    90:f5:0b:9b:06:95:fe:80:4d:5d:0e:36:1d:cd:2c:
                    29:0d:eb:92:b4:59:c6:ed:d7:43:cb:fb:2c:30:1d:
                    6e:14:bc:61:94:03:39:d8:c1:4c:be:49:2b:66:29:
                    64:d7:5a:0d:e9:56:e1:1d:94:1a:77:b6:a5:d9:86:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:D6:2F:FC:B9:50:DD:F6:C1:79:35:F5:57:E2:79:9B:D7:78:EC
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:c7:90:a7:68:26:48:1a:fd:f7:1c:37:2f:70:63:48:4a:
         3f:26:85:15:9b:f6:15:9a:84:71:1e:12:32:2b:83:20:b6:46:
         57:01:de:ee:40:0d:2b:aa:22:f1:55:0f:35:ec:94:2f:75:c0:
         43:e0:56:2a:70:51:fc:72:ae:ca:70:2e:5d:f7:43:e2:79:30:
         e5:9c:fd:3f:14:e6:98:67:b0:c0:fd:5f:90:2c:bc:93:94:81:
         bf:13:b6:be:66:7a:1a:81:a7:6c:7a:85:f6:f9:4e:ec:3c:54:
         92:2c:ef:c9:3b:84:c6:2e:1a:13:73:a4:1d:62:df:ac:52:7f:
         8f:52:96:26:56:1a:6d:28:18:4e:85:7f:45:bb:d1:4a:6b:6a:
         2b:67:7e:cf:c7:8f:be:4a:11:17:d2:73:88:78:f0:3c:20:57:
         db:e7:8d:a1:8c:a3:58:d7:bd:58:15:e4:25:c0:1a:34:6c:00:
         5a:e5:9c:5c:9e:a4:c8:d1:f2:d9:ac:69:cb:9a:bb:b3:d4:00:
         91:a1:c2:06:bc:92:1a:e9:a5:77:62:f9:7f:65:8f:0b:74:c7:
         2d:b7:fc:66:ba:29:ee:6b:0f:ba:ab:88:dd:ea:a4:8d:41:92:
         28:3c:ac:df:c5:19:32:c5:9f:c1:5e:7d:c6:a6:b6:27:64:d3:
         96:5c:64:9a
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUeLuBSfcxJCMbkM8aHHnqtM1dg9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDNaFw0yNTA0MDMxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREYyM0JGNzM2MTQ0ODZCMDFC
N0IwRkFGQUYxNEZDMTZDRTM5RjU4MENDMTgwQjJBMzk4NDU3QTQ4MkExMzY0ODhD
QzIxNEJBMzYwRTNBRjcwRjQyQzZBNzdFNTNDRkE5MzU0M0M5QjcwNzhEN0RFQ0Q5
QTYxQTk3QTQ2QzVDMjU5NUJGNjQyREY0ODBEQzVGNjBBOTVEOTk5RTcxMTQ0NUJB
RDRCNEUzMEQzN0VFOUFDMTZCM0MxNzJBNDJFNjM2NTlBMTc1QkIxQjlDNDU3OEYy
RUJEQTAwOUVGNkI2QkQ3MjBGMEE0N0VEN0Q4Mzg2N0RBMTkwODA0REVBMzhDMjFD
M0ZBNEFGRjA3MUZCMkExOURGMEE4QUI5RkQzNEIxMTE4NkVBRjY0MEM4RDdBRTNG
RDlGNjBFQjE4MEYwQ0I5RDA2ODk2NjUwMkMxRDkwNjFCNzZCRUFENDVBRUM2NzZG
RDhBMjAzODBBN0NEMkZFRTZFOEQ1NjFGMkUwNEIzQjZEQjkwRjUwQjlCMDY5NUZF
ODA0RDVEMEUzNjFEQ0QyQzI5MERFQjkyQjQ1OUM2RURENzQzQ0JGQjJDMzAxRDZF
MTRCQzYxOTQwMzM5RDhDMTRDQkU0OTJCNjYyOTY0RDc1QTBERTk1NkUxMUQ5NDFB
NzdCNkE1RDk4NjMwMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3yO/c2FEhrAbew+vrxT8Fs459YDMGAsqOYRXpIKhNkiMwhS6Ng46
9w9Cxqd+U8+pNUPJtweNfezZphqXpGxcJZW/ZC30gNxfYKldmZ5xFEW61LTjDTfu
msFrPBcqQuY2WaF1uxucRXjy69oAnva2vXIPCkftfYOGfaGQgE3qOMIcP6Sv8HH7
KhnfCoq5/TSxEYbq9kDI164/2fYOsYDwy50GiWZQLB2QYbdr6tRa7Gdv2KIDgKfN
L+5ujVYfLgSzttuQ9QubBpX+gE1dDjYdzSwpDeuStFnG7ddDy/ssMB1uFLxhlAM5
2MFMvkkrZilk11oN6VbhHZQad7al2YYwCQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FK9X1i/8uVDd9sF5NfVX4nmb13jsMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMyMzgzMDM0M2E2MTY0MzgzYTYz
MzAzMDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYGKAQK2MAwDQYJKoZIhvcNAQELBQADggEBAFoPx5CnaCZIGv33HDcvcGNI
Sj8mhRWb9hWahHEeEjIrgyC2RlcB3u5ADSuqIvFVDzXslC91wEPgVipwUfxyrspw
Ll33Q+J5MOWc/T8U5phnsMD9X5AsvJOUgb8Ttr5mehqBp2x6hfb5Tuw8VJIs78k7
hMYuGhNzpB1i36xSf49SliZWGm0oGE6Ff0W70Upraitnfs/Hj75KERfSc4h48Dwg
V9vnjaGMo1jXvVgV5CXAGjRsAFrlnFyepMjR8tmsacuau7PUAJGhwga8khrppXdi
+X9ljwt0xy23/Ga6Ke5rD7qriN3qpI1Bkig8rN/FGTLFn8Fefcamtidk05ZcZJo=
-----END CERTIFICATE-----