Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a373a3a2f34382d3438203d3e20323731333533.roa
File:                     323830343a376133303a373a3a2f34382d3438203d3e20323731333533.roa (raw, json)
Hash identifier:          /HP/lQrTyCw1roD30zI/rojaKLWCqwnHFpmc4p3tsFA=
Subject key identifier:   13:31:43:C1:13:39:B4:96:8F:7E:66:A7:0D:09:CC:B2:05:F4:03:1B
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       15C05FA08C5A09708876354B3F009355BBBFB314
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a373a3a2f34382d3438203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:46 +0000
ROA not before:           Wed 17 Jul 2024 19:29:46 +0000
ROA not after:            Wed 16 Jul 2025 19:34:46 +0000
asID:                     271353
IP address blocks:        2804:7a30:7::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c0:5f:a0:8c:5a:09:70:88:76:35:4b:3f:00:93:55:bb:bf:b3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:46 2024 GMT
            Not After : Jul 16 19:34:46 2025 GMT
        Subject: CN=133143C11339B4968F7E66A70D09CCB205F4031B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:36:05:38:09:75:5d:56:b4:38:d6:c5:0e:
                    9b:89:91:81:62:2c:5d:31:9f:c4:d3:66:21:fd:83:
                    d1:f2:79:9e:60:ad:42:ac:80:fa:14:69:f1:c0:b4:
                    c2:d7:87:6f:95:cf:dc:77:72:b8:a8:70:9c:7d:fb:
                    7e:33:2f:df:27:49:5d:fb:1c:29:98:d8:00:48:87:
                    2e:01:17:f0:e3:a2:a2:86:62:2a:7d:14:ad:5b:f8:
                    8d:01:09:fc:1d:ec:86:3b:b2:c4:20:a3:1b:aa:2a:
                    a9:58:e4:c1:60:80:4f:d9:72:3d:96:f4:15:55:c0:
                    c9:6b:c3:e4:1a:95:44:c6:9c:25:28:82:ff:8b:5c:
                    46:fd:a8:6b:ed:e8:c3:2d:1b:46:e1:4c:75:3b:92:
                    dc:1f:f6:62:b0:51:7f:52:72:4a:f6:48:50:3d:9b:
                    27:44:a7:29:99:ee:46:56:28:48:c0:2c:ca:1b:86:
                    c4:38:ef:4d:75:be:63:4c:fe:99:da:59:df:09:5f:
                    f6:fe:87:1c:9e:52:d2:10:9a:9a:48:07:9d:7f:6a:
                    e9:6d:90:ee:9e:21:78:45:66:9f:f7:69:f3:ca:76:
                    8f:dc:38:69:ec:4c:89:8c:48:6a:86:52:e0:3b:1a:
                    7f:6f:01:28:09:c6:33:41:f8:42:f3:c9:f1:3c:9a:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:31:43:C1:13:39:B4:96:8F:7E:66:A7:0D:09:CC:B2:05:F4:03:1B
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a373a3a2f34382d3438203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:37:4f:2e:41:90:fa:dd:4d:d8:0f:d6:84:b6:db:4e:0a:
         51:39:c5:56:61:9b:d2:be:84:f6:9f:59:f9:08:ad:d1:9c:47:
         93:63:3e:ba:c5:ad:46:75:20:e5:4b:cb:ff:f0:36:b1:f5:3c:
         da:64:61:2f:7a:b8:81:c8:c0:e4:a9:98:45:8c:52:e5:6e:7a:
         90:2f:5e:29:99:d3:b9:1f:46:02:25:ef:fa:9a:1c:27:1a:ce:
         16:68:1e:0d:8e:3a:21:20:7e:3a:a0:f7:e3:d3:3f:cb:df:bf:
         46:74:b7:3f:d3:e2:a7:99:4b:59:f9:29:4c:00:18:4a:88:49:
         72:3c:15:dc:d9:7c:24:85:7c:10:91:1d:19:78:b0:eb:db:3d:
         8c:ef:a7:79:06:d1:d2:7b:7d:fd:d1:bb:7c:c0:ab:8a:95:a6:
         04:f9:f1:39:00:12:42:a9:ed:87:d5:48:ad:7d:0b:70:01:ad:
         4f:d8:94:fa:3f:a2:e6:94:d3:fc:0d:86:68:48:41:7a:84:3b:
         ab:9d:b5:a7:28:9f:11:23:a3:2d:fc:c7:f7:4f:69:26:23:7b:
         9e:a5:ea:57:17:2d:6b:e2:d9:70:e6:57:b2:93:d8:8e:4f:28:
         f5:72:81:89:fb:9f:51:9d:f5:88:c1:05:a9:2b:f6:60:e2:61:
         27:3b:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----