Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa
File:                     34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          J8b+NpBP2+jbtfOTMvH6lfARSTHSMKxl5SexED6oqks=
Subject key identifier:   E4:B7:70:A1:AE:3F:F8:87:34:B4:E5:39:2D:F0:8C:40:B3:24:DB:28
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       0D70C5D40BE070FDE927CAC46F29CE1FD5CB4230
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 11 Apr 2024 01:10:46 +0000
ROA not before:           Thu 11 Apr 2024 01:05:46 +0000
ROA not after:            Fri 11 Apr 2025 01:10:46 +0000
asID:                     262494
IP address blocks:        45.179.112.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:70:c5:d4:0b:e0:70:fd:e9:27:ca:c4:6f:29:ce:1f:d5:cb:42:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 11 01:05:46 2024 GMT
            Not After : Apr 11 01:10:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6b:e5:3d:f9:6b:8a:cf:0a:cb:a9:a6:f1:d6:
                    71:a7:3a:55:fe:18:9f:32:9b:c1:a2:c0:cb:3b:7f:
                    97:35:8d:5a:ba:1c:8b:41:6f:4d:1b:3a:6f:cb:62:
                    fc:db:62:1b:cd:5b:94:ff:d7:57:ae:38:4d:b6:cd:
                    6d:dd:e5:09:30:d9:04:f1:9f:80:0c:51:2c:94:0a:
                    9e:7b:0d:34:c0:1a:43:ab:53:41:ae:35:49:e9:e7:
                    f9:21:bc:b1:d6:6e:92:22:d3:15:e8:19:7f:53:af:
                    e9:48:d4:b5:d0:5a:97:e0:74:10:1d:10:98:8a:fd:
                    92:79:7c:70:b6:f8:52:a0:90:d5:e2:c0:37:a5:17:
                    0b:20:48:04:f3:58:f1:f4:05:17:ac:af:e5:95:40:
                    f1:90:3f:82:48:cc:c8:2d:48:f1:6c:c9:a9:42:86:
                    28:37:86:a4:39:2b:d6:35:9b:97:7b:22:16:be:09:
                    9d:94:e7:62:38:4c:51:25:fe:48:20:a6:39:77:fa:
                    d4:c0:4c:d6:ff:e5:ab:fc:d5:40:9f:b4:79:32:27:
                    6d:1e:16:f6:4a:77:1f:df:68:41:4e:91:8e:3f:c8:
                    d1:45:0b:da:64:e7:0c:97:e4:60:a6:b2:d8:55:e1:
                    1e:55:5a:37:7b:16:24:26:d1:51:88:50:0b:68:92:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:70:A1:AE:3F:F8:87:34:B4:E5:39:2D:F0:8C:40:B3:24:DB:28
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:38:d9:ab:2b:0c:c0:c6:fe:97:60:c3:f5:6b:d8:c9:ce:
         dd:1b:44:10:5f:b3:36:a2:74:7a:5b:38:64:1c:87:3b:18:8b:
         36:6d:43:55:74:ec:8a:78:29:ad:99:48:d4:2e:8d:40:b8:1f:
         e7:c8:e1:10:13:d9:0a:7a:41:d7:09:3f:33:6a:a0:b8:c4:f6:
         3c:b8:fc:84:ff:84:7b:40:5f:51:f2:ab:5a:e5:38:19:27:0e:
         18:0d:66:64:d5:c2:82:11:73:5f:44:f2:dd:f6:a7:a9:66:b0:
         a1:51:b4:91:25:91:52:58:eb:8e:c4:cf:b6:1e:cd:6c:ac:43:
         01:6c:c6:bc:65:39:1d:38:ba:07:1c:5e:71:40:2b:a0:63:71:
         e2:68:5c:2f:58:c4:c6:8c:da:22:82:bf:6a:3e:7f:9d:29:4a:
         f9:cd:91:6a:55:74:46:b3:8e:fa:a1:f9:2b:55:41:bc:ae:28:
         b1:fb:fc:e6:0b:7f:aa:2c:f3:5f:97:1e:85:e1:41:92:b1:6a:
         48:48:48:ca:3e:35:2e:d9:c8:7c:a0:7a:80:67:62:fa:a0:d4:
         84:a2:75:e3:66:70:d0:0e:0b:88:81:97:68:c3:56:aa:ed:ce:
         59:02:be:ab:5f:aa:e4:64:ec:6d:32:35:4a:10:e4:6e:bb:1f:
         23:b7:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----