Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          xQlm/nhk0UVy4GsVo09nX9VPc3R0yWB2yxBKb5qT9Pk=
Subject key identifier:   7E:E0:64:DA:CB:08:F0:8C:D8:A5:E6:3E:24:0D:75:E2:B8:D4:7C:FB
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       45EEE5C0CED266E5275A246732DE5D6C15E9A280
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        138.185.191.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ee:e5:c0:ce:d2:66:e5:27:5a:24:67:32:de:5d:6c:15:e9:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:eb:3a:3a:93:d8:35:01:07:28:f0:2e:ab:
                    27:02:b1:59:fb:ad:df:b4:26:1d:db:10:00:6a:77:
                    3a:5c:a1:f9:7f:3f:8c:d5:ad:cb:29:96:2b:bc:e3:
                    df:29:ef:2e:ff:3a:01:9f:ae:96:c3:12:b7:60:c3:
                    c9:62:31:8d:03:5a:66:59:48:94:ef:cb:7f:e6:63:
                    1f:9f:07:48:84:f9:ce:aa:9f:e8:f9:2a:d8:5d:77:
                    2c:d5:6e:ed:78:d1:b6:84:89:1f:99:5e:fd:4e:2f:
                    b7:21:73:59:48:26:79:d9:8c:4f:38:6e:dd:79:d6:
                    ec:58:2f:e1:40:18:34:04:87:32:30:2f:1e:e9:a5:
                    4e:a5:fb:25:d5:bc:f6:26:6c:ac:ef:f7:05:64:81:
                    3e:f8:9f:76:06:f6:17:d1:a3:01:11:6e:7f:e2:21:
                    b7:06:6c:64:db:04:3e:29:1c:87:12:b7:ca:a9:32:
                    1a:d1:00:63:2f:4e:ba:ac:d3:96:93:a9:a2:bd:a5:
                    8f:39:8a:a8:41:b3:97:73:df:10:2c:93:41:7d:6e:
                    6d:bc:48:cd:a9:64:93:4e:63:d6:64:17:b7:05:13:
                    38:23:fd:fa:12:c0:92:29:1f:a7:1f:d6:d6:07:be:
                    9f:04:ec:d4:87:3e:36:46:a6:3f:f2:55:58:bf:da:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E0:64:DA:CB:08:F0:8C:D8:A5:E6:3E:24:0D:75:E2:B8:D4:7C:FB
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:81:d3:56:61:50:2b:63:be:08:c6:ca:6f:d2:35:79:22:f9:
         45:5f:39:1d:fd:ae:b3:f8:7b:1f:c1:d9:2c:2b:20:85:1e:f0:
         fa:f3:24:28:50:31:82:67:0c:6d:a7:42:e4:8b:2a:9a:9b:49:
         84:9c:cb:c8:d4:aa:7a:b7:61:6b:33:35:c7:86:5d:39:46:c9:
         c8:0a:c9:8e:60:19:de:a4:67:13:51:21:a5:d5:ac:a8:b7:0e:
         76:89:14:ed:28:2f:1f:46:59:18:81:46:0f:d8:22:74:dd:55:
         97:75:fa:fa:91:f9:b0:c7:58:93:78:9b:a4:10:ab:ea:af:09:
         d2:61:b3:fd:f0:a2:dc:26:1d:8f:1f:55:47:02:a2:c5:e7:e1:
         07:f1:aa:c6:e9:37:21:34:f8:1a:2c:a0:f2:4a:f9:43:61:e7:
         ef:f0:70:cb:24:6d:61:d8:7b:85:ea:f8:89:81:91:fd:bc:55:
         e4:17:ce:c6:8b:20:92:ab:a1:16:5a:fd:0d:9c:ac:88:10:45:
         90:70:09:f4:68:5d:28:53:49:ec:31:05:7d:71:e0:73:7f:58:
         f5:d3:22:53:80:6f:33:f7:f8:0e:b7:68:9c:24:6d:62:ce:66:
         54:37:77:31:60:20:ca:c5:38:67:12:78:22:06:54:e0:49:c0:
         35:d2:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org