Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa
File:                     3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          cgC8NOqfHILCv7hMag/WhOH9CWqtWdZbHgv/SVVfZQg=
Subject key identifier:   0F:72:91:1E:0A:1E:5E:3A:C3:49:87:54:AC:BA:59:C8:AE:F7:F3:8C
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       55630A24F3BDB0C3E4D4880D4445AC20FAB1BEFD
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        170.82.124.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:0a:24:f3:bd:b0:c3:e4:d4:88:0d:44:45:ac:20:fa:b1:be:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:2c:45:80:2d:95:e4:68:25:49:39:f5:e2:
                    a4:a5:7c:6d:ab:c9:e2:83:a6:30:c3:b7:12:ee:28:
                    d2:d7:4f:4a:14:57:8b:4e:80:47:e7:f3:2f:e6:ce:
                    13:a5:74:e4:28:2d:ac:a3:73:5f:53:93:b7:5d:1d:
                    9d:60:41:0a:61:40:1f:4c:ab:0b:d4:ee:1c:24:d8:
                    96:c4:cb:21:15:da:d2:ab:9d:ac:d3:95:97:e4:ee:
                    57:4b:5c:2b:a4:13:2e:7e:a4:29:73:91:2b:0e:83:
                    2b:f3:3a:7e:05:c9:2e:06:96:cb:b2:9a:59:28:b5:
                    bf:c6:a4:75:ec:cd:06:ed:26:2e:ca:e4:9f:fa:8e:
                    08:69:bf:22:65:4c:62:9b:82:4c:6f:a2:32:e7:ea:
                    b0:4d:fb:9f:38:43:75:36:69:2f:62:1a:33:a7:45:
                    38:65:0e:c9:c3:8f:16:c6:0b:64:ad:f6:e3:cf:89:
                    fb:ce:ba:ef:9a:19:26:b1:71:6e:47:eb:aa:5a:2c:
                    7d:5c:91:ba:59:0d:f7:dc:a4:73:6d:82:e9:5b:62:
                    a7:c2:cd:a5:b2:cc:40:47:6d:9f:29:f7:7e:1f:e2:
                    23:c2:5d:88:77:39:ba:35:76:1e:31:74:a2:0a:a9:
                    1b:d2:4d:5d:ab:d1:ce:b7:39:58:ef:38:86:90:0b:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:72:91:1E:0A:1E:5E:3A:C3:49:87:54:AC:BA:59:C8:AE:F7:F3:8C
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:44:de:fc:33:b4:a9:ef:19:f5:77:84:20:f8:bc:68:81:00:
         21:7f:7f:b8:cf:74:af:c6:43:f9:29:4a:7a:9a:49:77:3a:44:
         54:4e:83:60:fd:3c:24:4e:5c:d3:a7:ce:d0:65:90:b8:13:1b:
         d6:ab:ef:2c:4d:de:a0:2a:c3:57:70:c5:6b:5e:e3:8a:54:e4:
         c3:b7:33:e2:97:14:8d:e0:02:f7:ed:e6:d2:f4:51:80:cd:5a:
         c0:8f:69:31:50:d7:5d:2c:61:7a:46:70:a8:78:35:f0:c5:c7:
         cb:44:31:58:30:22:83:a6:35:09:d2:57:24:96:14:49:5b:cb:
         88:94:b9:25:fe:eb:15:9e:6d:d8:fd:98:74:0a:af:01:e5:b3:
         43:9f:cb:88:db:21:de:34:03:51:1d:e4:06:92:c7:6e:54:ca:
         49:fb:ac:96:92:c3:75:ea:03:64:3a:46:f7:d8:b3:63:b4:9c:
         24:bf:6d:de:ae:04:a3:3e:b2:c0:1c:c9:65:d2:46:07:a5:f2:
         a4:41:60:99:08:3c:fe:72:fe:26:33:12:0c:17:e3:cb:06:a4:
         a0:4e:27:7c:20:d6:b2:f6:46:39:68:01:a5:56:a1:56:89:d1:
         c5:28:9d:ac:11:39:e9:63:70:09:02:1d:a1:c5:6f:b4:e9:07:
         15:df:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org