Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          fDPthrxEvZCIGT7WwODgttsIWYk+NZblO4qiHRWH5M4=
Subject key identifier:   09:7C:50:A6:C6:C2:57:84:77:DE:9B:5C:6B:81:26:6B:1D:0B:D6:CE
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       516ECA8B40018C0D0611FCC5B0CA6B49C5B0C2BC
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        177.129.61.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6e:ca:8b:40:01:8c:0d:06:11:fc:c5:b0:ca:6b:49:c5:b0:c2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:ca:8b:de:da:d0:aa:4f:f0:87:92:fc:74:
                    5c:c9:1c:de:9d:1d:77:72:e0:de:a4:9b:39:46:a6:
                    6f:c8:79:b5:9b:d7:0c:20:79:f6:f8:75:c2:3e:47:
                    b7:d4:bf:eb:b5:8d:97:9b:af:8c:d4:79:ae:cb:65:
                    b5:22:80:f6:d6:bd:bd:33:04:c1:05:8e:e6:bf:24:
                    75:73:6a:3c:61:5e:6e:ae:8b:60:10:1e:85:61:90:
                    bc:47:0b:27:ff:b6:48:f8:c9:0a:aa:8d:4d:f7:a6:
                    e9:c3:07:28:5d:3b:b6:49:00:3b:e5:99:41:9f:43:
                    0b:14:91:cf:07:f8:cf:3b:f6:41:af:98:4c:2e:06:
                    29:96:ee:e4:e8:80:d6:36:6d:1f:15:bd:b5:1a:b8:
                    8a:14:e8:a7:c8:45:f3:a1:a7:d9:23:64:9d:ef:29:
                    06:35:2a:a5:a4:64:7f:90:8b:23:3d:49:e9:67:f4:
                    b5:be:81:36:66:8f:79:0f:6b:01:79:6f:93:b2:24:
                    67:37:64:ae:43:22:0b:e9:84:d9:67:57:9d:03:fc:
                    32:8b:1c:0e:d8:57:3a:0e:05:33:f0:dd:75:8e:98:
                    67:ec:40:94:5f:18:f3:f8:20:d4:ca:13:bb:ef:d7:
                    90:c3:06:db:b9:f0:be:67:94:b2:6e:5a:fd:cf:b4:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7C:50:A6:C6:C2:57:84:77:DE:9B:5C:6B:81:26:6B:1D:0B:D6:CE
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:43:9f:3a:6b:d9:c3:81:50:60:ce:41:95:c9:c7:bf:d5:fe:
         53:a5:76:9f:bc:f5:ee:bb:d7:a6:4d:35:cc:4f:3a:37:d1:0a:
         36:a5:35:b0:6d:fc:e1:06:4a:90:9a:38:86:d7:b3:96:2a:d0:
         76:5a:0d:47:d6:8a:e7:a2:38:98:fa:4b:56:cf:f7:19:0c:60:
         04:92:55:43:e4:16:60:73:01:7d:0d:85:8c:e3:8c:77:26:2b:
         df:c0:71:0c:20:35:43:d9:e1:20:f1:b8:07:bc:bc:14:9a:e6:
         d9:03:9c:46:6a:2a:0d:3e:bf:62:35:2c:81:d1:d4:4a:d2:92:
         06:6b:6a:82:df:bc:10:5c:67:3f:65:e0:20:f9:ea:59:15:a9:
         f7:f0:e1:4d:1d:1e:72:db:ad:1a:71:57:6a:c2:76:de:da:8d:
         ed:69:40:15:52:90:7c:8e:39:54:e6:34:a6:9f:52:a2:a5:aa:
         32:52:c8:c0:16:7b:95:7d:59:96:23:81:66:84:89:25:75:da:
         0e:97:8e:20:6d:df:7f:f9:4e:44:c0:8b:9d:7a:f3:da:08:00:
         6f:e9:3a:87:d1:30:a2:5a:72:ba:bf:23:2d:38:12:06:df:6b:
         81:2f:a8:02:a8:5d:6e:75:df:86:a4:d0:e4:2e:7c:0b:b5:4b:
         de:d7:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org