Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          CeVe1t7Tvw/anRK9kd1iTp+TRCjKfvhkyQz5unQLYWs=
Subject key identifier:   E9:D7:E4:A7:D2:0C:77:8E:0B:DB:91:79:8C:89:91:D3:BA:68:C9:94
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       69DCA9DB46D30270A2918D6280B7D13FFF57B02B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        138.185.189.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dc:a9:db:46:d3:02:70:a2:91:8d:62:80:b7:d1:3f:ff:57:b0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject: CN=3082010A0282010100AB19394BF7F61C73EE2B6FDA9E58A5E01202B798088A5080114174DC1F1DE314DF08E1FB7AF9D7A4828EA32AC960D8D86DFDD89BB6B618F5F89E714741F50BB233465F2643651FF4B7A5C74B7AF89D47D0C6C933E834213FB323B8B38CB58FC3DD19A31E8E0D096A1FCAE722C971A9C073BA244C02CA04F6B93608132A382C928B0133DB8E196C979B8319D7FA31C972D61D2CCEEF1540B88E323B53FDF75C62062E337D21079E6A5070BC8C3E6293791BE5C4A41BABADCE4B6C6C46DDF5D8305F2C277A0B8E51D4C7A8918CE6AAAEC14362B0277EC024EFDB7DFDFA6BB0FB759869328D794A92A3D0FF4A32A1C8B8AB28F9634288C65D8667CA3B58220933070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:39:4b:f7:f6:1c:73:ee:2b:6f:da:9e:58:
                    a5:e0:12:02:b7:98:08:8a:50:80:11:41:74:dc:1f:
                    1d:e3:14:df:08:e1:fb:7a:f9:d7:a4:82:8e:a3:2a:
                    c9:60:d8:d8:6d:fd:d8:9b:b6:b6:18:f5:f8:9e:71:
                    47:41:f5:0b:b2:33:46:5f:26:43:65:1f:f4:b7:a5:
                    c7:4b:7a:f8:9d:47:d0:c6:c9:33:e8:34:21:3f:b3:
                    23:b8:b3:8c:b5:8f:c3:dd:19:a3:1e:8e:0d:09:6a:
                    1f:ca:e7:22:c9:71:a9:c0:73:ba:24:4c:02:ca:04:
                    f6:b9:36:08:13:2a:38:2c:92:8b:01:33:db:8e:19:
                    6c:97:9b:83:19:d7:fa:31:c9:72:d6:1d:2c:ce:ef:
                    15:40:b8:8e:32:3b:53:fd:f7:5c:62:06:2e:33:7d:
                    21:07:9e:6a:50:70:bc:8c:3e:62:93:79:1b:e5:c4:
                    a4:1b:ab:ad:ce:4b:6c:6c:46:dd:f5:d8:30:5f:2c:
                    27:7a:0b:8e:51:d4:c7:a8:91:8c:e6:aa:ae:c1:43:
                    62:b0:27:7e:c0:24:ef:db:7d:fd:fa:6b:b0:fb:75:
                    98:69:32:8d:79:4a:92:a3:d0:ff:4a:32:a1:c8:b8:
                    ab:28:f9:63:42:88:c6:5d:86:67:ca:3b:58:22:09:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D7:E4:A7:D2:0C:77:8E:0B:DB:91:79:8C:89:91:D3:BA:68:C9:94
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ad:95:d3:b2:47:83:dc:e3:98:ad:da:45:8f:ea:c3:b2:c7:
         53:8a:44:7b:b4:e3:1f:d9:4f:8d:b0:33:ab:17:f2:06:29:d8:
         aa:02:7c:44:3d:56:d6:c6:f6:17:98:8e:21:33:20:82:f6:ba:
         ce:e0:3a:60:05:ff:eb:1b:b3:37:d8:0c:5e:b4:a7:37:26:48:
         25:a7:aa:06:15:3b:e3:f2:db:ca:80:59:87:36:7f:96:b3:98:
         8b:69:eb:f3:6f:46:7a:aa:6d:e1:8f:0d:dd:68:9c:ca:f2:9e:
         f0:c8:38:6e:8c:50:45:5f:fe:33:59:94:98:7c:bd:c4:b6:79:
         26:d2:f9:2e:0c:49:4d:38:aa:3f:37:25:84:bd:8b:aa:45:2e:
         e4:aa:88:dc:48:15:02:2f:d6:f7:ce:de:66:41:f3:9e:b3:f5:
         04:da:c2:dc:ff:5f:6c:f1:f7:e8:7e:57:e0:32:06:c7:9e:ac:
         dc:d4:fe:20:21:b5:a3:68:35:99:78:46:16:d0:bb:e0:57:f7:
         3b:cf:36:28:2a:4c:57:f4:8e:3f:13:c8:97:fd:bb:1f:0f:f8:
         b4:c2:cd:16:3a:9d:3d:70:28:41:c1:e8:b4:02:fe:9e:a4:0a:
         b6:ef:3c:94:91:34:c1:55:cd:cb:cf:61:6c:fc:72:75:3d:49:
         56:3f:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org