Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa
File:                     3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          LQuI25m5QxTNE1IzTqtbBDNhIgpLlcslbZ77D4eY5ss=
Subject key identifier:   36:20:70:BD:09:B5:A7:B7:7A:22:CD:96:4D:ED:E5:9F:75:18:C0:3D
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       22E706DE7778D0311A6026F486D6763929F384E5
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        168.205.240.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e7:06:de:77:78:d0:31:1a:60:26:f4:86:d6:76:39:29:f3:84:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject: CN=3082010A0282010100B32335DCC6C50334D78B7FC7E6E68B8AED102BAA98414E0DEBB61D56C758FAC7FBDA100447162619625FCEB01BBBB8A960FE35908953558E1D4A750F8A3E83B0CED87E6F1509B8C4BAC50511D57309382D9BEE19949DCCFA1070A96408C2D6E2953E3F8ABB5801452FF2514C4136D45FD0066A9AE3CF40D1C1C5D9E6E1647ED01F22E9FAB0A463157135D15ED0AFBA1FEA4418FD33F6F523F82B2C3B0A76F3A2F1FA96494CB31DFBB8E3C2608A1D019D5CD38EC7C8F72C44FA93822E1CD445D641BCB34E71BC5868E7CD59A2581C4E026E432E930ECC8884EAB109751DD3800C15925416F5CE7E3ABA573C9C42FDC7A9338B945EA1616EB5CE47C8E90ABE1BDF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:35:dc:c6:c5:03:34:d7:8b:7f:c7:e6:e6:
                    8b:8a:ed:10:2b:aa:98:41:4e:0d:eb:b6:1d:56:c7:
                    58:fa:c7:fb:da:10:04:47:16:26:19:62:5f:ce:b0:
                    1b:bb:b8:a9:60:fe:35:90:89:53:55:8e:1d:4a:75:
                    0f:8a:3e:83:b0:ce:d8:7e:6f:15:09:b8:c4:ba:c5:
                    05:11:d5:73:09:38:2d:9b:ee:19:94:9d:cc:fa:10:
                    70:a9:64:08:c2:d6:e2:95:3e:3f:8a:bb:58:01:45:
                    2f:f2:51:4c:41:36:d4:5f:d0:06:6a:9a:e3:cf:40:
                    d1:c1:c5:d9:e6:e1:64:7e:d0:1f:22:e9:fa:b0:a4:
                    63:15:71:35:d1:5e:d0:af:ba:1f:ea:44:18:fd:33:
                    f6:f5:23:f8:2b:2c:3b:0a:76:f3:a2:f1:fa:96:49:
                    4c:b3:1d:fb:b8:e3:c2:60:8a:1d:01:9d:5c:d3:8e:
                    c7:c8:f7:2c:44:fa:93:82:2e:1c:d4:45:d6:41:bc:
                    b3:4e:71:bc:58:68:e7:cd:59:a2:58:1c:4e:02:6e:
                    43:2e:93:0e:cc:88:84:ea:b1:09:75:1d:d3:80:0c:
                    15:92:54:16:f5:ce:7e:3a:ba:57:3c:9c:42:fd:c7:
                    a9:33:8b:94:5e:a1:61:6e:b5:ce:47:c8:e9:0a:be:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:70:BD:09:B5:A7:B7:7A:22:CD:96:4D:ED:E5:9F:75:18:C0:3D
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:b6:4d:70:5f:33:0b:85:ed:9f:f2:b5:63:50:44:d6:16:21:
         3e:95:9a:c1:24:8f:11:bb:19:df:d5:5f:72:14:29:d5:84:e8:
         b7:d6:a3:69:2d:9f:c4:3e:5c:6b:ee:0e:be:00:15:05:73:ee:
         ae:cf:60:0b:5e:2f:4e:97:04:4c:ed:12:ef:7f:bd:12:83:08:
         1d:87:bc:33:6a:1f:1b:21:e7:de:04:ca:2a:02:ee:90:06:34:
         b8:ee:fb:b4:86:4f:55:c3:12:ae:b4:e9:15:49:b7:8c:8f:97:
         bf:28:60:c4:c2:63:c5:45:9e:86:58:9f:0e:1b:bc:84:df:1b:
         f9:12:13:55:40:d9:00:e1:af:d0:50:b3:25:19:76:41:5e:02:
         40:73:06:e9:34:88:ea:17:7e:53:de:c4:5e:33:df:dd:98:cc:
         9a:fd:e6:62:57:1e:02:af:5c:3e:c8:f7:4c:8c:ec:79:f5:cd:
         6a:80:7c:bd:e9:39:d7:b3:56:05:bf:c9:09:88:8f:19:38:c2:
         98:d3:68:f3:60:0a:16:4e:98:4e:4d:52:e2:50:59:5a:cb:cd:
         09:04:95:e5:9b:59:38:c0:82:f5:97:ae:e2:08:a7:8a:d4:13:
         51:37:de:a2:65:75:e9:6b:4f:1d:7a:ad:c8:17:01:09:bc:ba:
         00:42:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----