Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          8tqpAn284fBfNzJbhg7kiyTfZKpCyTpr5/qcS4p9RSg=
Subject key identifier:   05:CD:0C:55:AA:FD:E0:CC:48:C2:5F:78:D7:81:19:6C:83:EC:35:C3
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       0534D5117B30D52D6AC72319F7F15447804DDB9B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        2804:ad8:e::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:34:d5:11:7b:30:d5:2d:6a:c7:23:19:f7:f1:54:47:80:4d:db:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:fa:4e:73:e4:db:be:9d:d8:b4:3e:4c:9c:
                    50:bd:0c:15:79:af:18:05:d5:d8:49:73:ed:35:c6:
                    86:97:d2:53:54:ca:7d:58:c6:be:59:e3:87:c8:41:
                    c2:dd:62:ee:a3:b6:69:80:46:e3:6d:92:69:3c:31:
                    7d:82:bc:d4:5d:11:09:3f:c6:ff:c2:2b:0d:3a:3a:
                    91:d1:7b:d8:88:68:48:6f:d1:9f:2d:41:6c:bb:02:
                    85:30:6e:15:da:ae:68:f1:cc:e8:c4:b4:9b:2b:4d:
                    26:fe:eb:7e:80:5e:2d:1c:dc:36:5d:9c:74:15:e1:
                    0f:80:ce:3a:4c:8c:a3:e1:02:8f:d1:6d:87:4c:a7:
                    45:4d:6d:cc:ad:1c:74:6b:fc:ba:b7:f5:9d:c3:69:
                    55:e6:14:9e:ac:bc:17:58:d2:01:95:c2:99:67:db:
                    fd:84:6a:d9:91:f7:3e:ec:af:bc:2d:b8:77:8a:7b:
                    19:e1:a3:b4:75:2d:dc:88:b1:98:53:06:40:7c:32:
                    a9:e8:c4:0e:80:e8:18:84:22:74:48:73:1e:ed:2a:
                    6f:e8:51:76:5b:48:b6:40:7d:e0:33:97:20:3e:aa:
                    97:0a:08:6b:02:61:9c:cc:5d:af:6e:e0:1c:e0:b4:
                    16:c1:37:9c:fa:74:5f:93:cf:24:1b:68:a9:52:1c:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:0C:55:AA:FD:E0:CC:48:C2:5F:78:D7:81:19:6C:83:EC:35:C3
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:66:d5:af:5b:76:85:8e:43:6b:82:13:4a:a4:07:4d:b0:e9:
         c0:2c:f8:38:af:e3:bf:66:e2:94:34:cc:17:74:8a:a3:33:64:
         b1:f6:e2:55:e0:ac:d2:9e:c4:6f:62:ab:a7:33:57:f3:0c:4c:
         d3:79:39:0d:2c:e3:e9:38:12:4c:25:89:ea:1f:66:ab:a3:94:
         ee:57:ee:7f:94:b0:72:5a:8a:bb:ef:41:dd:90:a1:4c:dc:01:
         fd:2d:c4:d0:2a:7d:b2:0a:2b:31:5f:be:5e:e2:35:64:b6:36:
         09:7a:58:73:a7:12:fe:e7:09:cc:ca:81:9e:9c:56:75:a8:0e:
         74:c9:9b:50:ce:d1:67:ae:97:51:2c:6e:d2:fa:98:7c:6e:b1:
         af:93:7c:d3:69:25:02:ea:57:3a:4d:17:83:81:47:d5:c5:c5:
         37:31:2e:88:ae:b3:1a:b0:dc:da:d4:c4:a2:1f:bc:f2:10:43:
         88:f0:10:ad:9f:c2:8d:4f:ea:0b:3b:6a:f6:c3:aa:82:6c:49:
         82:06:24:a7:9e:50:af:ce:19:e8:f9:31:85:bc:f6:98:49:79:
         d8:de:b6:b1:a4:0f:b3:91:69:40:d8:d4:ce:a1:39:0c:9c:ac:
         64:2b:8d:9f:06:da:67:68:da:47:e4:15:2c:0a:b8:0a:66:d0:
         be:00:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----