Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139302e302f32332d3233203d3e20323632343934.roa
File:                     3133382e3138352e3139302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          qMffLFkVsoLJXbx7QMaF4hbfOOIcXE/PYzW82iZEc10=
Subject key identifier:   E9:9C:0A:D6:AC:C5:40:26:98:1A:C7:9E:40:BD:BD:78:94:0D:D3:61
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2BDC27D8A57867A07AD4AA82900983188DFDE2FA
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139302e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        138.185.190.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:dc:27:d8:a5:78:67:a0:7a:d4:aa:82:90:09:83:18:8d:fd:e2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:b2:a3:96:ca:04:f3:ad:83:d6:a7:48:8a:
                    5a:bd:0d:b4:aa:c7:2d:f1:6e:54:a9:12:ab:ce:ba:
                    7a:73:7d:ed:0b:f7:98:8b:8f:40:0c:74:80:4c:d4:
                    44:6b:88:9a:3a:1b:4b:ac:f2:b7:2f:f9:5b:56:28:
                    63:f7:ed:bc:3d:07:06:b3:39:1f:f5:84:d8:ed:42:
                    d5:48:2a:ac:dd:df:75:0d:dd:be:64:49:f7:67:6d:
                    ec:89:c6:71:f2:5b:81:e5:b5:a2:c4:c0:a6:f7:c9:
                    ec:f2:8f:13:43:bc:45:2b:c9:c2:91:ce:01:67:a0:
                    e3:e5:51:ba:21:8c:5b:4b:7c:c8:53:8d:87:1a:ff:
                    ad:a5:fa:66:7e:95:f8:f7:46:68:2f:73:a9:48:8e:
                    67:e0:52:20:8b:df:9f:e3:d7:29:d7:f2:4d:03:52:
                    71:d6:cd:1e:c4:0c:5f:14:cb:19:55:03:7b:f3:89:
                    51:37:83:ad:0a:45:1e:10:00:33:9e:8a:52:fd:70:
                    27:6c:24:07:f4:3f:6f:2d:cd:62:fc:2d:23:ed:60:
                    44:12:55:be:5e:3c:09:0a:2a:af:01:f6:d6:dd:12:
                    f3:42:0a:4b:e7:31:41:31:3a:b2:59:cf:a2:15:e7:
                    f8:e4:2e:a5:7d:63:df:11:15:fe:50:9e:5a:1f:12:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:0A:D6:AC:C5:40:26:98:1A:C7:9E:40:BD:BD:78:94:0D:D3:61
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:56:0e:92:a3:30:29:b3:2b:4d:eb:31:79:94:aa:90:70:64:
         75:fb:99:03:c9:09:54:46:51:cd:f4:a1:e2:43:be:90:c1:b9:
         c1:f1:34:ed:08:0b:41:46:bc:27:d8:68:51:c3:bd:a1:c3:6b:
         22:1a:20:c0:0e:32:ee:37:8d:e2:19:b6:a2:11:f3:5e:bf:6c:
         d7:e5:69:8f:29:92:03:95:66:1a:19:83:9c:b8:f0:44:6d:99:
         a0:4d:e7:6d:d6:b5:8e:15:d5:cc:d1:4e:d1:25:47:24:66:bf:
         53:30:60:1c:bf:1e:60:3e:34:2f:7e:81:75:ec:14:d0:a9:ad:
         86:c8:49:02:e1:c4:8c:41:df:65:64:af:05:77:84:b4:b1:8c:
         61:fe:70:fc:e9:6c:38:3e:08:4a:60:28:9b:61:ca:0b:9f:5b:
         07:1c:d4:16:e3:21:48:fb:e9:14:11:ab:a2:94:84:ac:4b:1b:
         ea:ca:83:1b:73:92:08:71:24:f8:cc:2d:ef:ce:c5:c0:9f:07:
         4d:09:e2:85:10:38:fd:ad:4c:c0:fc:31:7c:56:5f:9b:b5:47:
         a0:3f:9f:9a:ad:ca:8d:83:ad:f5:1b:89:33:08:ce:5c:6c:f2:
         a6:33:54:cd:16:8c:0d:d9:00:78:07:75:52:0c:ea:3d:3b:fc:
         58:ea:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org