Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32322d3232203d3e20323632343934.roa
File:                     3137372e36362e3131322e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          UjyyKDuMWAzrqff0VdWoovbyeK35uUdJPPIOKdIXad8=
Subject key identifier:   8A:18:72:CA:6B:89:FF:C9:35:16:1D:89:E5:CF:29:F6:4E:6F:32:34
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       71598C1591F5C3D41EDC73D2FCA78C8A2AB8CA44
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        177.66.112.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:59:8c:15:91:f5:c3:d4:1e:dc:73:d2:fc:a7:8c:8a:2a:b8:ca:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:bb:29:98:47:04:c9:56:69:4a:74:2c:c1:
                    a8:e6:3c:e2:e6:7f:ef:87:db:e0:3a:6a:18:40:c5:
                    ee:07:bb:8c:99:ef:94:8a:6f:93:fd:19:ae:65:02:
                    d4:11:da:43:f3:30:d3:d3:0a:4a:49:b1:d7:ef:9d:
                    f0:77:86:c6:e2:08:f7:04:15:c5:5a:a4:01:19:16:
                    59:8b:ef:15:fd:b1:c7:cb:76:39:7e:9d:0c:c3:e6:
                    e1:98:c4:56:7b:2a:d0:81:63:06:b2:c5:2d:c8:53:
                    16:99:5d:5d:4c:28:6b:f4:19:2b:09:68:7e:7e:38:
                    f2:bb:ff:82:8c:8c:23:1c:c2:89:ac:fd:55:b1:e5:
                    9c:b2:00:d5:89:a9:4e:ca:f1:ef:4b:87:cb:53:39:
                    3f:7f:25:5b:0e:ec:12:c1:99:8a:d2:7c:31:f1:8c:
                    07:cd:69:3c:e0:52:d3:e8:1a:46:04:5f:f6:d3:6b:
                    78:4b:7d:0d:ba:7c:36:a9:60:08:93:0e:42:ee:98:
                    40:fb:04:e0:68:f6:28:42:e0:1f:09:11:30:75:c3:
                    a3:44:eb:79:c2:6d:49:28:8a:54:d8:a2:26:f2:73:
                    f6:a0:b0:66:04:e0:25:51:8e:a6:4f:71:30:f3:f0:
                    ce:01:64:0a:d0:bb:ab:4a:b0:80:df:b4:0f:fa:91:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:18:72:CA:6B:89:FF:C9:35:16:1D:89:E5:CF:29:F6:4E:6F:32:34
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:e8:14:e5:da:db:0f:08:01:f7:61:26:dd:a9:08:a6:28:98:
         06:e8:54:c0:3e:97:42:f9:1d:3d:15:c7:9a:8a:91:a6:37:e7:
         de:51:87:d1:e8:05:69:01:1b:58:27:f0:da:c8:27:a9:99:55:
         e5:65:cb:cb:b8:9e:42:aa:e8:dd:a0:58:60:f5:43:9f:c6:29:
         bc:24:87:d9:3c:73:86:3d:d7:c6:1a:a2:ff:15:a3:06:33:77:
         22:42:2b:eb:00:00:cd:ef:98:a8:37:b3:ee:f5:9f:92:ea:bc:
         c5:f5:01:1f:da:35:98:05:8e:69:b2:72:04:de:e8:39:03:ba:
         94:4f:22:09:de:ab:e2:c7:20:21:20:f8:50:b8:03:4f:74:f0:
         38:16:aa:a3:ca:f4:20:1a:01:b1:cd:c1:9a:f8:03:71:26:2c:
         23:1e:82:d3:e4:68:c5:ac:ae:3a:fc:4f:13:db:3d:08:06:49:
         bb:a6:fc:c8:5d:57:ea:66:a6:a0:78:28:38:68:23:0c:f5:52:
         1d:2a:42:67:f4:d6:57:82:11:75:2d:6f:d6:a5:18:a2:e5:6c:
         84:11:ff:f6:f9:d5:81:32:03:0f:45:da:6e:0f:63:31:4a:aa:
         c2:03:82:9b:ce:b3:5a:bd:34:7f:c7:dd:86:b4:ef:a3:cc:79:
         fa:76:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org