Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          i1S/fEHot4psjG/TTQwdMnxXneRq+J9ihnWSB2lvqyQ=
Subject key identifier:   EA:6B:25:E3:B5:AB:92:A9:41:D6:64:46:95:37:1E:9E:29:60:85:4F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       18C6AB010909E762EF90C8B37D2C3F3CE5631A18
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        177.66.116.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c6:ab:01:09:09:e7:62:ef:90:c8:b3:7d:2c:3f:3c:e5:63:1a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject: CN=3082010A0282010100A76D547A1E76764C6BFDEA7961D5DD423EBEFF099721432E3C15F838BF391D5618A9C87E6F58603674FDD307FCCE09B0DF4CC2DED244203ADFEB7248388FE44CAFF506466C891DB2C473B1251044ECB951D4027127D18F9F047FA70FD3670348AA0CDB01251A4C33F1674BCDF3F3B59BB47A43EF8CDFF66922D4E04C1F8CA6A52FC4C1E2C381AEB3585FC8F557DCD22439C80406E986DC87529521A1BE1C746CE53FB85D14A04999985C5D433FCD5F8A15CA4B5124DB928A2764394AEB709BAB53C3BA3B5CD7B5B3F7DFFF622E855E5D8D6AAD223887E1ADD8FE0435E29D89E74B946CD804282EEDF13DCDD933EFB986548C6322D862B88352DCD652A90C41D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:54:7a:1e:76:76:4c:6b:fd:ea:79:61:d5:
                    dd:42:3e:be:ff:09:97:21:43:2e:3c:15:f8:38:bf:
                    39:1d:56:18:a9:c8:7e:6f:58:60:36:74:fd:d3:07:
                    fc:ce:09:b0:df:4c:c2:de:d2:44:20:3a:df:eb:72:
                    48:38:8f:e4:4c:af:f5:06:46:6c:89:1d:b2:c4:73:
                    b1:25:10:44:ec:b9:51:d4:02:71:27:d1:8f:9f:04:
                    7f:a7:0f:d3:67:03:48:aa:0c:db:01:25:1a:4c:33:
                    f1:67:4b:cd:f3:f3:b5:9b:b4:7a:43:ef:8c:df:f6:
                    69:22:d4:e0:4c:1f:8c:a6:a5:2f:c4:c1:e2:c3:81:
                    ae:b3:58:5f:c8:f5:57:dc:d2:24:39:c8:04:06:e9:
                    86:dc:87:52:95:21:a1:be:1c:74:6c:e5:3f:b8:5d:
                    14:a0:49:99:98:5c:5d:43:3f:cd:5f:8a:15:ca:4b:
                    51:24:db:92:8a:27:64:39:4a:eb:70:9b:ab:53:c3:
                    ba:3b:5c:d7:b5:b3:f7:df:ff:62:2e:85:5e:5d:8d:
                    6a:ad:22:38:87:e1:ad:d8:fe:04:35:e2:9d:89:e7:
                    4b:94:6c:d8:04:28:2e:ed:f1:3d:cd:d9:33:ef:b9:
                    86:54:8c:63:22:d8:62:b8:83:52:dc:d6:52:a9:0c:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6B:25:E3:B5:AB:92:A9:41:D6:64:46:95:37:1E:9E:29:60:85:4F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:21:28:a4:29:c0:9f:9c:61:d2:15:08:1f:bd:07:d2:8d:51:
         6b:44:ef:66:55:a4:cd:06:2f:85:2c:13:1e:98:85:e8:4d:b8:
         36:cf:ce:b9:35:59:9b:01:f5:52:44:eb:83:2e:c3:d3:25:0a:
         cd:f4:16:b7:49:c0:74:eb:14:d3:ef:16:e6:e6:7d:db:51:57:
         cc:59:2c:84:ab:b5:7b:91:d2:ca:b5:b6:14:15:6f:0b:6d:56:
         de:20:e4:be:27:c9:f4:4c:fb:1c:c0:1d:e4:2d:de:fc:dd:79:
         ff:f7:65:8b:34:3f:50:5b:b3:99:e8:f0:4f:00:a0:c4:af:0d:
         ec:12:f9:64:23:b1:ef:49:fa:8c:02:54:65:cc:46:2b:53:c0:
         96:90:95:93:14:14:69:5c:19:95:60:e0:28:34:8b:07:bb:e0:
         77:43:a3:c3:43:b6:89:9d:39:96:52:c9:bc:85:e9:eb:75:65:
         40:fc:8f:5f:3e:b7:58:81:16:01:e6:6e:a8:72:ec:5f:8a:39:
         d0:49:de:a3:4a:4b:48:49:de:f6:2f:bd:48:39:11:63:dd:aa:
         16:4a:84:3a:f8:21:eb:fb:db:79:ae:05:c1:f5:6c:4a:c5:af:
         de:31:fd:01:46:0c:b9:b5:e6:11:f2:5b:58:95:8f:30:f3:d6:
         af:95:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org