Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36322e302f32332d3233203d3e20323632343934.roa
File:                     3137372e3132392e36322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          S0NUVvl+0oGysv/cZSf60y9BYVvLyXEDOsqy6Qg9H6U=
Subject key identifier:   E7:14:61:E3:B6:4E:AA:7F:C1:EC:6B:CB:13:DB:50:3F:78:BB:27:B1
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5D05EE9349EB767370C9AFACA1EF7B67BF99CA5C
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36322e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        177.129.62.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:05:ee:93:49:eb:76:73:70:c9:af:ac:a1:ef:7b:67:bf:99:ca:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject: CN=3082010A0282010100AB367E0848FB132BF034CF5EA9D80966310B7C6C5EC8C5AB1F10F7D3FAE141B4F315D3FF9AD060A841DAF09BC5DD8F56E8A93A30DB8399BA738B09A82155620302D70F8B8AC8A1B8315061B1B81EBAFCED6A63A617EC8B7778AD1802D63C7D45BEF1B0DC6876B785432AE83E6BE449DF78A2B6850BA89639B0D5B2B6BA924F5016848D4A3BD70B80F2354F1DA40A8091CE0FF6F2CEBD17618CD39ADB20FD4B2D8A91DEAB8832AAAA63630C2D7321BEED023826C9E4D977C51833B7E242E8E48A8BDFA2A8E7597D49CF04821F08C58D48DC959C80DC55B5531A3584B1A5A6C6A0C8BF5D0EB3AD1A5CFCD379805994471B6314F749A1DC00BAEE0E55EA4CFAF6F90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:7e:08:48:fb:13:2b:f0:34:cf:5e:a9:d8:
                    09:66:31:0b:7c:6c:5e:c8:c5:ab:1f:10:f7:d3:fa:
                    e1:41:b4:f3:15:d3:ff:9a:d0:60:a8:41:da:f0:9b:
                    c5:dd:8f:56:e8:a9:3a:30:db:83:99:ba:73:8b:09:
                    a8:21:55:62:03:02:d7:0f:8b:8a:c8:a1:b8:31:50:
                    61:b1:b8:1e:ba:fc:ed:6a:63:a6:17:ec:8b:77:78:
                    ad:18:02:d6:3c:7d:45:be:f1:b0:dc:68:76:b7:85:
                    43:2a:e8:3e:6b:e4:49:df:78:a2:b6:85:0b:a8:96:
                    39:b0:d5:b2:b6:ba:92:4f:50:16:84:8d:4a:3b:d7:
                    0b:80:f2:35:4f:1d:a4:0a:80:91:ce:0f:f6:f2:ce:
                    bd:17:61:8c:d3:9a:db:20:fd:4b:2d:8a:91:de:ab:
                    88:32:aa:aa:63:63:0c:2d:73:21:be:ed:02:38:26:
                    c9:e4:d9:77:c5:18:33:b7:e2:42:e8:e4:8a:8b:df:
                    a2:a8:e7:59:7d:49:cf:04:82:1f:08:c5:8d:48:dc:
                    95:9c:80:dc:55:b5:53:1a:35:84:b1:a5:a6:c6:a0:
                    c8:bf:5d:0e:b3:ad:1a:5c:fc:d3:79:80:59:94:47:
                    1b:63:14:f7:49:a1:dc:00:ba:ee:0e:55:ea:4c:fa:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:14:61:E3:B6:4E:AA:7F:C1:EC:6B:CB:13:DB:50:3F:78:BB:27:B1
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:39:de:7c:95:9f:87:5f:b2:9a:eb:d5:ed:ce:bf:c9:92:
         f0:b6:84:8c:b8:15:d5:73:0b:92:d3:4f:94:c4:6e:a8:a2:8d:
         d0:25:7e:88:10:fc:f2:2a:77:9e:cd:05:95:2f:f5:42:47:71:
         b4:04:4f:df:53:59:e1:8a:0f:e5:bb:d6:23:95:f7:9c:55:c3:
         15:2c:72:e0:99:e3:9d:52:a8:5b:11:dd:d7:78:91:5c:27:a8:
         34:2d:c8:8a:a5:45:c2:d5:0f:b2:ff:50:81:31:ff:86:0d:46:
         43:5c:ae:51:f6:98:98:a5:bd:d8:2a:bd:c0:bb:a3:d7:2b:7a:
         ed:9d:68:b2:1a:c7:e5:ae:7f:94:c0:b8:5f:a5:f1:e7:86:9c:
         df:bb:39:3c:07:b8:de:3a:d4:7f:9b:29:98:23:70:28:7b:68:
         06:2f:c0:35:aa:8a:15:c4:74:60:5a:43:8e:68:03:d4:a0:15:
         d1:f0:fd:92:9e:98:15:c9:74:18:ee:45:d5:28:44:05:41:89:
         c4:4c:f6:d5:80:3f:87:5e:00:de:7b:02:39:8d:a6:f0:d0:23:
         6c:57:8c:fa:1d:7d:a0:18:d2:4a:8c:51:e4:0c:32:9c:1d:90:
         9a:7d:e8:ea:3a:58:1a:d3:97:19:d5:1d:17:24:a1:68:61:e4:
         67:18:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org