Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa
File:                     3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa (raw, json)
Hash identifier:          K33WUDFSJHCxE7Y7+syw+t+roWwXm9vy0nnUW7KSiiA=
Subject key identifier:   58:EB:C3:A1:07:F0:4A:80:10:80:38:90:5C:D2:88:E1:09:7F:91:A6
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2E358253AAC585131B54BD1C1ECD92A97CFCD2A8
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     242494
IP address blocks:        177.129.60.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:35:82:53:aa:c5:85:13:1b:54:bd:1c:1e:cd:92:a9:7c:fc:d2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:db:77:1c:2c:9b:42:f4:1a:ac:a9:91:e2:
                    3b:85:b0:6c:b2:e4:44:7c:91:83:ce:af:27:a9:4b:
                    d3:1b:07:af:97:6d:8f:e3:64:ea:7b:f9:5d:f6:ab:
                    e9:d1:46:6f:b2:04:09:fb:62:cf:7e:3d:0e:78:de:
                    20:92:2f:20:8c:e9:41:3e:e3:bd:0f:90:d9:0f:b6:
                    bf:82:7b:37:b9:47:67:26:ee:d1:0a:9e:ca:b2:37:
                    1f:7a:05:e7:56:2e:cf:6e:0e:b8:02:df:d3:33:30:
                    21:ba:9f:53:6a:d4:15:2e:bc:1b:12:2d:62:de:0b:
                    64:97:ce:63:96:66:66:1d:a6:ba:22:24:27:3d:f4:
                    7d:f5:25:cb:95:9a:84:21:0a:cc:c2:fa:fd:72:61:
                    10:a2:67:21:ae:8b:6d:b3:18:8f:a0:01:02:29:4c:
                    aa:df:cf:da:30:bd:fe:b3:12:c2:d1:ae:8d:e3:99:
                    df:4a:3e:64:64:6c:6a:08:06:81:3f:39:bc:d4:af:
                    3a:fa:b2:26:55:0b:91:c5:a3:1c:44:37:58:d1:69:
                    b7:97:28:14:24:34:4e:24:87:8d:ef:23:07:16:86:
                    73:8d:10:77:49:6d:d0:f4:7d:31:79:94:d5:57:2b:
                    81:69:bc:4e:9b:be:04:00:2b:f5:1c:17:7b:78:31:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:C3:A1:07:F0:4A:80:10:80:38:90:5C:D2:88:E1:09:7F:91:A6
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:02:b0:62:8f:87:cb:af:ed:dd:f5:82:6c:68:8a:f4:a9:
         ea:93:a4:ca:70:5a:a6:2d:16:5e:6f:9b:c5:2f:c6:16:74:95:
         db:f2:96:e7:a3:45:fa:37:f8:c7:83:83:7d:8f:3e:16:e1:6d:
         37:82:b3:5a:20:3f:45:87:75:64:60:8c:0b:6f:95:f3:5e:8d:
         d4:2a:33:b4:c5:d5:3b:07:cc:70:a2:c0:6e:87:86:ca:74:6d:
         40:22:08:19:15:1f:d6:81:71:eb:2b:8a:a2:f1:2e:45:d3:3c:
         cd:39:52:9a:4e:90:a5:4f:01:e8:cc:b3:c0:94:b4:cd:d8:67:
         39:ca:36:61:ee:17:5c:99:37:ea:56:cc:f3:f0:c0:04:8c:05:
         60:12:bb:fc:b2:63:a1:1f:82:2b:50:9d:30:aa:19:a4:69:98:
         48:b7:d8:94:89:0c:6c:d5:d0:6e:76:29:c8:d5:df:7d:2a:e5:
         71:a5:1b:8d:0c:ce:b1:ff:de:99:a8:f9:e4:09:9d:4c:a2:16:
         42:2a:f5:ac:e6:a9:d9:b2:e4:48:f7:9e:1d:d1:3c:2c:95:3a:
         b7:22:82:c3:b6:a7:2f:a1:e9:1a:7f:a3:81:62:14:0c:de:4f:
         c4:8e:31:28:1f:4e:ba:aa:40:63:68:ff:37:85:6a:bb:41:70:
         7a:a7:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org