Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          KBL5ltgX+ytueiHcBu83Hs0kMhW/tvpUc7RGLYrX4JE=
Subject key identifier:   E5:BF:0E:03:52:5F:E2:79:9F:84:27:FD:B5:1B:27:23:97:48:36:30
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       64933B27902C73D8C371F4E70D1C47D987904228
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        177.124.171.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:93:3b:27:90:2c:73:d8:c3:71:f4:e7:0d:1c:47:d9:87:90:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:f7:0d:37:49:20:fd:d6:5a:48:30:df:36:
                    59:d2:91:e9:cb:19:00:e1:e8:b7:58:91:09:2f:aa:
                    70:62:eb:b0:a5:cd:81:d9:ca:38:dd:77:bd:de:f6:
                    23:d6:8c:48:50:57:50:15:87:3b:29:a2:02:fa:ae:
                    7b:32:65:95:4a:2c:67:6c:a4:ae:cc:a4:a6:40:6e:
                    62:9d:a1:a6:ba:ce:4c:6d:f8:d4:b8:ef:25:66:d5:
                    02:f3:6b:36:54:48:cf:43:7a:74:28:72:79:a4:83:
                    4f:0c:d0:dc:cd:ab:05:2a:5c:8e:6f:8b:ae:30:bb:
                    43:25:96:56:b3:50:f6:1c:f6:87:0c:aa:5b:e0:2f:
                    55:5a:6d:1f:4a:ee:b7:62:ba:ac:21:87:73:54:f1:
                    e8:53:5c:da:e4:31:d4:bb:53:60:ac:e4:61:bd:7b:
                    46:89:b2:98:1d:0b:19:23:b1:cf:f5:f7:e1:a7:80:
                    1f:f5:4f:d7:da:b2:25:53:27:3d:60:cc:56:c2:16:
                    2a:ef:e7:e1:44:ba:93:e6:40:71:2a:d4:70:a8:74:
                    7c:72:7c:02:8f:f9:39:7a:2f:ff:64:a9:1f:ad:83:
                    eb:2c:fc:f0:3e:99:69:b4:82:8e:dc:28:26:e4:97:
                    d5:e8:68:1d:98:b9:9e:31:b5:64:22:3f:86:2a:d3:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BF:0E:03:52:5F:E2:79:9F:84:27:FD:B5:1B:27:23:97:48:36:30
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:3c:2f:68:23:70:e7:43:77:c5:d9:da:1a:9c:fa:e8:8a:
         1f:91:d9:24:ac:75:18:84:bc:1c:63:1c:6f:0a:e7:86:a3:bb:
         77:9c:ed:bb:b4:81:af:1b:23:c5:60:37:f3:3a:fd:40:2f:fd:
         ab:7f:83:98:39:0c:bf:60:78:f8:ab:2e:df:b6:51:c2:60:0b:
         20:a2:f5:63:cc:b3:03:b8:ed:c4:bb:b8:36:65:15:1d:82:10:
         a9:db:4d:0b:34:b5:fd:5f:ea:b1:5a:82:20:a1:7a:f9:34:98:
         a9:f1:94:9e:0d:66:12:a8:85:5b:a0:ab:6d:08:c8:ac:3f:a1:
         46:cc:18:3b:1a:45:ba:8d:41:fd:f3:92:f2:23:6e:e1:bc:15:
         3f:74:36:e7:0c:73:ea:c5:2e:c4:d8:8c:bd:7f:e4:2a:64:72:
         59:bd:22:d9:d4:d2:93:c6:de:05:28:a2:3f:59:86:c9:9e:a9:
         7b:77:92:2b:7c:d1:0a:c8:ed:6e:fd:ca:b9:ef:b4:18:8e:d6:
         b4:68:55:94:f1:d1:89:12:fa:90:67:59:e8:fb:7c:77:c1:ae:
         31:e3:7e:1b:c9:b5:92:94:9e:a1:d5:df:89:92:ce:c9:6c:27:
         a1:16:6e:5a:94:b4:e7:be:7e:e0:ba:b7:5c:c1:e6:8c:87:fb:
         1f:e9:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org