Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa
File:                     3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          hg0Sl1WAfJI2OeunFrMWTHQmpvqR4lPATeBvceG2y/8=
Subject key identifier:   FC:E6:C4:63:09:E1:9B:A3:15:F3:C5:37:CB:4E:B1:76:A9:97:7A:93
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       33B872C734CF9934416A48DB4B5DC238E53C4681
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        138.185.188.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b8:72:c7:34:cf:99:34:41:6a:48:db:4b:5d:c2:38:e5:3c:46:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:1b:e3:1d:d5:40:fb:eb:d3:55:a2:56:13:
                    9e:a3:f9:89:ea:af:0f:8d:15:ce:2d:6b:5d:0c:47:
                    fa:f2:e9:9c:49:ef:1e:35:b7:0d:42:f4:b0:16:31:
                    ab:cb:95:f4:cb:98:ff:65:22:c4:b9:95:0c:71:91:
                    bf:eb:c1:3c:a7:19:65:62:30:0c:04:d6:7c:81:f2:
                    39:de:0a:65:a5:29:54:2c:2c:de:88:5b:54:91:6a:
                    10:d1:0f:14:93:e6:08:77:13:af:78:3a:f6:99:cf:
                    55:6b:ba:6a:94:46:b8:fa:34:9a:77:18:45:46:9a:
                    ff:e3:41:73:11:0e:4b:99:47:a8:58:35:4d:69:f1:
                    83:16:c5:91:33:d4:78:3e:5b:7b:27:ad:74:0e:d7:
                    ac:24:f4:59:7a:22:11:87:1a:50:41:1a:0a:a6:94:
                    9b:7d:71:d0:bb:12:94:db:ff:0e:5b:86:66:0f:0d:
                    8e:e8:36:5a:6f:25:85:99:76:38:1c:c2:45:e1:88:
                    de:74:09:63:a0:a6:46:03:68:2d:67:37:93:6c:12:
                    1f:ae:fd:3c:6f:13:ce:43:0c:d3:9f:15:32:ee:4a:
                    bd:f0:ab:28:aa:1c:cb:1b:4d:7d:ba:96:8b:61:ef:
                    76:b1:fc:3c:3c:10:ed:0b:2d:78:bb:0b:b3:a5:b1:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:C4:63:09:E1:9B:A3:15:F3:C5:37:CB:4E:B1:76:A9:97:7A:93
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:87:5f:0c:05:e7:fa:13:09:f0:a1:59:c4:53:50:b0:6f:8f:
         46:09:b8:85:82:77:ab:e2:a0:9a:42:a0:05:1d:a9:58:02:48:
         0e:bb:f2:7f:cd:dd:73:bd:8e:ab:f3:8d:86:b7:46:1e:65:e2:
         6d:8e:ed:a4:eb:5f:e7:e3:bc:45:64:a1:ce:d4:82:32:6d:cd:
         59:95:52:27:c8:14:04:e6:f8:d4:2d:22:44:77:65:40:2e:42:
         c5:a8:5c:10:34:45:9c:26:4d:fa:e3:a1:cb:a9:2e:f1:0b:1a:
         c4:4a:d7:04:b8:6e:54:19:4f:b1:1e:66:32:78:66:c6:aa:06:
         4e:23:d9:6e:d8:5e:b4:c8:d1:3f:8d:bd:08:1a:20:5a:13:eb:
         3c:9e:b4:18:98:31:93:7e:02:a1:67:7a:d8:4d:99:95:16:f7:
         69:46:87:31:b7:de:ba:ce:99:8d:72:3c:28:98:27:a2:52:c0:
         e9:77:da:ff:13:a4:16:7d:55:a5:8b:fb:72:5b:14:64:42:6b:
         df:61:5f:7e:54:81:2d:a9:04:b4:c2:f0:96:cc:71:f9:3d:1b:
         8b:75:9b:16:49:01:1f:8f:d1:99:78:86:a6:d2:ae:ed:e4:06:
         e6:4d:c3:15:54:4f:1b:5d:93:e9:2b:95:92:ec:ed:a2:6f:28:
         97:d1:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org