Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          Wk5ED9A4MG9hKSli7ConYeMmLYa1jYqw1hMaUpqXAIQ=
Subject key identifier:   DC:AC:7D:C5:79:50:B6:70:E7:FB:39:14:EC:C6:6F:1C:A1:0C:5F:EA
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2CBFC1996544DBF31BB4E456AE3A7CC16C97AB82
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        170.82.124.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bf:c1:99:65:44:db:f3:1b:b4:e4:56:ae:3a:7c:c1:6c:97:ab:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject: CN=3082010A0282010100CD4D083798302C22D94D3773B93105E97B80A3D9122E82DD73E83F4C1893E04EB8A48A05996033D00F06EB9D92D60A015F647BE98CCF7C5E39FA816B4972FAF6C4510394F59323CDA30DA45181D9FFD50256D40BB8CAE26977AC16AA8D86822CF79B86F904494BD8E7F2286D6CB907D6BE8CA981F7BF76B587A59FEA53E3081FAA5D8389A61A98490E9E98DF4AA54D4B198887EB3E65CCC01CCE3C5E3FC9EF22AAA2DD14BD27E9B9ED37EDEE26EB15F54572E459C5FB6D2CE41E48CC5A7BD530108775D26F59DD543384B39B69C7CC61A9D3996BE566E276C1FA19C3CA4ACE8F75011F995B5E714C010BFB0514CA294273D64B168758EEF42CAA86E16EA2A8310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:08:37:98:30:2c:22:d9:4d:37:73:b9:31:
                    05:e9:7b:80:a3:d9:12:2e:82:dd:73:e8:3f:4c:18:
                    93:e0:4e:b8:a4:8a:05:99:60:33:d0:0f:06:eb:9d:
                    92:d6:0a:01:5f:64:7b:e9:8c:cf:7c:5e:39:fa:81:
                    6b:49:72:fa:f6:c4:51:03:94:f5:93:23:cd:a3:0d:
                    a4:51:81:d9:ff:d5:02:56:d4:0b:b8:ca:e2:69:77:
                    ac:16:aa:8d:86:82:2c:f7:9b:86:f9:04:49:4b:d8:
                    e7:f2:28:6d:6c:b9:07:d6:be:8c:a9:81:f7:bf:76:
                    b5:87:a5:9f:ea:53:e3:08:1f:aa:5d:83:89:a6:1a:
                    98:49:0e:9e:98:df:4a:a5:4d:4b:19:88:87:eb:3e:
                    65:cc:c0:1c:ce:3c:5e:3f:c9:ef:22:aa:a2:dd:14:
                    bd:27:e9:b9:ed:37:ed:ee:26:eb:15:f5:45:72:e4:
                    59:c5:fb:6d:2c:e4:1e:48:cc:5a:7b:d5:30:10:87:
                    75:d2:6f:59:dd:54:33:84:b3:9b:69:c7:cc:61:a9:
                    d3:99:6b:e5:66:e2:76:c1:fa:19:c3:ca:4a:ce:8f:
                    75:01:1f:99:5b:5e:71:4c:01:0b:fb:05:14:ca:29:
                    42:73:d6:4b:16:87:58:ee:f4:2c:aa:86:e1:6e:a2:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:7D:C5:79:50:B6:70:E7:FB:39:14:EC:C6:6F:1C:A1:0C:5F:EA
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c7:79:08:36:5a:9f:08:1d:c8:ff:ae:4c:ac:6f:35:eb:4c:
         77:15:f0:5c:06:d8:8a:4c:e7:57:9c:e1:4a:0d:71:ee:cf:9d:
         4f:35:36:cb:9c:0c:f1:49:69:92:d4:42:14:39:74:1b:03:b5:
         3c:6c:fc:da:ac:cc:9a:78:3b:29:03:1f:1c:b6:f2:0b:25:cd:
         e5:03:c3:50:b1:40:ca:b8:c0:37:55:0e:ef:57:ec:b2:b8:6b:
         d9:5d:e1:59:3a:cc:22:b3:d1:5f:2f:4b:f2:37:60:ed:18:4e:
         3f:ee:a7:66:fc:3c:c5:76:65:63:8d:df:a0:70:f8:24:78:5f:
         a2:9d:da:2e:ad:fa:ad:03:8d:0a:36:fb:b0:33:a5:eb:1f:2b:
         0e:ef:a7:a4:f0:92:b7:f0:36:4f:ca:9c:9a:dc:bb:92:49:05:
         3a:c4:fd:3a:68:50:7b:eb:0f:fb:ad:dc:1a:26:b6:f5:a2:de:
         0c:e2:ba:68:b1:e3:d0:8a:04:b7:d5:a6:95:40:b0:8c:1e:3c:
         4e:5b:f4:54:a7:b6:5d:f4:1e:0d:bd:6c:15:2d:07:1c:3d:40:
         c8:21:e5:f8:3d:5c:80:55:fa:13:17:9f:e4:58:87:52:d4:ae:
         45:d5:5c:7e:e7:3c:03:52:62:28:df:c0:4b:0d:02:5a:9c:cb:
         bd:8a:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org