Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          VZcwoANB7OuEomjr8XkJEC490JouguDJoADI/+XUaFc=
Subject key identifier:   C2:F3:2A:85:BE:B6:64:4B:01:27:AE:D5:EB:52:F3:09:C5:09:BB:5A
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2CA727D2BE2D449C12978900B5591BB0867D8274
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        177.124.169.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a7:27:d2:be:2d:44:9c:12:97:89:00:b5:59:1b:b0:86:7d:82:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:c1:cb:fa:d8:ab:a0:04:d4:7d:e2:e4:24:
                    57:41:4d:25:71:78:de:45:ae:b0:30:7d:1d:d3:04:
                    1b:1d:14:0b:5b:50:ec:dc:29:1a:c0:20:68:12:07:
                    e4:d4:36:3e:40:90:fb:eb:75:6b:04:7c:a1:45:a5:
                    35:0d:84:ba:a6:0e:7b:2c:1f:c6:39:04:b2:d5:2c:
                    b6:af:9c:ae:f7:56:5f:5e:ac:ad:a4:d0:07:7e:e1:
                    13:45:a0:13:01:8b:77:f3:f5:db:b1:01:d2:84:69:
                    a5:f3:de:34:4b:df:e7:0d:41:91:6c:bb:43:67:9b:
                    18:c4:31:3f:a9:08:4d:a1:e5:69:15:86:e7:51:8d:
                    1c:8e:fc:15:8c:78:22:a5:b9:10:2e:37:6d:cb:98:
                    c9:79:a3:4e:7d:61:fc:ec:62:67:99:e1:39:71:a2:
                    31:d6:83:1d:35:6c:ae:ba:c2:ac:99:86:e0:13:51:
                    b0:50:ce:7b:50:8e:45:66:5c:ef:84:55:40:9d:5a:
                    5c:b3:bc:56:a8:2f:99:26:bc:db:e2:22:0d:50:44:
                    e3:9d:4d:d5:43:37:49:f0:64:41:77:22:f1:c8:b1:
                    54:21:ee:bb:67:3c:00:8b:d1:08:24:7d:e1:78:fc:
                    fc:d3:e7:2f:42:9c:20:5e:a0:f2:a2:65:94:31:7f:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:2A:85:BE:B6:64:4B:01:27:AE:D5:EB:52:F3:09:C5:09:BB:5A
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:7b:d8:ac:4c:3d:46:cb:da:4b:58:39:eb:4c:86:36:43:70:
         97:ef:0f:dd:83:36:e8:c6:d5:f9:c1:f0:1f:ba:ab:37:d1:c3:
         c1:a3:8c:5a:bb:44:99:da:ca:ef:5d:3c:df:03:14:e1:40:87:
         59:7b:7a:ec:15:aa:37:b5:5a:be:71:c4:54:7c:78:2b:dc:d2:
         9c:11:12:de:e8:ec:d6:59:83:a4:57:ae:76:66:49:fe:f3:80:
         e0:4d:74:98:d6:72:6a:47:98:bb:da:96:9e:98:3b:ea:43:71:
         87:d2:86:a5:e5:b3:5a:5b:c8:9d:7b:0d:94:ae:ee:24:da:19:
         0d:f0:78:c6:29:c7:cb:56:34:dd:1f:12:6f:fe:ec:10:51:8e:
         56:c0:39:a8:ff:21:c0:6c:9f:36:64:36:2c:a5:68:d6:5a:03:
         c5:b9:e1:cc:f2:5f:44:e0:56:2f:29:3d:fd:da:95:b2:cb:5d:
         95:77:92:31:4d:e0:5d:c1:60:9a:81:3b:ad:6f:7c:61:de:0e:
         cc:bf:a7:1d:a4:2f:dc:41:b3:8b:3a:1b:3e:a3:d5:32:10:99:
         4f:44:27:75:13:28:e1:b2:df:c4:73:96:a4:06:d1:0e:28:0b:
         7d:e6:1c:34:fb:64:01:89:82:c8:d1:40:03:cb:3d:38:3a:e0:
         72:36:0a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org