Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          A3s3HnabFVE+LgtGiKdBez31gk8Me830mFMX2Xnbprc=
Subject key identifier:   2F:04:E0:D4:CA:CD:63:B6:EB:B4:21:B3:58:63:0A:94:18:D8:67:2D
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2811772637E2B787FE38E2C03EF332F51B3FA558
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        177.129.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:11:77:26:37:e2:b7:87:fe:38:e2:c0:3e:f3:32:f5:1b:3f:a5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:a4:61:c9:bb:ba:8c:69:8c:c0:6f:9e:eb:
                    65:5c:1e:45:33:c0:e2:62:2f:88:e9:73:5a:36:cc:
                    f2:a9:65:1b:4f:68:aa:53:b2:37:3b:1d:59:40:d1:
                    68:3d:e1:53:7e:41:d8:5d:d2:ec:61:64:b2:76:75:
                    e5:f7:94:3a:c7:4a:c1:30:5f:9d:d5:1c:1a:88:db:
                    65:ac:c0:03:89:6b:0a:58:6f:fe:fb:49:a7:99:db:
                    b9:ba:1b:77:32:6a:66:24:54:0b:16:36:ba:f2:12:
                    7b:54:47:ae:9c:9e:1d:9e:b3:69:bf:ff:0d:8e:c8:
                    51:55:37:ed:e4:35:a0:7c:f3:5d:d1:dd:b8:0d:f6:
                    f9:45:8d:d5:c3:1b:2a:26:5d:b2:53:c0:1e:1b:c1:
                    e3:d3:b0:1e:ca:11:9d:f4:bf:68:ce:26:d4:c5:65:
                    b2:32:30:ac:d8:c2:49:00:be:c8:fe:0a:d6:c5:a7:
                    e3:9a:9d:54:c6:7d:ad:c4:10:64:be:de:1b:30:b1:
                    f4:cd:60:88:d7:16:e0:8c:46:3e:e4:5d:d1:4e:05:
                    6f:86:8d:62:74:64:6e:c0:17:15:d7:c4:3b:70:fa:
                    6a:4d:f5:44:f5:76:37:eb:fe:45:f6:2d:78:40:cd:
                    b9:ec:de:c9:6c:5f:4b:42:01:8e:6e:9e:7b:e0:59:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:E0:D4:CA:CD:63:B6:EB:B4:21:B3:58:63:0A:94:18:D8:67:2D
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:87:6b:19:8e:95:82:33:36:f5:40:0f:09:25:61:1c:a6:dd:
         53:74:11:10:33:09:83:42:1f:d9:c0:da:e0:8c:6b:fb:25:75:
         10:cc:e1:8d:52:6a:d4:ed:32:80:98:9c:0c:4a:52:00:45:85:
         82:ec:bd:a5:7f:40:09:ed:4d:b2:73:a6:6a:08:47:e1:f1:b8:
         bb:88:f3:a0:e3:ef:b9:55:9b:e5:4d:32:ed:27:66:97:6d:3a:
         0f:aa:a7:d6:ab:68:09:8f:8d:fd:60:47:26:d8:f1:51:40:78:
         a9:e5:de:c1:20:9d:88:64:07:c0:13:07:f2:42:61:ce:cf:2a:
         19:59:e8:c5:fa:e2:c1:51:4b:7b:53:4d:a0:72:9b:75:3f:13:
         15:01:5e:ea:f2:20:03:d0:bc:9c:e1:72:ac:35:e5:d4:4c:4a:
         fa:3f:0c:66:d1:97:04:e5:dc:05:f0:bb:b7:29:b4:ac:df:76:
         c4:a9:c1:61:6e:f2:5a:14:bc:58:6b:67:34:65:c7:e5:04:80:
         cd:61:3d:69:4d:e1:d1:ba:e8:17:de:cd:8f:85:27:82:f4:f5:
         e8:bd:7c:b0:f8:30:49:15:5d:98:12:33:53:21:d7:37:ee:a2:
         f1:c2:9e:1f:01:64:07:ad:81:02:a1:c1:a6:1b:0e:fb:a2:1d:
         36:b8:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org