Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          UZLiJnY2vb8jQCjYdEyJqGFRoYD+LljKk6cG5Vf1eTk=
Subject key identifier:   21:70:AE:E6:64:5A:4D:09:9B:35:4F:0B:6B:08:B7:F2:F4:36:E5:2E
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       3C85A1CEA61793E401485A70837792E9970288A5
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        177.129.60.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:85:a1:ce:a6:17:93:e4:01:48:5a:70:83:77:92:e9:97:02:88:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:e3:63:64:e8:f9:c2:44:65:8e:23:5d:f7:
                    f7:82:d7:f8:e9:1d:ff:51:89:72:d5:c2:55:42:c3:
                    7e:57:8b:58:7b:b2:32:4a:f5:ab:29:b1:6a:46:a7:
                    da:59:41:77:a3:b6:f9:f4:fa:6a:ab:e0:f8:59:89:
                    8e:f7:b1:77:cd:37:c3:45:7f:dd:0e:39:93:06:d4:
                    2d:ba:a6:75:b5:fb:38:60:3d:f7:44:95:1f:8e:bf:
                    01:65:f5:a7:21:10:4a:11:0f:0c:ea:28:3c:f6:3c:
                    05:a3:28:2d:90:9b:2d:38:13:79:7a:7e:11:52:ef:
                    d1:92:99:f0:2c:28:98:fc:bc:70:cd:d5:6d:ae:53:
                    87:32:18:b0:ba:06:18:e5:67:fa:0a:fd:1f:5e:10:
                    48:ac:cb:08:43:93:ce:7e:d4:da:91:1f:b9:da:b6:
                    97:eb:ed:2f:82:78:11:c9:01:e8:15:7e:b5:3e:05:
                    2e:c8:3b:05:03:91:8c:59:8b:9f:9a:f1:bb:98:07:
                    8a:21:8c:f5:bd:d9:b0:f5:4b:b3:86:e5:c9:ab:a5:
                    0d:86:2c:aa:dc:2e:bb:0c:e7:f7:52:03:a2:c8:25:
                    db:9a:89:4f:c6:8c:fc:dc:6a:5b:da:63:ee:cb:33:
                    73:b2:6f:8b:2c:a9:dd:4d:99:ee:24:4b:6b:ce:35:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:70:AE:E6:64:5A:4D:09:9B:35:4F:0B:6B:08:B7:F2:F4:36:E5:2E
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:a0:5c:d0:44:09:03:c2:66:92:f4:a8:95:19:09:e3:15:5f:
         b1:21:6a:78:62:28:c1:e4:6e:e9:cb:ed:ac:d6:2e:78:e4:93:
         bf:a5:81:33:dc:17:1e:11:b0:eb:ec:ca:9c:d3:b2:c1:c2:d0:
         13:95:98:db:48:7f:74:63:7b:92:1c:37:5a:10:56:64:5e:89:
         43:da:7e:90:80:7a:42:92:de:f6:2e:c5:f7:56:ff:20:4f:0f:
         19:4b:fc:17:d2:a3:32:22:74:f9:0f:3e:f4:74:d9:24:85:24:
         4f:4e:96:e5:6a:39:a5:0d:5b:63:db:2e:a4:ca:c7:21:61:c8:
         ee:19:e1:e9:d2:67:1e:f2:f2:fe:92:87:e4:6e:99:f8:66:3e:
         69:34:e0:9e:7d:af:12:a1:b4:9e:47:0c:66:38:66:5c:42:06:
         86:00:ff:78:12:36:e4:f1:74:97:f9:b1:46:6f:53:ce:a3:1b:
         63:9f:9a:31:79:4c:12:a0:82:d6:ff:13:5b:61:4f:a5:00:51:
         ab:96:33:ea:ca:18:61:3b:2b:17:f5:46:64:5a:e3:d0:87:af:
         58:76:68:97:ed:a7:a2:76:df:4e:89:91:22:ef:53:16:36:60:
         bc:e9:fa:97:e3:d9:1f:5c:e1:92:aa:5a:b5:52:78:0c:6d:75:
         bd:73:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org