Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          4r+h9aBbPGy07+gJsnNbBf9jIr01v1qshw1nX6eB/8Q=
Subject key identifier:   3A:21:2B:CF:F4:2F:44:BD:97:97:36:9A:51:F1:F5:7E:5B:F6:92:4F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1B497E87F59AE49F0EA2CE0ADE48810F3FFB9476
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        177.66.116.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:49:7e:87:f5:9a:e4:9f:0e:a2:ce:0a:de:48:81:0f:3f:fb:94:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:9d:47:8e:1b:c7:44:9f:2b:73:f9:3e:40:
                    ff:a5:a9:6e:4f:d3:62:4c:8e:f6:33:1f:d5:cb:53:
                    f3:4c:61:ec:fb:ec:45:22:68:8d:f0:57:f5:21:88:
                    6a:2f:0b:98:62:e1:4d:12:2c:1f:7e:1d:6c:8b:e9:
                    32:f1:8a:6b:2c:20:70:a4:48:3f:8f:8d:ef:6c:c6:
                    ff:a0:48:54:ff:fe:84:27:5d:e8:3a:e0:14:2c:27:
                    4e:6d:43:82:45:ad:70:90:b9:fb:c5:7c:78:4c:c9:
                    c5:27:1f:30:bb:79:85:2b:44:fd:9c:de:a3:08:a7:
                    9e:64:c1:91:2d:1c:69:a4:90:f9:c0:ac:26:ab:29:
                    52:49:3e:3a:87:6a:63:96:c2:6f:ef:40:cc:cf:8c:
                    33:1e:62:9a:f4:7f:23:15:e7:a5:83:0d:4d:ae:5a:
                    ba:85:21:9b:2c:02:e5:06:b9:62:92:46:7d:d3:21:
                    cb:f5:14:5a:b3:fa:c7:6c:6e:fe:e2:de:37:60:0c:
                    eb:96:1f:ac:78:54:94:fe:96:9f:d8:e0:64:d3:7f:
                    8b:9f:d3:01:83:d1:18:4a:51:fc:8a:c4:b2:d4:d3:
                    a2:c1:2d:21:b3:ec:55:73:2a:3b:e9:33:d5:2c:27:
                    61:e0:14:47:67:72:f1:90:36:95:e6:19:57:ee:5c:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:21:2B:CF:F4:2F:44:BD:97:97:36:9A:51:F1:F5:7E:5B:F6:92:4F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:0f:b7:70:a7:4f:cb:9e:a6:e8:1a:ba:0d:6c:2e:9c:7f:
         ab:b2:23:a8:cf:d4:c0:b3:b1:40:86:ed:3a:24:97:08:3b:81:
         93:f2:7b:b6:38:04:a0:68:d2:13:79:bc:1d:24:b9:96:94:ff:
         67:54:7d:6c:78:ab:18:42:16:2e:69:b7:c5:7e:81:fe:af:fe:
         d5:f9:c2:bf:51:84:ed:45:b2:62:af:0d:b9:40:c1:be:b7:43:
         72:05:67:12:74:b2:1f:ef:50:56:30:69:55:a2:92:7f:99:60:
         f6:4e:94:ff:60:d0:7c:57:18:0e:52:73:3d:28:c8:de:b7:12:
         4c:df:32:14:dd:a7:52:b0:61:59:37:39:f8:91:cb:1a:c8:24:
         2e:f8:58:3f:ee:5e:5d:6a:32:d5:2b:e7:b5:f0:eb:ee:e3:48:
         b5:9b:3e:af:73:3e:d0:49:fb:f3:9f:be:61:3f:67:bb:74:be:
         91:16:f9:2a:36:bc:75:21:cc:f5:3d:b6:56:a9:83:ad:4c:cf:
         76:e1:20:3a:89:20:50:eb:93:61:c5:b9:73:d1:06:1e:64:4f:
         fe:80:bf:3b:b2:e4:39:45:8e:14:20:53:cf:6d:a3:d8:a4:97:
         bb:7e:6c:41:ea:ec:6a:29:80:35:f9:0f:a4:92:37:55:bd:84:
         26:82:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org