Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          ABNrg2RI7Gas8jXjA9GGeuz6vNWNTWAm8KH5sobQ2+U=
Subject key identifier:   EC:7C:BA:69:59:7D:37:2E:95:87:9C:CF:28:E4:F3:48:55:F9:63:AC
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       3E6F2B70C0DF3AF3AFA7238524C59670BBD134A5
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        170.82.127.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6f:2b:70:c0:df:3a:f3:af:a7:23:85:24:c5:96:70:bb:d1:34:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:3d:0b:eb:9c:69:c0:47:9c:bd:4b:ef:22:
                    27:12:68:8b:ac:5e:3f:74:99:14:50:30:c9:d1:c3:
                    39:36:b4:7b:b6:1d:2f:d5:c7:22:83:f8:6f:22:1e:
                    38:c8:2e:fa:23:1e:ea:74:fd:1b:4e:4e:c8:b2:5c:
                    80:37:f3:64:0c:a0:52:fa:1c:0c:e5:ee:6f:36:35:
                    0a:f1:be:18:2a:f3:05:43:67:ae:7d:05:e7:71:46:
                    9c:cf:77:65:31:29:06:dc:ff:9b:c8:d1:5e:06:c8:
                    35:3a:91:cf:2a:54:7a:e5:4d:2c:d7:c7:5f:b0:4a:
                    28:1f:15:ea:e4:bd:91:08:9d:3c:ae:c9:ce:d5:56:
                    8d:85:ef:fb:37:b9:72:3e:c6:a4:76:d8:7e:bc:06:
                    9e:f8:1e:c7:86:62:48:11:02:ec:be:80:44:19:0b:
                    c8:f3:4e:75:cf:14:19:5e:f3:18:c0:96:0f:4e:79:
                    d9:e2:20:30:30:4a:45:53:4d:b2:0c:15:f3:73:ba:
                    e3:72:c3:40:c2:19:f3:34:e3:32:6c:ed:0c:e6:43:
                    4a:83:b0:ee:a9:71:a6:66:53:91:5d:a2:f3:ab:5b:
                    94:19:d6:66:3f:aa:48:3b:d1:64:ad:08:68:a2:ae:
                    cf:d0:77:86:47:e8:f4:89:c9:95:97:5c:f8:98:b6:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7C:BA:69:59:7D:37:2E:95:87:9C:CF:28:E4:F3:48:55:F9:63:AC
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:37:3a:0e:e4:f7:42:47:4b:fa:66:17:20:bd:6e:21:05:84:
         63:7f:e2:54:f6:78:b8:4c:e1:1a:b3:59:01:63:a3:f5:0d:e2:
         9f:56:e7:3f:6a:68:4c:bd:eb:16:9f:ff:d7:50:6a:64:2c:96:
         7d:4b:31:b0:ea:e1:a3:f2:e3:39:2b:4d:5c:25:ee:c8:b0:5b:
         b1:26:82:17:7c:81:0e:d8:39:d3:b2:8b:9b:1e:2b:2f:c5:d8:
         41:af:5f:78:b0:49:aa:ad:5b:18:35:64:1b:88:78:49:50:14:
         6b:d5:23:06:04:37:e5:c3:8f:93:b6:59:a1:a2:09:18:74:c7:
         36:b7:79:50:96:aa:6d:0e:39:7b:30:57:0e:b9:b0:09:e0:95:
         34:a9:a0:0a:5e:44:71:ed:24:5b:8a:6d:52:c9:4f:17:44:c2:
         94:ec:6a:5f:0d:77:f4:14:37:a7:ed:d5:8b:51:71:1d:dc:a5:
         8e:80:c6:77:99:e8:42:62:5c:0f:5c:b9:9c:c0:90:de:b6:8b:
         f2:46:7d:ed:a9:a7:c4:9e:e8:0f:6d:ed:7a:83:ec:a5:53:67:
         91:35:50:67:9a:65:e3:c9:52:30:ea:56:2b:2e:55:bd:93:f6:
         ef:4b:b6:3f:fc:01:dc:97:19:e5:ee:d6:cd:b0:49:3d:5e:3a:
         a6:26:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org