Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          pOKu6BHGAjRvD3F6Frp9Jaa6GtIGtJiado49FpQaixM=
Subject key identifier:   12:FD:A1:E4:50:AA:34:FE:04:8E:D2:6D:62:3A:5A:19:E3:D3:99:DE
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6E718310D91A899D964722EE0FF15DEEE26E58BB
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        177.129.60.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:71:83:10:d9:1a:89:9d:96:47:22:ee:0f:f1:5d:ee:e2:6e:58:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:31:c9:fd:b1:6b:e3:a2:d1:6b:b7:bc:2c:
                    a2:c7:f0:01:14:e2:a2:23:bf:d2:6d:cf:fc:8b:10:
                    48:ed:0a:d3:18:b4:05:dc:a8:4d:d7:14:93:53:a6:
                    99:49:ae:db:18:d3:41:aa:dd:26:e0:46:d4:c1:42:
                    b4:73:d0:d2:58:7b:bb:91:4a:a8:ac:65:b0:12:f3:
                    55:63:06:fc:06:a1:55:7d:ee:27:8e:9b:b8:f0:15:
                    f0:1d:5b:cb:2f:65:f9:1c:11:fb:62:c4:d2:93:36:
                    fa:ef:e3:5f:b8:8f:c3:8a:71:63:84:9c:41:34:b0:
                    69:09:c9:6d:6f:69:10:6b:00:7a:69:9c:7e:16:db:
                    2a:f7:06:90:19:74:89:71:50:35:00:e5:c5:fd:28:
                    51:e1:a5:dc:6a:ff:2d:9f:61:26:2d:47:98:0d:c0:
                    9b:b5:91:df:fa:22:13:2c:ae:57:ce:d8:83:17:a9:
                    6e:88:d5:a3:63:aa:4f:90:be:3f:cc:96:8d:e0:c1:
                    45:2a:fd:59:0f:5b:de:0c:db:35:9b:ca:d5:86:b3:
                    06:3f:e7:87:c2:60:79:e5:6d:e6:22:50:6c:6a:c5:
                    fc:41:03:5f:c3:a2:28:c2:91:9d:70:71:c6:32:9c:
                    90:7d:c3:bf:14:31:93:d7:53:27:42:59:d1:23:47:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FD:A1:E4:50:AA:34:FE:04:8E:D2:6D:62:3A:5A:19:E3:D3:99:DE
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:42:b8:07:a3:2c:61:6b:e5:9e:55:8d:4b:9f:7f:f8:26:64:
         28:85:63:f0:b0:2f:6a:df:70:d0:b6:f7:f2:8e:27:ca:e0:50:
         b4:24:c4:d1:98:46:a0:07:29:ab:80:49:8e:af:4d:bf:4a:d6:
         7c:0b:6f:8f:c8:87:a5:6c:aa:32:02:7e:d7:9a:2c:8f:70:12:
         1e:53:12:8a:32:2a:cf:e9:1c:b0:09:32:20:3c:60:bd:77:ca:
         2b:dc:76:42:1a:e2:74:24:b9:c6:76:c3:92:97:0b:30:93:26:
         56:9b:cc:2d:1d:bc:db:92:e5:cd:21:a3:35:53:13:c2:66:56:
         a1:7c:46:65:34:0e:bc:22:bf:a3:ff:ce:60:eb:ff:be:83:f0:
         83:9c:0a:93:92:90:88:1f:f9:7e:47:14:3d:98:8d:f9:7a:a9:
         59:53:e6:7d:1a:47:79:4b:15:23:0f:a1:fc:92:36:9d:a0:12:
         1c:37:c5:f2:db:7c:aa:a2:b5:ca:95:8c:53:66:8b:4d:0d:d2:
         2e:c0:81:7f:7c:e8:ac:fe:92:6f:b2:f9:0e:19:14:db:2b:02:
         0c:44:0e:e6:35:a5:b3:4b:3f:14:6d:6c:37:d6:27:80:e0:42:
         31:14:4d:48:bd:e2:12:e0:94:f7:16:1d:80:28:6b:86:3e:f4:
         b1:64:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org