Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa
File:                     3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          RPrgCLuF8sp9nZzeOCfcPWTwy3eQ0nTEZ0R2z8xAQtA=
Subject key identifier:   02:3D:5C:86:74:BB:5B:3A:7C:04:3F:CC:69:E3:FC:36:E5:6B:DE:A1
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6C45D161BA44DD41ED0B01868EA752231B92F1EE
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        168.205.240.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:45:d1:61:ba:44:dd:41:ed:0b:01:86:8e:a7:52:23:1b:92:f1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject: CN=3082010A0282010100B2EE6F236EFB8E13CAAC9E29686BC550E3173757553CE39D81E1F0A6AB081B4F8F2441FD4D2FEAB8D53C1C1017F6C5FC2D3B37A3EEDC9535FFC86A65C55687877B342599C248924D66C37540C398EBD5CA7262F649922271EB2B29E729B32ACFCE22C37A4F3A60E1B69D809FD8127E3562085648807EC3C2549050AC916FF3AB2FE87AC1F753BBC5D278EAE12B5DA91B4F90A346CD43D82D5C7AB0E8991737C547DEE295D76031CAC155E6BDE8FDC03054CDB4F77B21A29560CEB9785CA18E8A15FA596B90FE6351CE73AB44FA392C531B6C176E00BFF2D90701AC1971D94FF951A9D0CD692EB84796072A6A84311A0FF56D14352E5B50731BA76FF5296AB3DF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:6f:23:6e:fb:8e:13:ca:ac:9e:29:68:6b:
                    c5:50:e3:17:37:57:55:3c:e3:9d:81:e1:f0:a6:ab:
                    08:1b:4f:8f:24:41:fd:4d:2f:ea:b8:d5:3c:1c:10:
                    17:f6:c5:fc:2d:3b:37:a3:ee:dc:95:35:ff:c8:6a:
                    65:c5:56:87:87:7b:34:25:99:c2:48:92:4d:66:c3:
                    75:40:c3:98:eb:d5:ca:72:62:f6:49:92:22:71:eb:
                    2b:29:e7:29:b3:2a:cf:ce:22:c3:7a:4f:3a:60:e1:
                    b6:9d:80:9f:d8:12:7e:35:62:08:56:48:80:7e:c3:
                    c2:54:90:50:ac:91:6f:f3:ab:2f:e8:7a:c1:f7:53:
                    bb:c5:d2:78:ea:e1:2b:5d:a9:1b:4f:90:a3:46:cd:
                    43:d8:2d:5c:7a:b0:e8:99:17:37:c5:47:de:e2:95:
                    d7:60:31:ca:c1:55:e6:bd:e8:fd:c0:30:54:cd:b4:
                    f7:7b:21:a2:95:60:ce:b9:78:5c:a1:8e:8a:15:fa:
                    59:6b:90:fe:63:51:ce:73:ab:44:fa:39:2c:53:1b:
                    6c:17:6e:00:bf:f2:d9:07:01:ac:19:71:d9:4f:f9:
                    51:a9:d0:cd:69:2e:b8:47:96:07:2a:6a:84:31:1a:
                    0f:f5:6d:14:35:2e:5b:50:73:1b:a7:6f:f5:29:6a:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3D:5C:86:74:BB:5B:3A:7C:04:3F:CC:69:E3:FC:36:E5:6B:DE:A1
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:05:bc:02:6d:b7:01:e8:26:41:33:37:33:82:ee:c5:09:c7:
         32:9b:c6:8d:6a:8a:78:64:4b:bf:fc:22:bd:b0:48:f3:b3:f5:
         41:57:18:ac:88:98:c7:50:cd:a0:9e:52:20:4b:4a:1f:1a:16:
         56:40:25:c2:3a:50:29:38:77:25:74:10:29:26:60:87:41:a9:
         a5:a3:f1:7b:59:6e:1e:ec:21:f9:75:b9:77:c8:e1:93:b0:6d:
         2c:14:98:cd:90:8f:c8:66:fb:41:a8:85:42:a9:9c:84:62:de:
         dd:23:59:12:d3:6a:aa:d9:d3:c3:63:c5:04:5d:85:41:c7:31:
         4b:93:a8:d7:be:22:68:72:ed:b4:49:58:e4:6c:9a:83:c8:99:
         3a:22:4e:83:c9:52:d5:d4:62:7f:85:0d:12:dd:08:44:f0:d1:
         ea:37:18:b7:47:41:7b:0a:49:6d:18:0d:45:5a:3c:32:87:2f:
         b0:5f:76:a6:c7:90:fb:00:0a:d4:be:98:68:87:8d:bb:b4:8d:
         06:62:19:fe:99:3a:6d:d6:af:64:bb:15:2c:e1:50:e9:7b:b6:
         7c:52:7c:8a:8d:bb:dd:30:70:32:53:53:8e:4d:7d:61:d3:c4:
         4d:9f:49:e1:a9:fc:e7:42:c0:6d:32:a2:9d:b4:31:75:2e:a4:
         19:6c:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org