Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          DGz4oawipDS8WyOJCpaK6S1gc0FNhqqFirXvkdUabz0=
Subject key identifier:   EE:83:EA:FB:6D:52:92:BC:02:9B:D3:3C:EE:22:DA:78:3B:D0:19:52
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       15CC57A85337D5EC3890EBFCC127ECE425B2FB9F
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        177.129.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cc:57:a8:53:37:d5:ec:38:90:eb:fc:c1:27:ec:e4:25:b2:fb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject: CN=3082010A0282010100A5232EAB29A8E60AD8627D7F0EBD428848332C31B162CF68F06355E027AA04542F0BB320C27FA600FA07488D31E5FBF21B6FA0277BA50CC165AA884BE9F05EEA1EB329769390E8866B5C51A4D947A013A2474D9C1F9028C6ED78069E3515F50786B8748F2EB0FDC4A4E112E3DA97C0E14F8D83418201F298C963A3AE5E238B1F430C2FD428CD43ABC22FFCABD2223651043B0AB62A0C77C1322911A4AA5543FE38CA0D97B94FEE81A73EAAD1927D872873CD79B620607DE9DBF8B60D6BE7F64FCD907F51F1116C088F0BBE2BB169D30B639B73FF288DEE8177442AA0D3ADA6C8FF2ADEF83DD885F01DFD071756F7DBC0DDEB05C6781F97FA983449A93CE91D470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:2e:ab:29:a8:e6:0a:d8:62:7d:7f:0e:bd:
                    42:88:48:33:2c:31:b1:62:cf:68:f0:63:55:e0:27:
                    aa:04:54:2f:0b:b3:20:c2:7f:a6:00:fa:07:48:8d:
                    31:e5:fb:f2:1b:6f:a0:27:7b:a5:0c:c1:65:aa:88:
                    4b:e9:f0:5e:ea:1e:b3:29:76:93:90:e8:86:6b:5c:
                    51:a4:d9:47:a0:13:a2:47:4d:9c:1f:90:28:c6:ed:
                    78:06:9e:35:15:f5:07:86:b8:74:8f:2e:b0:fd:c4:
                    a4:e1:12:e3:da:97:c0:e1:4f:8d:83:41:82:01:f2:
                    98:c9:63:a3:ae:5e:23:8b:1f:43:0c:2f:d4:28:cd:
                    43:ab:c2:2f:fc:ab:d2:22:36:51:04:3b:0a:b6:2a:
                    0c:77:c1:32:29:11:a4:aa:55:43:fe:38:ca:0d:97:
                    b9:4f:ee:81:a7:3e:aa:d1:92:7d:87:28:73:cd:79:
                    b6:20:60:7d:e9:db:f8:b6:0d:6b:e7:f6:4f:cd:90:
                    7f:51:f1:11:6c:08:8f:0b:be:2b:b1:69:d3:0b:63:
                    9b:73:ff:28:8d:ee:81:77:44:2a:a0:d3:ad:a6:c8:
                    ff:2a:de:f8:3d:d8:85:f0:1d:fd:07:17:56:f7:db:
                    c0:dd:eb:05:c6:78:1f:97:fa:98:34:49:a9:3c:e9:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:EA:FB:6D:52:92:BC:02:9B:D3:3C:EE:22:DA:78:3B:D0:19:52
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:10:88:93:ef:13:3d:9c:92:00:f8:8a:cd:5b:18:a3:77:
         e6:c7:a6:78:5e:f9:65:97:63:48:05:2f:fd:ee:2c:e8:bd:d8:
         07:ef:2c:c4:97:41:cf:ac:6c:4e:7c:e5:58:a4:d7:d7:b1:13:
         87:c5:25:d0:0d:33:5a:bd:be:37:34:25:74:61:59:03:a8:89:
         e5:e1:19:b2:f8:39:65:09:a7:b0:a9:a2:a3:01:43:84:35:5c:
         30:20:f7:55:ea:d4:ec:50:c9:e9:7b:15:4f:e6:1e:96:3d:5a:
         5d:2e:c1:fe:c3:d9:77:21:f4:15:14:85:2d:46:e4:26:df:b4:
         07:67:e2:ce:4c:61:5d:2f:26:10:d7:51:06:76:79:60:02:f9:
         cc:a6:ca:4c:dc:fc:a6:98:89:d2:09:d7:80:f4:a8:95:35:a8:
         1e:05:1a:76:ec:be:73:b7:f9:6f:03:e6:9b:27:0a:01:e0:e2:
         fb:a6:87:83:80:fe:1c:a5:28:e7:bc:db:bd:0d:8b:7c:61:61:
         b0:e7:e8:87:45:ec:25:b3:f5:8e:6a:2a:e1:a0:a8:d9:d9:48:
         09:66:db:f2:4f:a5:eb:c2:a9:6a:0e:5f:14:46:d9:f0:64:35:
         12:53:a3:c2:cb:20:17:b4:9e:53:d0:3e:06:58:37:50:f9:c6:
         31:15:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org