Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa
File:                     3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          O2OT+Ko9vU5MPuAhm8ENR3Q43A1jKyeTDTsD1+darP4=
Subject key identifier:   FC:55:C7:6A:99:A7:D9:55:12:1C:FF:23:BC:B3:21:C3:74:B7:7A:60
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2C9D13AA701F172A50C021F5CBB76194E3FDF035
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        177.124.168.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:13:aa:70:1f:17:2a:50:c0:21:f5:cb:b7:61:94:e3:fd:f0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:88:1e:dc:b6:72:71:17:fd:48:15:14:9f:
                    a7:bd:7d:d0:dc:e5:36:25:c5:e9:30:ba:c8:e1:ad:
                    50:0f:a2:5f:ac:0d:e1:f2:e9:ac:4d:df:e1:1c:e4:
                    1e:a7:d0:aa:1f:95:c6:ca:81:5f:c2:52:bc:e4:85:
                    45:8c:ec:3c:dc:1c:0c:9b:bc:6e:b4:71:b4:16:93:
                    40:3c:83:82:b5:97:42:ae:be:33:8a:1a:4e:ae:3a:
                    f2:e5:3f:40:c4:61:6e:1b:73:1d:18:47:57:ac:b8:
                    0c:88:06:62:55:39:01:af:86:78:dc:96:cd:9c:c5:
                    ce:28:a8:48:90:96:fb:86:fc:34:3c:77:74:c1:9c:
                    f9:0d:0c:2e:a4:1b:89:cf:93:c3:03:df:cf:e7:be:
                    d5:7d:a5:8d:fc:af:82:50:7b:e4:22:c9:86:64:de:
                    fc:28:08:8f:4d:55:a0:0d:35:44:98:5d:7f:30:34:
                    95:a2:07:2c:3a:c3:dc:ee:bb:21:e6:6a:d6:2d:e1:
                    a9:71:16:b9:4d:a0:6e:36:4c:1b:eb:11:d9:f3:be:
                    c7:cf:8a:f3:82:d3:f1:a5:3e:4c:19:94:44:b2:5f:
                    49:a5:55:3c:fc:93:e1:9c:22:ad:24:1c:9d:4f:0b:
                    a0:77:06:96:b5:f3:ba:8d:9d:84:d0:30:61:74:b6:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:55:C7:6A:99:A7:D9:55:12:1C:FF:23:BC:B3:21:C3:74:B7:7A:60
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:71:67:07:a3:aa:d0:b9:77:c5:29:e3:18:19:aa:13:24:
         57:9c:02:ea:58:08:9b:45:14:06:e9:bc:10:68:09:94:93:07:
         48:6b:d5:15:65:99:8a:fb:f9:ee:ad:02:47:66:2c:51:77:8b:
         c4:16:4e:66:0c:5e:8d:8d:66:33:8a:98:48:dc:52:01:b3:6c:
         da:0b:3d:46:b4:e5:fa:01:ab:15:9c:79:3a:03:d5:a9:fb:74:
         37:90:8d:28:10:52:26:cd:ec:df:ec:59:ac:4d:6c:7b:02:a6:
         76:14:1c:83:99:c1:ad:38:ef:86:51:6d:e3:da:1f:5e:76:02:
         ad:98:8e:ba:5c:16:db:3b:cf:a3:1a:15:4e:2b:c7:ad:fe:af:
         9a:6a:17:af:a0:41:8b:5d:81:60:7b:e2:24:e3:af:ad:2a:66:
         4d:c1:7e:4a:4a:d2:32:ff:10:d3:4b:1a:2b:f8:e7:0c:ce:bd:
         a5:e2:13:52:06:23:d3:0e:4c:ed:eb:3b:b2:d7:cf:14:57:0b:
         8e:b9:02:b3:86:f0:a9:40:f2:f9:68:58:c9:75:65:58:7d:1b:
         a3:f2:9b:70:72:08:4d:f2:f0:5a:97:82:61:f9:13:c1:d2:a5:
         2f:65:e8:f8:3f:c7:6b:ff:4a:8c:6f:c9:68:a9:2e:4c:97:bd:
         7c:53:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org