Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          nnxN22nmdb2bjcjRhVofoYD8sz3SVNYnNN6ZSomS1dc=
Subject key identifier:   69:A1:B5:F6:46:15:4D:92:90:27:32:1C:82:9D:CC:91:00:82:01:93
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       7ECC30AA80798D8AE6950E9CA5B09A15F35C12D8
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262494
IP address blocks:        170.82.125.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cc:30:aa:80:79:8d:8a:e6:95:0e:9c:a5:b0:9a:15:f3:5c:12:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:e9:63:32:e1:d5:87:c5:73:44:cd:5f:79:
                    e3:35:ba:38:38:7d:16:70:46:63:3c:54:c5:31:8c:
                    15:ad:2d:4c:27:32:15:ed:48:ba:51:9c:09:4c:cb:
                    3c:22:6b:ba:5c:32:8b:b5:5f:fb:6f:a9:08:f7:10:
                    9d:5a:98:45:fa:20:5a:db:ad:e9:13:4d:0f:5f:88:
                    a8:a5:ca:6f:ce:40:5d:37:f6:a9:3a:c7:62:01:db:
                    24:75:ef:be:b4:d4:07:c8:13:69:11:09:c3:44:62:
                    62:90:4c:6f:8a:ff:0f:55:e6:b2:4c:b8:3a:d6:9c:
                    36:b9:7d:4e:55:e4:a1:33:ab:6b:67:53:05:09:4e:
                    6d:45:40:36:27:28:5b:5a:6e:7d:87:1e:4d:65:4e:
                    c1:fa:95:1c:87:e2:41:3a:ae:bb:73:c0:e0:c0:7c:
                    c5:2f:31:05:94:41:f1:04:1c:55:f2:c9:7e:15:32:
                    b5:93:49:86:b3:6d:04:65:3e:01:58:8a:2a:1f:d3:
                    1d:11:e8:ba:f0:ba:e8:f9:81:d9:a4:00:30:6e:65:
                    56:ee:c3:5d:52:ec:72:be:87:c2:02:a1:d2:8a:9a:
                    6f:73:96:46:ee:8d:7d:8b:56:1d:4c:15:1e:4e:b2:
                    97:9b:0d:9e:9b:a0:e6:76:b0:9e:f3:e6:cb:bb:bf:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A1:B5:F6:46:15:4D:92:90:27:32:1C:82:9D:CC:91:00:82:01:93
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4b:70:8f:2c:5b:c0:5b:cb:37:94:aa:91:e9:7f:1d:44:f2:
         c9:86:4c:ca:56:2c:85:40:92:91:08:56:42:e2:67:67:30:d3:
         c7:4d:8b:79:79:ec:f2:ed:4f:36:1a:15:50:bd:3b:d6:af:0a:
         8d:e5:47:1a:f2:c2:a6:26:32:4a:72:c8:63:b0:61:83:4c:55:
         f2:60:05:34:22:f2:57:e8:6d:c4:84:e0:00:31:67:21:11:a7:
         aa:f6:35:d6:86:94:ab:22:85:08:e2:a7:3e:fd:5d:34:71:ef:
         39:3b:b3:fa:a0:a3:d3:88:c7:62:bb:74:bc:df:9a:39:5c:eb:
         a8:94:d0:76:bb:31:ba:24:7d:d9:94:d5:b1:b7:f2:ca:29:82:
         94:42:02:f4:ae:e3:33:77:85:ee:21:36:85:7c:ad:a5:bc:2a:
         90:08:5c:fe:f0:0d:a4:9e:7a:ca:5c:44:a4:69:c3:17:4e:20:
         fa:4d:af:ae:d3:98:d7:0c:da:af:b8:06:9d:34:a4:d5:7e:4f:
         cc:dd:31:97:c9:82:36:da:da:cc:7f:d7:05:6e:89:3e:dc:ae:
         4f:58:a9:36:fd:68:5d:a7:25:ed:47:d9:b2:35:6a:7e:1d:f6:
         e8:ad:ca:ce:ad:6c:8e:ef:a1:7b:34:0b:37:01:e0:bd:28:65:
         a1:5d:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org