Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34382d3438203d3e20323731333533.roa
File:                     323830343a376133303a343a3a2f34382d3438203d3e20323731333533.roa (raw, json)
Hash identifier:          cJYcJHHgZ27qtL3jhKsXCu0/vrE3suTnp9lSy6vg2W4=
Subject key identifier:   63:40:68:CC:1E:F3:73:16:3E:D1:35:C8:33:57:C0:62:DF:0C:35:71
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       2C8FF0D22BE58799B50543E0DE4C8D06B277C29B
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34382d3438203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:45 +0000
ROA not before:           Wed 17 Jul 2024 19:29:45 +0000
ROA not after:            Wed 16 Jul 2025 19:34:45 +0000
asID:                     271353
IP address blocks:        2804:7a30:4::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8f:f0:d2:2b:e5:87:99:b5:05:43:e0:de:4c:8d:06:b2:77:c2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:45 2024 GMT
            Not After : Jul 16 19:34:45 2025 GMT
        Subject: CN=634068CC1EF373163ED135C83357C062DF0C3571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:36:a0:09:4c:e9:79:58:61:24:2a:34:84:
                    ef:4f:2e:8a:09:82:4f:88:22:6c:90:61:ee:f6:db:
                    d8:f6:b2:62:cf:ab:1d:41:61:cb:29:1e:5f:5a:05:
                    af:43:b8:ba:30:5b:8a:05:c8:77:20:80:ed:2c:73:
                    af:b6:61:2d:ad:00:f2:fd:53:cb:bb:23:81:c9:e7:
                    c7:bf:93:61:c3:b2:39:b9:43:ab:e9:c4:e5:ff:18:
                    3a:ec:21:9e:76:f1:63:fc:a3:f3:ae:65:6a:bd:bc:
                    51:62:e9:d5:fa:94:d4:63:2d:8c:f9:85:62:f2:1f:
                    9d:f8:99:90:ee:fc:6f:d6:3f:9b:bc:3d:6f:78:4d:
                    75:0e:37:98:cb:ba:b1:43:6a:16:bd:b3:62:d4:fc:
                    6d:dd:fc:ad:c8:43:63:43:eb:b1:a3:e7:12:aa:be:
                    5a:1f:22:b7:f6:18:09:86:e7:31:39:0c:ad:3b:c7:
                    80:05:e9:f2:7d:dc:f7:1e:99:28:1c:0b:bc:f8:df:
                    2a:f1:0f:fa:4e:df:ca:4b:0b:31:5a:70:75:06:f2:
                    84:ad:a4:98:33:f2:60:7e:b0:44:ea:39:1f:a1:ed:
                    44:1a:79:26:53:2b:fb:29:82:a2:87:2c:fd:4f:86:
                    a7:d6:9d:56:11:37:11:2e:e3:84:7a:e7:00:3c:df:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:40:68:CC:1E:F3:73:16:3E:D1:35:C8:33:57:C0:62:DF:0C:35:71
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34382d3438203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:80:ac:20:3b:c3:a8:1c:b2:59:36:d4:cb:1c:a5:41:21:23:
         68:0f:42:60:3e:8a:87:4e:d3:44:9f:47:02:66:7a:06:8b:9f:
         87:5c:49:60:c9:c1:cb:87:09:5c:de:32:87:0b:c2:da:87:ab:
         13:86:19:6d:77:e8:79:a6:b0:97:1b:35:00:7e:70:05:72:b1:
         ff:f4:98:4c:ca:4e:f9:5e:b4:4f:86:ed:8d:ee:89:f1:29:37:
         eb:78:f0:30:db:54:60:c3:74:4c:19:fb:b7:f7:7f:53:7f:3b:
         13:92:51:e1:79:dc:e2:da:d3:cb:70:d2:4c:32:0f:be:43:40:
         84:6b:7d:b3:bb:c3:f1:cd:25:9b:8a:80:b0:1a:31:2f:33:05:
         01:8b:91:d5:f7:93:87:ef:1c:4b:b9:69:d7:23:44:7e:da:cc:
         ed:b8:06:aa:c2:8f:59:87:84:0a:7e:34:9c:26:2a:49:c5:e1:
         50:92:4b:9e:32:a9:6c:51:c6:ff:55:a6:54:d2:e2:d9:af:3c:
         c1:74:8d:41:a6:c0:28:7d:0c:5b:76:34:76:6e:93:75:33:37:
         93:e6:b6:25:31:a8:9b:f7:db:07:63:ca:2b:77:9b:4b:9a:c3:
         f9:06:d8:3d:f2:15:ff:80:83:41:d9:1f:9a:da:c9:67:a4:6e:
         47:93:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----