Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa
File:                     3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          vPWU3YK1Vrxr43R429EWq+4X/aqdGGoFrEuXH6bl2so=
Subject key identifier:   D3:95:F4:01:49:47:7C:E0:EF:95:C5:91:46:09:26:21:50:12:81:92
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       3A1247D6A39EE3B4C2ECB9E77BCC3798D74B45D6
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        177.124.170.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:12:47:d6:a3:9e:e3:b4:c2:ec:b9:e7:7b:cc:37:98:d7:4b:45:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:99:d0:8e:8d:1e:ce:ce:e7:38:27:f7:2a:
                    af:f0:6b:c5:33:c8:8d:7f:b7:a4:9b:9d:8d:53:7f:
                    3b:1d:29:6f:49:e2:d9:fc:1e:72:7e:b7:bd:ba:87:
                    67:b2:60:c4:c0:3c:6d:47:04:00:fd:69:ff:32:94:
                    34:fc:29:72:1d:78:03:2d:7b:91:7e:0a:22:77:4b:
                    3b:23:58:0a:69:ef:51:0d:37:85:65:6f:b0:75:20:
                    67:c5:99:d9:c5:3c:d4:dc:21:39:be:0a:f3:bb:ee:
                    c5:c4:88:88:e7:54:03:22:7a:1b:13:5b:2f:eb:ff:
                    ae:0c:aa:ac:5b:0a:ae:28:87:ac:7b:e4:dc:9e:d2:
                    df:aa:c6:ec:cb:7d:3c:6f:55:30:3c:16:a8:a2:5e:
                    50:03:d4:ab:be:54:b2:08:7f:94:2b:80:35:0a:3c:
                    de:e5:28:c9:22:f5:b1:82:67:11:ae:d0:ca:2e:1d:
                    24:83:45:71:0e:73:e4:03:bf:00:fb:13:f5:56:54:
                    d7:6b:05:06:cf:3d:6b:10:d1:3e:85:f7:bd:b8:9a:
                    a4:d9:67:c5:26:f7:bd:2a:d0:7e:3e:75:1d:ca:3e:
                    58:58:bb:9f:06:ab:72:9d:70:f5:44:98:47:ae:bf:
                    9b:c7:ad:22:46:e1:f0:0e:2c:9a:4a:76:be:7b:8e:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:F4:01:49:47:7C:E0:EF:95:C5:91:46:09:26:21:50:12:81:92
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:95:56:ef:4d:35:7a:ac:cd:20:ad:c7:b9:47:27:74:39:
         85:78:cf:e2:26:d4:2f:0d:a6:73:f7:7c:e2:04:95:50:1e:46:
         23:78:26:40:7f:0b:a4:87:ff:5c:f0:f8:d3:be:a3:90:5d:4a:
         43:7c:6e:7d:4e:80:26:81:82:b4:eb:83:d9:ef:3a:13:75:ca:
         11:62:be:ec:14:2e:75:80:ab:71:48:02:1f:2d:c1:1b:fb:55:
         e9:9b:77:8d:0f:1c:76:94:0f:73:58:66:0e:28:6d:9b:2c:86:
         48:60:b5:ee:c1:0c:07:ae:17:d6:e9:6d:b5:20:1c:f2:f0:54:
         ae:26:02:4e:bd:28:d4:0f:0f:44:37:39:4c:07:11:52:cf:2a:
         9a:67:70:6d:df:2b:6d:37:99:19:39:3b:82:8a:67:7f:12:d9:
         a7:22:51:1a:55:70:bf:76:1f:62:77:ee:b7:82:36:88:f3:de:
         a4:5a:62:4e:41:60:29:83:16:c4:22:8a:34:ec:07:f2:07:e6:
         e7:f2:fb:1a:d0:72:f9:9c:b2:6f:54:2b:8a:61:8c:28:d1:65:
         4d:51:0d:d3:1a:bc:ca:22:f1:5d:b6:22:86:08:14:54:79:97:
         cc:aa:7b:7a:72:73:96:5d:75:1f:46:3f:6d:47:85:17:b7:bb:
         38:75:2f:f3
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUOhJH1qOe47TC7Lnne8w3mNdLRdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDRaFw0yNTA0MDMxOTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUY3NDk5RDA4RThEMUVDRUNF
RTczODI3RjcyQUFGRjA2QkM1MzNDODhEN0ZCN0E0OUI5RDhENTM3RjNCMUQyOTZG
NDlFMkQ5RkMxRTcyN0VCN0JEQkE4NzY3QjI2MEM0QzAzQzZENDcwNDAwRkQ2OUZG
MzI5NDM0RkMyOTcyMUQ3ODAzMkQ3QjkxN0UwQTIyNzc0QjNCMjM1ODBBNjlFRjUx
MEQzNzg1NjU2RkIwNzUyMDY3QzU5OUQ5QzUzQ0Q0REMyMTM5QkUwQUYzQkJFRUM1
QzQ4ODg4RTc1NDAzMjI3QTFCMTM1QjJGRUJGRkFFMENBQUFDNUIwQUFFMjg4N0FD
N0JFNERDOUVEMkRGQUFDNkVDQ0I3RDNDNkY1NTMwM0MxNkE4QTI1RTUwMDNENEFC
QkU1NEIyMDg3Rjk0MkI4MDM1MEEzQ0RFRTUyOEM5MjJGNUIxODI2NzExQUVEMENB
MkUxRDI0ODM0NTcxMEU3M0U0MDNCRjAwRkIxM0Y1NTY1NEQ3NkIwNTA2Q0YzRDZC
MTBEMTNFODVGN0JEQjg5QUE0RDk2N0M1MjZGN0JEMkFEMDdFM0U3NTFEQ0EzRTU4
NThCQjlGMDZBQjcyOUQ3MEY1NDQ5ODQ3QUVCRjlCQzdBRDIyNDZFMUYwMEUyQzlB
NEE3NkJFN0I4RUMwRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn3SZ0I6NHs7O5zgn9yqv8GvFM8iNf7ekm52NU387HSlvSeLZ/B5y
fre9uodnsmDEwDxtRwQA/Wn/MpQ0/ClyHXgDLXuRfgoid0s7I1gKae9RDTeFZW+w
dSBnxZnZxTzU3CE5vgrzu+7FxIiI51QDInobE1sv6/+uDKqsWwquKIese+TcntLf
qsbsy308b1UwPBaool5QA9SrvlSyCH+UK4A1Cjze5SjJIvWxgmcRrtDKLh0kg0Vx
DnPkA78A+xP1VlTXawUGzz1rENE+hfe9uJqk2WfFJve9KtB+PnUdyj5YWLufBqty
nXD1RJhHrr+bx60iRuHwDiyaSna+e47A+QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FNOV9AFJR3zg75XFkUYJJiFQEoGSMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczNzJlMzEzMjM0MmUzMTM3
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGxfKowDQYJKoZIhvcNAQELBQADggEBABGelVbvTTV6rM0grce5Ryd0OYV4z+Im
1C8NpnP3fOIElVAeRiN4JkB/C6SH/1zw+NO+o5BdSkN8bn1OgCaBgrTrg9nvOhN1
yhFivuwULnWAq3FIAh8twRv7Vembd40PHHaUD3NYZg4obZsshkhgte7BDAeuF9bp
bbUgHPLwVK4mAk69KNQPD0Q3OUwHEVLPKppncG3fK203mRk5O4KKZ38S2aciURpV
cL92H2J37reCNojz3qRaYk5BYCmDFsQiijTsB/IH5ufy+xrQcvmcsm9UK4phjCjR
ZU1RDdMavMoi8V22IoYIFFR5l8yqe3pyc5ZddR9GP21HhRe3uzh1L/M=
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org