Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          y2t5H/Uy8Vk8KURFwmGBvtT2CyX6Zr1VyVcOZ0twUo4=
Subject key identifier:   A1:A1:62:88:64:A8:7A:2F:98:AE:38:2A:75:F5:11:E4:CF:9B:25:17
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       3905C2049E8EDCC0E539FE53D974520DA7097250
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        170.82.126.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:05:c2:04:9e:8e:dc:c0:e5:39:fe:53:d9:74:52:0d:a7:09:72:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject: CN=3082010A0282010100946DED3BC15D6B10DAD67AA90D4475165D96071A017C7437508EE3914482DB19562BF62627A989524C4783938BDDC42623500D3CEAE611857AA6A4FC0A6A0D46FA724B3D9AB9273CE25F284510D0438C853DBD10DD5F7AA5A111E8AD7B14988FFFA681A47CBC4CEB0FBB621631731BAE9E3AB2E619C749596066F49E633F600C3B99C4896D2076AB08F34B7E17FFCC751BF79A071D99AE156E12F5FDCFD1DDAB551CC84F382F982BE9F8EA3B3FC008E8EEB086AEBD4936A20E16241E2911B51B4FEE73B27277EF1ED9D9654BED8AF699D2CC55CCCF001EE21442C2CE1D9EE7485A1849A65B7D4F03BB8BEB023C80C103B7CD8BA8AC1B6B6DC8665052D48DBCB30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:ed:3b:c1:5d:6b:10:da:d6:7a:a9:0d:44:
                    75:16:5d:96:07:1a:01:7c:74:37:50:8e:e3:91:44:
                    82:db:19:56:2b:f6:26:27:a9:89:52:4c:47:83:93:
                    8b:dd:c4:26:23:50:0d:3c:ea:e6:11:85:7a:a6:a4:
                    fc:0a:6a:0d:46:fa:72:4b:3d:9a:b9:27:3c:e2:5f:
                    28:45:10:d0:43:8c:85:3d:bd:10:dd:5f:7a:a5:a1:
                    11:e8:ad:7b:14:98:8f:ff:a6:81:a4:7c:bc:4c:eb:
                    0f:bb:62:16:31:73:1b:ae:9e:3a:b2:e6:19:c7:49:
                    59:60:66:f4:9e:63:3f:60:0c:3b:99:c4:89:6d:20:
                    76:ab:08:f3:4b:7e:17:ff:cc:75:1b:f7:9a:07:1d:
                    99:ae:15:6e:12:f5:fd:cf:d1:dd:ab:55:1c:c8:4f:
                    38:2f:98:2b:e9:f8:ea:3b:3f:c0:08:e8:ee:b0:86:
                    ae:bd:49:36:a2:0e:16:24:1e:29:11:b5:1b:4f:ee:
                    73:b2:72:77:ef:1e:d9:d9:65:4b:ed:8a:f6:99:d2:
                    cc:55:cc:cf:00:1e:e2:14:42:c2:ce:1d:9e:e7:48:
                    5a:18:49:a6:5b:7d:4f:03:bb:8b:eb:02:3c:80:c1:
                    03:b7:cd:8b:a8:ac:1b:6b:6d:c8:66:50:52:d4:8d:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A1:62:88:64:A8:7A:2F:98:AE:38:2A:75:F5:11:E4:CF:9B:25:17
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:b8:1f:cd:e5:27:d3:21:34:2d:ad:28:cd:ed:1a:b8:f8:
         cd:5d:55:aa:b6:83:6d:16:ee:15:2b:47:f7:ce:43:df:05:85:
         1e:b4:88:41:8e:3d:ce:15:4f:16:f2:0b:25:a7:29:f3:cf:4e:
         e0:3d:b4:aa:09:fa:ee:50:26:9c:69:8f:f5:1d:30:6f:db:a3:
         22:b5:81:24:b4:02:5a:d8:9d:c7:a0:3a:6f:35:bf:b9:d1:4c:
         83:27:91:57:5b:70:b9:b4:83:dc:73:f9:6d:9a:18:d9:40:42:
         fa:2c:05:cd:22:8a:d6:9a:b1:f5:76:b8:9f:13:e7:86:38:25:
         c6:bc:7a:5e:4a:a2:85:81:0b:fc:c7:ae:68:11:08:c6:33:de:
         39:e2:81:fd:72:9c:52:9c:f5:41:9c:97:08:1d:98:1e:7e:a3:
         98:0c:ef:e0:02:99:7d:84:7e:fb:cb:3c:68:83:93:a1:3e:de:
         a9:de:bf:e4:d1:46:a4:ad:96:ef:90:84:eb:f1:30:ab:c7:28:
         d0:f1:2a:78:e8:7b:bb:33:1e:6f:c6:67:3e:dc:80:24:c0:1c:
         f3:2f:75:ff:ab:d9:ca:ed:97:e6:ec:63:66:3e:db:d1:fc:f7:
         67:00:11:70:4c:27:31:80:3f:bb:4e:3d:4c:52:94:c6:e8:89:
         94:54:c3:50
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOQXCBJ6O3MDlOf5T2XRSDacJclAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDRaFw0yNTA0MDMxOTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTQ2REVEM0JDMTVENkIxMERB
RDY3QUE5MEQ0NDc1MTY1RDk2MDcxQTAxN0M3NDM3NTA4RUUzOTE0NDgyREIxOTU2
MkJGNjI2MjdBOTg5NTI0QzQ3ODM5MzhCRERDNDI2MjM1MDBEM0NFQUU2MTE4NTdB
QTZBNEZDMEE2QTBENDZGQTcyNEIzRDlBQjkyNzNDRTI1RjI4NDUxMEQwNDM4Qzg1
M0RCRDEwREQ1RjdBQTVBMTExRThBRDdCMTQ5ODhGRkZBNjgxQTQ3Q0JDNENFQjBG
QkI2MjE2MzE3MzFCQUU5RTNBQjJFNjE5Qzc0OTU5NjA2NkY0OUU2MzNGNjAwQzNC
OTlDNDg5NkQyMDc2QUIwOEYzNEI3RTE3RkZDQzc1MUJGNzlBMDcxRDk5QUUxNTZF
MTJGNUZEQ0ZEMUREQUI1NTFDQzg0RjM4MkY5ODJCRTlGOEVBM0IzRkMwMDhFOEVF
QjA4NkFFQkQ0OTM2QTIwRTE2MjQxRTI5MTFCNTFCNEZFRTczQjI3Mjc3RUYxRUQ5
RDk2NTRCRUQ4QUY2OTlEMkNDNTVDQ0NGMDAxRUUyMTQ0MkMyQ0UxRDlFRTc0ODVB
MTg0OUE2NUI3RDRGMDNCQjhCRUIwMjNDODBDMTAzQjdDRDhCQThBQzFCNkI2REM4
NjY1MDUyRDQ4REJDQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlG3tO8FdaxDa1nqpDUR1Fl2WBxoBfHQ3UI7jkUSC2xlWK/YmJ6mJ
UkxHg5OL3cQmI1ANPOrmEYV6pqT8CmoNRvpySz2auSc84l8oRRDQQ4yFPb0Q3V96
paER6K17FJiP/6aBpHy8TOsPu2IWMXMbrp46suYZx0lZYGb0nmM/YAw7mcSJbSB2
qwjzS34X/8x1G/eaBx2ZrhVuEvX9z9Hdq1UcyE84L5gr6fjqOz/ACOjusIauvUk2
og4WJB4pEbUbT+5zsnJ37x7Z2WVL7Yr2mdLMVczPAB7iFELCzh2e50haGEmmW31P
A7uL6wI8gMEDt82LqKwba23IZlBS1I28swIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKGhYohkqHovmK44KnX1EeTPmyUXMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczMDJlMzgzMjJlMzEzMjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qlJ+MA0GCSqGSIb3DQEBCwUAA4IBAQA6DrgfzeUn0yE0La0oze0auPjNXVWqtoNt
Fu4VK0f3zkPfBYUetIhBjj3OFU8W8gslpynzz07gPbSqCfruUCacaY/1HTBv26Mi
tYEktAJa2J3HoDpvNb+50UyDJ5FXW3C5tIPcc/ltmhjZQEL6LAXNIorWmrH1drif
E+eGOCXGvHpeSqKFgQv8x65oEQjGM9454oH9cpxSnPVBnJcIHZgefqOYDO/gApl9
hH77yzxog5OhPt6p3r/k0UakrZbvkITr8TCrxyjQ8Sp46Hu7Mx5vxmc+3IAkwBzz
L3X/q9nK7Zfm7GNmPtvR/PdnABFwTCcxgD+7Tj1MUpTG6ImUVMNQ
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org