Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa
File:                     3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          RMctu4nersJ24u+KNZx38f6JyVeeDNBC3gDGwllHpyw=
Subject key identifier:   55:65:BB:B0:78:A4:13:A1:D3:54:25:F2:50:02:5B:9A:2F:69:4E:04
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       665233DEC4B2AA74B19B05D0ADD3E1F0E35A80E8
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        170.82.124.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:52:33:de:c4:b2:aa:74:b1:9b:05:d0:ad:d3:e1:f0:e3:5a:80:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:f6:c2:10:00:13:f4:81:ba:99:cf:45:3d:
                    64:b4:bf:34:ae:93:e6:aa:4d:4f:f2:89:37:2b:fc:
                    02:fc:d7:23:66:45:aa:af:1c:07:cb:7f:7e:cc:9c:
                    fa:2f:11:83:7b:ae:8b:fe:bd:72:a2:6a:3d:cc:bf:
                    cd:af:af:48:67:7b:cf:42:94:61:ed:17:bf:af:df:
                    08:2a:96:f3:26:5d:d9:7e:39:7d:b4:c7:10:0a:54:
                    98:31:28:44:df:7b:4f:7b:ad:0e:41:a3:a7:12:46:
                    ed:da:65:e7:97:b8:af:28:98:6c:b2:a5:e0:0a:11:
                    7d:a4:12:47:86:c4:b9:c0:a6:7b:19:73:c9:68:3c:
                    59:8c:37:f2:67:7a:20:0e:0b:97:25:b1:8a:5b:aa:
                    40:13:e9:a5:d5:ac:1a:d6:ab:3a:3a:46:3e:b9:9a:
                    cc:d4:2d:18:44:5f:76:11:68:fa:08:b4:e3:66:95:
                    2f:48:7f:81:24:6e:2b:c8:d7:15:45:58:7c:ff:04:
                    c2:1e:52:ea:e2:b4:d9:1d:e7:8c:9e:8c:62:6e:6d:
                    4f:b6:db:02:5a:18:76:0b:4d:fe:d4:d3:fc:7f:22:
                    35:a0:71:87:43:37:af:99:89:50:61:c2:a6:0e:dd:
                    d6:2e:db:88:2e:3c:cc:10:3a:62:c4:af:ba:dc:0e:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:65:BB:B0:78:A4:13:A1:D3:54:25:F2:50:02:5B:9A:2F:69:4E:04
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:ff:6f:7e:e1:4a:60:a9:76:b2:c3:94:97:df:cf:71:e9:4b:
         ea:21:e3:78:f3:66:43:3c:cb:83:af:32:da:12:0d:9f:8a:57:
         64:a3:4a:d9:a5:e0:9f:99:95:da:b1:9d:6d:07:36:dd:dd:24:
         a5:61:e6:60:17:4a:3e:23:53:5b:b6:10:2f:5e:ce:6e:f1:b9:
         e5:ec:80:af:f6:1a:56:32:cb:a6:e2:62:a2:9a:12:a3:1d:a9:
         23:f2:f5:4f:53:d8:fa:42:11:89:59:ec:12:8f:ea:81:3f:bb:
         3c:cd:c1:ae:6e:b4:1f:5b:e8:40:bf:5a:8e:3d:ff:0a:1c:ff:
         9a:51:ca:16:52:20:e8:46:89:4a:f7:76:aa:fc:ff:61:f6:73:
         35:a8:2e:16:11:b9:4a:75:1a:d9:fd:ae:ab:72:da:71:ab:2e:
         f1:3c:80:01:7b:d3:61:09:c8:35:15:1c:9d:76:73:9d:2a:a9:
         7d:44:64:43:af:46:23:9b:d6:94:6a:49:10:0e:25:38:fc:31:
         ab:01:45:de:ac:1c:99:15:1b:39:de:6d:87:81:ff:96:d6:92:
         ca:2e:0e:11:ab:d7:94:8d:df:21:3a:92:01:d1:ea:da:dc:a2:
         74:15:76:f2:a7:d5:d0:ce:3f:35:0f:dc:cc:eb:30:e0:e2:6e:
         4c:13:8a:2f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUZlIz3sSyqnSxmwXQrdPh8ONagOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDhaFw0yNTA0MDMxOTAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTFDRUY2QzIxMDAwMTNGNDgx
QkE5OUNGNDUzRDY0QjRCRjM0QUU5M0U2QUE0RDRGRjI4OTM3MkJGQzAyRkNENzIz
NjY0NUFBQUYxQzA3Q0I3RjdFQ0M5Q0ZBMkYxMTgzN0JBRThCRkVCRDcyQTI2QTNE
Q0NCRkNEQUZBRjQ4Njc3QkNGNDI5NDYxRUQxN0JGQUZERjA4MkE5NkYzMjY1REQ5
N0UzOTdEQjRDNzEwMEE1NDk4MzEyODQ0REY3QjRGN0JBRDBFNDFBM0E3MTI0NkVE
REE2NUU3OTdCOEFGMjg5ODZDQjJBNUUwMEExMTdEQTQxMjQ3ODZDNEI5QzBBNjdC
MTk3M0M5NjgzQzU5OEMzN0YyNjc3QTIwMEUwQjk3MjVCMThBNUJBQTQwMTNFOUE1
RDVBQzFBRDZBQjNBM0E0NjNFQjk5QUNDRDQyRDE4NDQ1Rjc2MTE2OEZBMDhCNEUz
NjY5NTJGNDg3RjgxMjQ2RTJCQzhENzE1NDU1ODdDRkYwNEMyMUU1MkVBRTJCNEQ5
MURFNzhDOUU4QzYyNkU2RDRGQjZEQjAyNUExODc2MEI0REZFRDREM0ZDN0YyMjM1
QTA3MTg3NDMzN0FGOTk4OTUwNjFDMkE2MEVEREQ2MkVEQjg4MkUzQ0NDMTAzQTYy
QzRBRkJBREMwRUM4QUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4c72whAAE/SBupnPRT1ktL80rpPmqk1P8ok3K/wC/NcjZkWqrxwH
y39+zJz6LxGDe66L/r1yomo9zL/Nr69IZ3vPQpRh7Re/r98IKpbzJl3Zfjl9tMcQ
ClSYMShE33tPe60OQaOnEkbt2mXnl7ivKJhssqXgChF9pBJHhsS5wKZ7GXPJaDxZ
jDfyZ3ogDguXJbGKW6pAE+ml1awa1qs6OkY+uZrM1C0YRF92EWj6CLTjZpUvSH+B
JG4ryNcVRVh8/wTCHlLq4rTZHeeMnoxibm1PttsCWhh2C03+1NP8fyI1oHGHQzev
mYlQYcKmDt3WLtuILjzMEDpixK+63A7IrQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFVlu7B4pBOh01Ql8lACW5ovaU4EMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczMDJlMzgzMjJlMzEzMjM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
qlJ8MA0GCSqGSIb3DQEBCwUAA4IBAQCz/29+4UpgqXayw5SX389x6UvqIeN482ZD
PMuDrzLaEg2fildko0rZpeCfmZXasZ1tBzbd3SSlYeZgF0o+I1NbthAvXs5u8bnl
7ICv9hpWMsum4mKimhKjHakj8vVPU9j6QhGJWewSj+qBP7s8zcGubrQfW+hAv1qO
Pf8KHP+aUcoWUiDoRolK93aq/P9h9nM1qC4WEblKdRrZ/a6rctpxqy7xPIABe9Nh
Ccg1FRyddnOdKql9RGRDr0Yjm9aUakkQDiU4/DGrAUXerByZFRs53m2Hgf+W1pLK
Lg4Rq9eUjd8hOpIB0era3KJ0FXbyp9XQzj81D9zM6zDg4m5ME4ov
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org