Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          nZ2tCFCpZcBZHLwIc17aZMV9elXfFOnVLXCGV+zxAGk=
Subject key identifier:   DB:48:C7:4C:26:52:58:7C:82:E2:44:C1:C7:C0:2B:9C:D9:2B:61:11
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       06CF6849AEC7B02B03E77C764DC19ABAA2A2195B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        168.205.240.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cf:68:49:ae:c7:b0:2b:03:e7:7c:76:4d:c1:9a:ba:a2:a2:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:4f:b5:ad:6f:6c:a3:5e:84:20:8c:5c:39:
                    67:24:ba:61:b8:d7:83:f3:70:bf:e3:e9:c1:a7:fe:
                    8b:9c:84:22:3f:7f:82:1d:ad:ea:1c:d8:03:28:c5:
                    87:3c:9c:99:b9:92:d7:c6:e1:ca:2f:c0:a4:3f:08:
                    93:d4:39:5d:4c:2b:fc:cf:a7:e7:bd:08:5c:07:8e:
                    52:01:28:ed:c8:9a:87:68:46:25:78:fb:be:b1:3c:
                    09:98:78:81:a5:50:9f:66:7e:d9:cc:bc:53:ca:0f:
                    8a:22:45:2a:4a:52:11:17:a0:d6:3e:ea:62:c1:66:
                    11:52:47:10:45:9d:b6:4b:35:18:dd:30:0f:bd:af:
                    0c:aa:7f:17:bf:ac:5e:e0:5c:b1:90:c1:36:2d:5b:
                    2e:ec:70:a1:91:f6:e2:47:f3:af:fa:91:ea:b0:a1:
                    aa:9d:ab:87:11:8b:68:5f:04:09:5c:51:e9:ba:6f:
                    0b:e8:23:68:a4:31:a6:01:b9:8c:8c:78:a3:e6:c1:
                    f4:60:aa:64:da:62:eb:ea:37:7b:6b:87:71:78:d0:
                    f9:2d:f9:30:a1:04:26:23:73:92:5f:a6:e3:38:48:
                    78:63:4f:f2:72:40:38:bd:44:1c:ad:e3:82:f2:89:
                    89:2e:3d:ba:6f:85:36:bb:99:f6:bb:18:1a:81:dc:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:C7:4C:26:52:58:7C:82:E2:44:C1:C7:C0:2B:9C:D9:2B:61:11
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:83:fe:a0:5d:de:ec:85:62:f8:80:dc:77:c1:d6:e5:71:
         88:f5:12:31:49:73:06:9f:67:5c:be:a5:1b:a2:56:e3:4f:41:
         31:9c:45:31:3d:a6:94:00:7b:38:7d:fb:b6:2d:e7:70:09:d1:
         ad:b2:f0:50:ee:51:0c:7a:77:48:f7:b9:22:75:65:85:fa:78:
         69:5a:f0:03:92:df:f6:6b:16:ee:54:c3:7d:0f:3e:1b:5d:a5:
         54:52:55:6b:b9:be:6f:f8:e1:be:9e:7f:a8:70:96:c5:42:f7:
         19:d9:b2:d0:30:d7:f9:e4:ae:29:cf:98:82:c3:c7:ee:3e:56:
         e6:01:2b:58:06:30:4f:58:14:e6:b2:ea:ab:1c:5f:5b:f7:c1:
         32:a0:9d:08:c4:8b:65:82:e3:6e:ba:7c:58:62:87:61:3b:82:
         f5:59:83:15:6f:bd:43:1d:fa:6b:68:13:da:ff:c4:87:c7:15:
         ac:6e:61:c8:df:e6:c4:ff:f5:cc:f8:e3:05:fb:5c:5c:2d:6f:
         f2:96:5f:5d:09:ac:3e:b2:13:4a:59:6e:ef:91:89:6b:77:0a:
         6b:23:1d:d8:90:8b:91:03:bf:30:f8:50:57:ec:68:dd:d5:65:
         3a:36:a8:fa:74:c8:8a:34:82:7f:9a:ba:9d:cc:d9:15:bb:d9:
         62:2e:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org