Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          dTS4M2s276YN7w9PNw72Dnx50lbbX+0KFxeBiVPIJdg=
Subject key identifier:   7B:01:52:3C:85:FE:D5:A9:9E:BF:D3:CD:43:2D:55:2C:A1:F9:88:B3
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       418A7290AA65017076CD78EDB0E12AB3B77CE546
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        177.66.114.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:72:90:aa:65:01:70:76:cd:78:ed:b0:e1:2a:b3:b7:7c:e5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject: CN=3082010A0282010100B4D8C9A0AC26D6F57730B7B2892B41598809CC85C1DE87F0BF3CED88844744A620B0D9D0444C4E91969774C6F32DC20ADA3A728B879B923C6073EEF8523537B3B6A6C9B92BFAAAC89DE5AFA0A309720ED5F41639E6B6F701CE00F3ACD541E8630F4893FE6120E445D4E21EA02EDA9699BD91421CA26D8C50F2E7925B932FADB01470BD508437AF843EDB1CEF5EDE0CE285C724A6948FB0CB3578ADFF277336B8DE832623A29B92F2396323C5FF0886DD9C1E067183DF3F82907AC94A1C7B7B3B5C06E60E2BF785061D72327675F7513D2AFF17BBA393FF24BB52D90C315AE2F2CBE48C53B5413EAD3A2AC752D34FCA69D2F421A3A998EE456DD69D6B129DCBFD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:c9:a0:ac:26:d6:f5:77:30:b7:b2:89:2b:
                    41:59:88:09:cc:85:c1:de:87:f0:bf:3c:ed:88:84:
                    47:44:a6:20:b0:d9:d0:44:4c:4e:91:96:97:74:c6:
                    f3:2d:c2:0a:da:3a:72:8b:87:9b:92:3c:60:73:ee:
                    f8:52:35:37:b3:b6:a6:c9:b9:2b:fa:aa:c8:9d:e5:
                    af:a0:a3:09:72:0e:d5:f4:16:39:e6:b6:f7:01:ce:
                    00:f3:ac:d5:41:e8:63:0f:48:93:fe:61:20:e4:45:
                    d4:e2:1e:a0:2e:da:96:99:bd:91:42:1c:a2:6d:8c:
                    50:f2:e7:92:5b:93:2f:ad:b0:14:70:bd:50:84:37:
                    af:84:3e:db:1c:ef:5e:de:0c:e2:85:c7:24:a6:94:
                    8f:b0:cb:35:78:ad:ff:27:73:36:b8:de:83:26:23:
                    a2:9b:92:f2:39:63:23:c5:ff:08:86:dd:9c:1e:06:
                    71:83:df:3f:82:90:7a:c9:4a:1c:7b:7b:3b:5c:06:
                    e6:0e:2b:f7:85:06:1d:72:32:76:75:f7:51:3d:2a:
                    ff:17:bb:a3:93:ff:24:bb:52:d9:0c:31:5a:e2:f2:
                    cb:e4:8c:53:b5:41:3e:ad:3a:2a:c7:52:d3:4f:ca:
                    69:d2:f4:21:a3:a9:98:ee:45:6d:d6:9d:6b:12:9d:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:01:52:3C:85:FE:D5:A9:9E:BF:D3:CD:43:2D:55:2C:A1:F9:88:B3
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:9f:2d:10:9b:85:ca:95:b3:e2:ce:77:88:74:62:12:08:
         0f:dc:f1:ff:a9:c2:1c:04:46:75:73:67:4f:6a:76:95:c2:3d:
         57:d9:70:69:42:b3:17:75:ee:51:ac:46:f9:fc:57:14:a2:c2:
         51:9e:8c:94:c2:5c:99:67:43:d9:1a:33:4b:e4:dc:5a:8d:e4:
         fa:3b:95:85:52:ec:53:87:f1:15:d3:d5:27:08:b9:14:09:ea:
         42:fc:c0:10:57:96:b5:5a:6e:66:d4:f2:a8:34:f3:f2:a4:bd:
         74:4e:0d:c1:e6:84:f1:4e:98:c0:a4:d8:8c:49:89:b0:30:4a:
         93:34:d1:34:b6:17:b7:41:39:b6:b6:94:b2:a2:4d:19:2f:77:
         bc:1c:80:d7:44:c2:87:9d:82:07:81:95:1b:5a:c6:99:fb:08:
         d1:89:94:4a:53:c8:7f:33:b0:2c:34:b3:10:63:04:df:10:f3:
         77:47:37:b6:57:e1:9a:d5:79:b6:8e:88:69:78:f9:77:1e:4b:
         03:98:d1:72:1b:b7:1c:0b:fa:8a:ea:0e:54:1b:38:a5:2e:9a:
         23:04:7b:75:93:e3:50:ed:71:d8:f7:bb:4b:34:42:58:0d:1a:
         32:b2:2c:bd:78:01:28:fd:0b:3c:69:21:00:28:c9:dd:be:f3:
         a1:98:a5:d0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQYpykKplAXB2zXjtsOEqs7d85UYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDZaFw0yNTA0MDMxOTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjREOEM5QTBBQzI2RDZGNTc3
MzBCN0IyODkyQjQxNTk4ODA5Q0M4NUMxREU4N0YwQkYzQ0VEODg4NDQ3NDRBNjIw
QjBEOUQwNDQ0QzRFOTE5Njk3NzRDNkYzMkRDMjBBREEzQTcyOEI4NzlCOTIzQzYw
NzNFRUY4NTIzNTM3QjNCNkE2QzlCOTJCRkFBQUM4OURFNUFGQTBBMzA5NzIwRUQ1
RjQxNjM5RTZCNkY3MDFDRTAwRjNBQ0Q1NDFFODYzMEY0ODkzRkU2MTIwRTQ0NUQ0
RTIxRUEwMkVEQTk2OTlCRDkxNDIxQ0EyNkQ4QzUwRjJFNzkyNUI5MzJGQURCMDE0
NzBCRDUwODQzN0FGODQzRURCMUNFRjVFREUwQ0UyODVDNzI0QTY5NDhGQjBDQjM1
NzhBREZGMjc3MzM2QjhERTgzMjYyM0EyOUI5MkYyMzk2MzIzQzVGRjA4ODZERDlD
MUUwNjcxODNERjNGODI5MDdBQzk0QTFDN0I3QjNCNUMwNkU2MEUyQkY3ODUwNjFE
NzIzMjc2NzVGNzUxM0QyQUZGMTdCQkEzOTNGRjI0QkI1MkQ5MEMzMTVBRTJGMkNC
RTQ4QzUzQjU0MTNFQUQzQTJBQzc1MkQzNEZDQTY5RDJGNDIxQTNBOTk4RUU0NTZE
RDY5RDZCMTI5RENCRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtNjJoKwm1vV3MLeyiStBWYgJzIXB3ofwvzztiIRHRKYgsNnQRExO
kZaXdMbzLcIK2jpyi4ebkjxgc+74UjU3s7amybkr+qrIneWvoKMJcg7V9BY55rb3
Ac4A86zVQehjD0iT/mEg5EXU4h6gLtqWmb2RQhyibYxQ8ueSW5MvrbAUcL1QhDev
hD7bHO9e3gzihcckppSPsMs1eK3/J3M2uN6DJiOim5LyOWMjxf8Iht2cHgZxg98/
gpB6yUoce3s7XAbmDiv3hQYdcjJ2dfdRPSr/F7ujk/8ku1LZDDFa4vLL5IxTtUE+
rToqx1LTT8pp0vQho6mY7kVt1p1rEp3L/QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHsBUjyF/tWpnr/TzUMtVSyh+YizMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczNzJlMzYzNjJlMzEzMTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sUJyMA0GCSqGSIb3DQEBCwUAA4IBAQAp4p8tEJuFypWz4s53iHRiEggP3PH/qcIc
BEZ1c2dPanaVwj1X2XBpQrMXde5RrEb5/FcUosJRnoyUwlyZZ0PZGjNL5NxajeT6
O5WFUuxTh/EV09UnCLkUCepC/MAQV5a1Wm5m1PKoNPPypL10Tg3B5oTxTpjApNiM
SYmwMEqTNNE0the3QTm2tpSyok0ZL3e8HIDXRMKHnYIHgZUbWsaZ+wjRiZRKU8h/
M7AsNLMQYwTfEPN3Rze2V+Ga1Xm2johpePl3HksDmNFyG7ccC/qK6g5UGzilLpoj
BHt1k+NQ7XHY97tLNEJYDRoysiy9eAEo/Qs8aSEAKMndvvOhmKXQ
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org