Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          YApPc+P6Mr7tFL2SeG+EviILBo6EFR3GSevsdTlzxwI=
Subject key identifier:   B0:0D:DE:D9:71:EF:57:3F:02:A8:E3:25:4F:00:4F:70:F0:47:20:C1
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       185D9AB24AAB7E5FF31F44E6F1A446334E112102
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        177.129.63.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:9a:b2:4a:ab:7e:5f:f3:1f:44:e6:f1:a4:46:33:4e:11:21:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject: CN=3082010A0282010100C265CBCC6AB5ADD5286909FA97AB244C58AD570CD5D93764413A2FD658CCB356876821DA49905ED09B230BA0496C6C250BE376E205439528AC77C9560B6499CB45FF600F7CE2F2D9EEFEFB8945EE9132E8434F8B63F7F214FB0958BE6E2CD0AD0C44638C2962E09D49C25C5CC0219E18AE7AF381A94595F71EE577C1DDE2D88239D366EF64D184FF1CDEC9F015EC3D5885531D07F935929927BBCFF0D990B4888A3442E5E999C9412067458204F907E6DB7C0696250F8097AE34C581ACD60CBE68630BCF854DE13592569EFCA85B17208D8C719625C10F85E94038D54BBF8FBDAE8BD7994AC05BC560CA4F9F93104AD36C5B296D72A5B0504E6DCE9F5D2884690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:cb:cc:6a:b5:ad:d5:28:69:09:fa:97:ab:
                    24:4c:58:ad:57:0c:d5:d9:37:64:41:3a:2f:d6:58:
                    cc:b3:56:87:68:21:da:49:90:5e:d0:9b:23:0b:a0:
                    49:6c:6c:25:0b:e3:76:e2:05:43:95:28:ac:77:c9:
                    56:0b:64:99:cb:45:ff:60:0f:7c:e2:f2:d9:ee:fe:
                    fb:89:45:ee:91:32:e8:43:4f:8b:63:f7:f2:14:fb:
                    09:58:be:6e:2c:d0:ad:0c:44:63:8c:29:62:e0:9d:
                    49:c2:5c:5c:c0:21:9e:18:ae:7a:f3:81:a9:45:95:
                    f7:1e:e5:77:c1:dd:e2:d8:82:39:d3:66:ef:64:d1:
                    84:ff:1c:de:c9:f0:15:ec:3d:58:85:53:1d:07:f9:
                    35:92:99:27:bb:cf:f0:d9:90:b4:88:8a:34:42:e5:
                    e9:99:c9:41:20:67:45:82:04:f9:07:e6:db:7c:06:
                    96:25:0f:80:97:ae:34:c5:81:ac:d6:0c:be:68:63:
                    0b:cf:85:4d:e1:35:92:56:9e:fc:a8:5b:17:20:8d:
                    8c:71:96:25:c1:0f:85:e9:40:38:d5:4b:bf:8f:bd:
                    ae:8b:d7:99:4a:c0:5b:c5:60:ca:4f:9f:93:10:4a:
                    d3:6c:5b:29:6d:72:a5:b0:50:4e:6d:ce:9f:5d:28:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:DE:D9:71:EF:57:3F:02:A8:E3:25:4F:00:4F:70:F0:47:20:C1
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:77:bb:4e:97:b3:54:7b:93:da:f0:29:0e:e9:65:81:e5:
         c0:4e:56:4e:f8:09:bd:23:fa:13:d8:65:40:9d:a6:98:94:0d:
         f4:36:e3:87:a1:d4:5f:c3:34:b9:23:bb:9f:34:2b:8a:e5:34:
         fb:df:3e:73:cd:5f:48:1f:75:e1:da:7a:61:b5:18:53:c9:72:
         11:c0:8c:41:6b:c3:2f:59:18:08:a6:1c:b9:03:82:f5:62:41:
         e2:c4:52:c1:aa:12:b0:4e:16:c7:35:99:08:b6:6e:aa:24:3d:
         d7:01:4e:60:84:d4:45:b9:9c:56:6b:6d:0c:e9:3a:7b:66:bd:
         c6:ba:f8:f5:73:0e:e3:ba:7d:77:c6:a7:0e:38:0c:f1:7b:41:
         4b:c7:85:03:cd:18:e4:82:3f:bd:f4:19:7b:a8:46:3f:2b:65:
         b8:ad:ac:9d:2f:c3:c8:0e:6f:14:6b:d9:4c:d9:0e:b8:fb:c9:
         31:21:84:7d:13:2f:ba:87:e7:d6:a7:87:ca:65:5d:74:e8:f1:
         4c:ff:09:97:52:58:c7:17:c1:f6:e4:ad:65:20:aa:67:04:b7:
         26:d6:7d:02:d4:55:67:eb:6d:5b:5a:e4:06:f6:f2:bf:dc:72:
         19:38:4a:01:07:87:2c:88:78:4f:a4:ae:8d:b1:5b:2e:a3:3e:
         81:93:72:9c
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUGF2askqrfl/zH0Tm8aRGM04RIQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDlaFw0yNTA0MDMxOTAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI2NUNCQ0M2QUI1QURENTI4
NjkwOUZBOTdBQjI0NEM1OEFENTcwQ0Q1RDkzNzY0NDEzQTJGRDY1OENDQjM1Njg3
NjgyMURBNDk5MDVFRDA5QjIzMEJBMDQ5NkM2QzI1MEJFMzc2RTIwNTQzOTUyOEFD
NzdDOTU2MEI2NDk5Q0I0NUZGNjAwRjdDRTJGMkQ5RUVGRUZCODk0NUVFOTEzMkU4
NDM0RjhCNjNGN0YyMTRGQjA5NThCRTZFMkNEMEFEMEM0NDYzOEMyOTYyRTA5RDQ5
QzI1QzVDQzAyMTlFMThBRTdBRjM4MUE5NDU5NUY3MUVFNTc3QzFEREUyRDg4MjM5
RDM2NkVGNjREMTg0RkYxQ0RFQzlGMDE1RUMzRDU4ODU1MzFEMDdGOTM1OTI5OTI3
QkJDRkYwRDk5MEI0ODg4QTM0NDJFNUU5OTlDOTQxMjA2NzQ1ODIwNEY5MDdFNkRC
N0MwNjk2MjUwRjgwOTdBRTM0QzU4MUFDRDYwQ0JFNjg2MzBCQ0Y4NTRERTEzNTky
NTY5RUZDQTg1QjE3MjA4RDhDNzE5NjI1QzEwRjg1RTk0MDM4RDU0QkJGOEZCREFF
OEJENzk5NEFDMDVCQzU2MENBNEY5RjkzMTA0QUQzNkM1QjI5NkQ3MkE1QjA1MDRF
NkRDRTlGNUQyODg0NjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwmXLzGq1rdUoaQn6l6skTFitVwzV2TdkQTov1ljMs1aHaCHaSZBe
0JsjC6BJbGwlC+N24gVDlSisd8lWC2SZy0X/YA984vLZ7v77iUXukTLoQ0+LY/fy
FPsJWL5uLNCtDERjjCli4J1JwlxcwCGeGK5684GpRZX3HuV3wd3i2II502bvZNGE
/xzeyfAV7D1YhVMdB/k1kpknu8/w2ZC0iIo0QuXpmclBIGdFggT5B+bbfAaWJQ+A
l640xYGs1gy+aGMLz4VN4TWSVp78qFsXII2McZYlwQ+F6UA41Uu/j72ui9eZSsBb
xWDKT5+TEErTbFspbXKlsFBObc6fXSiEaQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLAN3tlx71c/AqjjJU8AT3DwRyDBMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczNzJlMzEzMjM5MmUzNjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sYE/MA0GCSqGSIb3DQEBCwUAA4IBAQADqXe7TpezVHuT2vApDullgeXATlZO+Am9
I/oT2GVAnaaYlA30NuOHodRfwzS5I7ufNCuK5TT73z5zzV9IH3Xh2nphtRhTyXIR
wIxBa8MvWRgIphy5A4L1YkHixFLBqhKwThbHNZkItm6qJD3XAU5ghNRFuZxWa20M
6Tp7Zr3Guvj1cw7jun13xqcOOAzxe0FLx4UDzRjkgj+99Bl7qEY/K2W4raydL8PI
Dm8Ua9lM2Q64+8kxIYR9Ey+6h+fWp4fKZV106PFM/wmXUljHF8H25K1lIKpnBLcm
1n0C1FVn621bWuQG9vK/3HIZOEoBB4csiHhPpK6NsVsuoz6Bk3Kc
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org