Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa
File:                     3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          oACufdFxaXv8zP5CrL/MgIp1N5fTb9+VUdagT694Gfw=
Subject key identifier:   DE:03:43:15:3E:DB:4E:9D:50:0F:91:5C:F9:D0:39:7C:59:86:AC:FF
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       4B6A0A8AE4B372BB76336DC3ED9384D99E7FE619
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        177.124.168.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:0a:8a:e4:b3:72:bb:76:33:6d:c3:ed:93:84:d9:9e:7f:e6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:64:9f:44:b6:fa:50:c9:62:fb:46:c1:6c:
                    6f:5d:9d:fc:4c:b1:e7:06:0a:29:7f:f5:e4:00:49:
                    52:67:9a:e6:99:f6:f3:b7:2f:b5:1c:4b:5b:25:8b:
                    8b:a4:29:04:90:0e:c1:b5:6b:6a:31:e1:f5:30:f7:
                    27:82:73:4b:51:cd:5c:b1:47:67:9d:99:f5:0e:df:
                    84:cc:a4:91:c0:7e:96:48:40:30:e7:18:aa:e8:e7:
                    0e:5c:0c:90:27:90:c1:2b:0b:00:77:30:43:0f:16:
                    ae:80:6a:bd:8c:53:22:7c:43:55:8b:55:62:6a:5b:
                    c3:d9:ac:75:cd:62:1a:7c:d6:ac:9b:68:36:de:81:
                    7b:00:7c:a9:7b:28:e9:5f:47:c6:a4:41:48:59:53:
                    9e:2f:85:68:dd:8e:9c:9b:c3:9c:e4:2a:ed:f0:02:
                    20:28:06:dd:ef:29:0a:db:89:3a:f6:a3:41:b4:38:
                    ab:36:37:a8:b3:81:24:04:50:05:ca:92:93:0d:b8:
                    95:94:d6:36:de:9b:02:6d:2f:cb:9b:9e:2a:f2:18:
                    13:12:89:59:1a:2c:f5:b0:ea:d1:0b:ca:bf:20:24:
                    14:ae:51:fd:2f:5d:64:b6:c6:9b:2c:ef:a7:54:dc:
                    73:4d:43:f9:97:2b:32:63:a0:36:18:35:6c:1f:4d:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:03:43:15:3E:DB:4E:9D:50:0F:91:5C:F9:D0:39:7C:59:86:AC:FF
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:cd:8c:8d:bf:36:5c:38:52:c6:0b:6c:6c:31:61:bc:fa:
         a3:73:0d:dc:69:58:4e:d1:48:42:af:75:25:63:ee:4b:1e:b2:
         30:45:87:01:1f:05:0e:d2:9a:bc:9a:2b:5a:03:78:6a:2c:aa:
         aa:74:bb:c0:c7:e5:ea:02:5c:4e:1e:24:0e:18:6f:1d:3e:d0:
         58:5d:c9:0a:b1:32:6d:9f:7a:aa:fa:9b:e7:88:fa:36:fa:4e:
         ba:20:45:04:3d:95:2f:6c:4c:36:83:ed:13:f0:00:0e:c8:d7:
         1d:37:69:5f:13:c6:35:34:40:fb:d7:07:ad:4b:30:87:73:26:
         3d:be:0c:68:99:e1:ed:42:58:8b:58:63:b7:c4:66:14:dd:dc:
         93:20:d2:53:7a:03:74:1c:82:a5:a5:c0:a9:95:42:73:dd:1c:
         19:b1:b8:75:fb:b1:d4:1b:4b:fa:b5:fc:d6:45:d1:db:bf:ac:
         03:8c:39:ed:70:62:ba:97:af:a6:1c:68:68:1b:70:1b:06:fc:
         f2:de:99:41:c5:13:aa:06:fc:12:67:96:c5:19:60:53:ad:be:
         11:f9:49:7a:40:e4:d6:9d:80:64:2b:3b:5f:22:6b:16:b2:ab:
         18:91:99:52:e0:fb:7f:1a:c4:f4:b1:d2:29:48:9b:c0:45:96:
         d0:f6:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org