Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa
File:                     3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa (raw, json)
Hash identifier:          qtLShGZD/5g9V/8mCaQObVrKNPkub4N1bOggAwz5f+k=
Subject key identifier:   EA:02:D7:6D:FC:A1:65:B6:CA:D8:3A:3F:77:82:7D:3D:AA:97:4D:6A
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       52163DD0F5FFAB998CE78B99425C42DA6334B4B0
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        177.66.112.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:16:3d:d0:f5:ff:ab:99:8c:e7:8b:99:42:5c:42:da:63:34:b4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:3a:7c:79:54:e9:e0:40:54:09:66:1a:c1:
                    92:34:5c:b6:92:5d:0b:2b:05:ef:6c:c4:0b:86:83:
                    be:1d:d6:b5:46:5c:cb:b9:26:49:48:a8:0e:3b:07:
                    76:aa:6b:07:8d:06:cc:66:60:23:3c:d7:d2:28:e5:
                    7a:ac:3c:bf:68:05:7b:03:bb:eb:a2:b4:aa:69:83:
                    25:f5:c8:9c:23:63:e6:58:0a:50:ac:d8:57:fd:f4:
                    ab:72:fb:34:24:f4:fc:93:ae:6b:b9:96:ce:fb:a0:
                    51:35:9c:ba:22:93:12:36:79:9e:bf:00:00:8f:fd:
                    27:ae:e2:a8:cf:50:73:9c:0c:e5:6c:b3:04:93:1b:
                    64:78:b8:d2:c3:fe:90:e4:fd:34:fc:e0:ee:ae:60:
                    72:97:d4:bc:aa:d3:41:a6:f7:d2:e7:f6:ec:53:33:
                    2d:d1:18:7c:1c:d2:bb:e3:f5:76:42:50:a4:44:be:
                    04:66:ac:f4:88:7d:4c:37:28:cf:2b:99:de:8c:5c:
                    a7:3e:e0:b1:fb:60:9e:8d:ad:51:37:95:b7:15:8c:
                    e8:40:55:ec:6f:58:7c:b1:f5:c6:d1:d4:c2:f5:95:
                    ee:28:3a:53:e0:d6:82:20:51:50:c7:dd:80:c5:73:
                    a4:dc:c2:b6:d7:fb:28:5f:a3:25:4f:aa:7a:c6:5b:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:02:D7:6D:FC:A1:65:B6:CA:D8:3A:3F:77:82:7D:3D:AA:97:4D:6A
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:f1:71:d0:61:73:95:83:4b:5d:50:43:c0:a2:29:a9:69:
         3c:c1:e4:7f:1c:4a:c3:d4:86:d0:26:03:49:56:f2:e7:85:a6:
         c9:7a:62:2c:80:72:75:11:9e:e7:43:89:86:78:86:76:e0:1f:
         45:07:55:ae:7a:0b:5c:d0:3b:43:dc:c9:b0:d8:26:63:85:07:
         60:ac:ac:d8:f5:d4:d4:15:1e:5c:70:17:44:24:65:6b:72:7b:
         45:b1:b2:ca:54:3e:f7:e8:cf:5b:21:4b:e8:8a:2d:61:db:17:
         9c:74:13:d8:b6:c3:eb:55:73:50:b4:54:0e:9f:3c:47:97:1e:
         57:11:f2:e1:4c:a9:37:f6:a9:b5:a7:70:16:8e:fd:87:cf:d1:
         33:64:de:fb:f3:c1:20:e7:f6:2c:c5:a9:77:f2:59:4c:76:87:
         f8:88:2d:da:0f:d8:2f:0f:35:e3:e6:ce:70:5a:bb:f0:94:f6:
         c1:b7:13:67:e0:ba:71:50:c4:cf:a0:9f:e8:e6:fe:43:2f:71:
         8a:1e:23:a2:a0:eb:d1:a7:ce:78:52:29:4c:58:fb:27:e6:d1:
         87:b2:b9:7e:11:2c:55:54:db:09:1f:60:fd:d9:a8:33:c7:88:
         f9:cc:fb:18:e4:43:b5:c8:29:f2:e3:61:c2:49:e7:99:22:eb:
         f9:3e:33:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org