Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131342e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131342e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          /lIYYCSuvFelQVXqPyxmHhx3Y0AGCAy1VQdUCHx8rXA=
Subject key identifier:   71:F9:CA:98:3B:49:D3:BB:2D:69:98:F2:9E:2B:2A:BE:86:34:90:35
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       20853A4578C408897ED9C1B755117F0B03758CB3
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131342e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        177.66.114.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:85:3a:45:78:c4:08:89:7e:d9:c1:b7:55:11:7f:0b:03:75:8c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:40:f4:32:e6:88:98:e8:64:a9:48:5e:64:
                    1b:e0:79:e0:20:5a:4d:69:c8:0c:00:c8:17:b8:63:
                    6a:67:0c:91:4b:16:f9:30:09:3c:91:5a:f7:bd:c9:
                    07:02:c0:f5:a5:a7:c5:3b:32:7d:d2:12:af:85:1b:
                    64:b8:77:f6:01:7b:d6:47:a8:9a:6d:08:ba:30:3a:
                    ee:24:8e:14:84:fe:e2:1e:b3:50:40:23:59:62:e3:
                    06:5f:27:6c:37:3f:cd:ed:ec:bb:8c:5b:54:e9:64:
                    64:3f:4e:08:09:bb:59:8d:7c:50:b0:4c:73:81:7b:
                    2a:73:72:1f:a2:50:19:3a:27:3c:83:44:ad:07:b6:
                    39:52:95:2d:bc:9f:38:12:c3:45:ec:fb:07:c8:d9:
                    f8:1e:72:83:1b:11:06:e9:1f:58:15:e1:5c:8e:bd:
                    e6:36:65:c1:61:61:c5:b0:61:7f:12:15:1c:de:e9:
                    ad:ce:31:2d:7e:b8:7f:b0:4e:ec:c3:38:c9:a6:16:
                    6b:48:23:b9:08:58:30:cf:06:2f:86:01:08:19:95:
                    ea:1c:d4:3a:23:2b:84:96:5d:3d:f1:4a:2d:fd:1c:
                    02:aa:62:ca:93:0a:ec:c9:41:f2:61:b6:e3:a8:34:
                    4d:41:f7:d6:1e:3e:1d:7d:0f:da:66:7b:b1:ba:3b:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F9:CA:98:3B:49:D3:BB:2D:69:98:F2:9E:2B:2A:BE:86:34:90:35
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131342e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:6a:1b:94:c1:74:43:7b:a3:3b:09:d7:1d:4b:47:aa:1e:
         f6:78:75:d8:4b:aa:dc:e1:2a:87:8a:0c:89:ca:23:aa:24:42:
         30:a6:36:54:94:d6:2a:6e:b7:c1:a0:f3:f5:ca:ed:7e:48:06:
         ce:a4:44:7f:96:61:b0:aa:fc:25:18:7e:57:6a:d8:5c:ad:32:
         80:5b:6b:f1:37:1b:13:60:7a:1e:58:23:7a:92:3f:e2:4d:08:
         f0:d9:4d:fd:82:34:ec:e6:42:59:40:18:0a:5b:91:47:5b:ba:
         18:b0:20:af:cc:06:76:c0:b5:37:33:0e:52:dd:17:34:f9:42:
         d4:e3:e8:aa:ba:44:9d:0a:fb:8c:84:f8:75:84:84:b5:18:7f:
         50:66:23:c6:34:26:d0:d2:f2:3e:98:3c:c9:42:f5:e1:a4:95:
         44:44:99:b3:c0:b4:c0:31:f6:8e:b5:7c:f9:0c:42:ba:40:86:
         d2:b3:8a:dc:d0:e1:09:fb:ee:08:e5:93:eb:e3:2d:4a:92:8f:
         10:31:ea:3f:79:b6:54:bd:07:cd:71:6d:ad:d0:c7:47:a0:b6:
         5d:53:a4:fb:46:fd:ba:ad:ed:12:a4:e1:94:b9:af:0c:ea:f4:
         45:b7:c4:54:e4:1f:f8:8e:32:31:c6:49:41:1f:68:fe:52:c7:
         c3:ed:38:00
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIIU6RXjECIl+2cG3VRF/CwN1jLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDdaFw0yNTA0MDMxOTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkYzOTQwRjQzMkU2ODg5OEU4
NjRBOTQ4NUU2NDFCRTA3OUUwMjA1QTRENjlDODBDMDBDODE3Qjg2MzZBNjcwQzkx
NEIxNkY5MzAwOTNDOTE1QUY3QkRDOTA3MDJDMEY1QTVBN0M1M0IzMjdERDIxMkFG
ODUxQjY0Qjg3N0Y2MDE3QkQ2NDdBODlBNkQwOEJBMzAzQUVFMjQ4RTE0ODRGRUUy
MUVCMzUwNDAyMzU5NjJFMzA2NUYyNzZDMzczRkNERURFQ0JCOEM1QjU0RTk2NDY0
M0Y0RTA4MDlCQjU5OEQ3QzUwQjA0QzczODE3QjJBNzM3MjFGQTI1MDE5M0EyNzND
ODM0NEFEMDdCNjM5NTI5NTJEQkM5RjM4MTJDMzQ1RUNGQjA3QzhEOUY4MUU3Mjgz
MUIxMTA2RTkxRjU4MTVFMTVDOEVCREU2MzY2NUMxNjE2MUM1QjA2MTdGMTIxNTFD
REVFOUFEQ0UzMTJEN0VCODdGQjA0RUVDQzMzOEM5QTYxNjZCNDgyM0I5MDg1ODMw
Q0YwNjJGODYwMTA4MTk5NUVBMUNENDNBMjMyQjg0OTY1RDNERjE0QTJERkQxQzAy
QUE2MkNBOTMwQUVDQzk0MUYyNjFCNkUzQTgzNDRENDFGN0Q2MUUzRTFEN0QwRkRB
NjY3QkIxQkEzQjg5NzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvzlA9DLmiJjoZKlIXmQb4HngIFpNacgMAMgXuGNqZwyRSxb5MAk8
kVr3vckHAsD1pafFOzJ90hKvhRtkuHf2AXvWR6iabQi6MDruJI4UhP7iHrNQQCNZ
YuMGXydsNz/N7ey7jFtU6WRkP04ICbtZjXxQsExzgXsqc3IfolAZOic8g0StB7Y5
UpUtvJ84EsNF7PsHyNn4HnKDGxEG6R9YFeFcjr3mNmXBYWHFsGF/EhUc3umtzjEt
frh/sE7swzjJphZrSCO5CFgwzwYvhgEIGZXqHNQ6IyuEll098Uot/RwCqmLKkwrs
yUHyYbbjqDRNQffWHj4dfQ/aZnuxujuJeQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHH5ypg7SdO7LWmY8p4rKr6GNJA1MB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczNzJlMzYzNjJlMzEzMTM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
sUJyMA0GCSqGSIb3DQEBCwUAA4IBAQA7yWoblMF0Q3ujOwnXHUtHqh72eHXYS6rc
4SqHigyJyiOqJEIwpjZUlNYqbrfBoPP1yu1+SAbOpER/lmGwqvwlGH5XathcrTKA
W2vxNxsTYHoeWCN6kj/iTQjw2U39gjTs5kJZQBgKW5FHW7oYsCCvzAZ2wLU3Mw5S
3Rc0+ULU4+iqukSdCvuMhPh1hIS1GH9QZiPGNCbQ0vI+mDzJQvXhpJVERJmzwLTA
MfaOtXz5DEK6QIbSs4rc0OEJ++4I5ZPr4y1Kko8QMeo/ebZUvQfNcW2t0MdHoLZd
U6T7Rv26re0SpOGUua8M6vRFt8RU5B/4jjIxxklBH2j+UsfD7TgA
-----END CERTIFICATE-----