Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          XtVWL4BzqeJG/BCDZpX5Tu7nMsGr8BLrR5txVqxG0PA=
Subject key identifier:   8B:CB:9D:04:DF:77:5B:00:F1:A2:AD:A9:39:9B:1D:19:67:B2:E3:6A
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5E569608CCB4FD435E8BF544F8D532F68D93E793
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262494
IP address blocks:        177.66.112.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:56:96:08:cc:b4:fd:43:5e:8b:f5:44:f8:d5:32:f6:8d:93:e7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:8f:00:0e:74:b0:d6:6f:f3:b0:a0:d3:3f:
                    f5:02:73:23:30:55:f9:f3:dd:15:12:57:8b:84:1c:
                    9b:40:84:03:70:b5:02:7d:5d:79:82:1a:b3:c9:32:
                    c3:a9:d2:d3:07:b6:94:a5:8c:af:13:23:f1:eb:85:
                    e6:6f:ce:e0:39:38:1e:9a:41:b5:4f:9e:9c:5a:1e:
                    0f:bb:c2:a1:ea:f6:f0:fa:bb:2f:ea:37:2e:39:fe:
                    a2:e9:91:5d:50:57:55:5b:24:f1:55:77:93:4e:5c:
                    6a:c2:c5:ae:7a:3e:1e:10:cb:13:b9:aa:a6:1b:29:
                    a6:97:86:9a:1e:0f:c1:c2:2b:44:b9:24:d4:84:a6:
                    e6:66:81:bb:d6:45:6c:8f:70:10:d8:70:62:2e:f1:
                    0a:64:23:01:ec:20:e7:96:fd:93:65:99:61:d4:b1:
                    3a:7f:74:bd:9b:f9:2b:c0:57:a6:ae:ff:33:30:9f:
                    50:5e:cb:0b:67:d2:c5:34:db:93:58:16:34:54:97:
                    be:92:9a:0c:5b:f9:91:e7:2d:1b:d6:f0:b0:01:1d:
                    72:f6:a7:43:47:fb:cd:5c:e0:71:fd:60:50:16:3f:
                    9a:ec:3f:02:1f:42:a1:6a:cd:b3:2b:44:d5:ba:78:
                    48:d5:c8:bb:ff:f2:f1:92:8f:4a:12:58:ba:5c:69:
                    c0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CB:9D:04:DF:77:5B:00:F1:A2:AD:A9:39:9B:1D:19:67:B2:E3:6A
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:62:b3:c5:9f:91:5b:b5:dd:52:75:94:88:ee:6d:e8:70:4d:
         5c:03:25:2b:39:f7:c6:34:fa:92:cb:8b:59:38:0a:cc:bb:55:
         dc:5f:36:26:4c:e9:d2:63:cf:92:44:9b:c3:ea:f1:06:22:bc:
         13:11:8f:82:92:fd:4a:1c:d6:e7:cd:69:9b:99:51:8f:1a:e8:
         eb:de:40:18:0f:d2:5a:1f:6e:93:ae:67:de:02:3b:06:0e:2a:
         ef:4e:af:b6:c2:95:d3:c3:06:cd:0b:1a:4e:53:8d:44:86:23:
         f4:8a:b8:43:97:ed:ab:b8:00:b3:c8:e3:61:ce:0e:4f:df:95:
         7b:5d:e7:ac:f4:46:07:54:f6:fb:f1:23:e5:79:54:01:70:1b:
         a4:59:60:6d:4f:af:33:ff:e3:88:47:f7:8f:e7:b3:45:ac:06:
         23:e5:e9:97:89:61:02:1e:a1:ae:30:ac:d6:09:11:9e:3d:ef:
         c0:27:7a:d3:9d:3d:26:e5:a2:7c:4c:8e:37:e7:93:8b:f1:5b:
         e7:9a:09:df:42:62:b3:59:e3:05:65:e1:09:65:96:31:8b:0d:
         da:47:fe:6b:af:7e:70:e8:86:6c:93:03:5f:0b:70:f8:46:e7:
         34:c9:95:cd:2e:7e:b8:f6:96:18:58:86:f7:8a:68:00:76:d4:
         33:f9:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org