Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          ESYONTiy5/Fr4MDCPofnHDaMfIiS9lVI9DLoS1raEVQ=
Subject key identifier:   E4:CC:D1:EC:F3:F0:0E:D3:D0:AB:0D:8D:5B:3D:5A:3C:92:B1:61:77
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1BC68DF7265F2C6027121BBA8E89F58E95F2722A
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        177.66.117.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c6:8d:f7:26:5f:2c:60:27:12:1b:ba:8e:89:f5:8e:95:f2:72:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:8e:31:82:eb:33:2e:94:df:4d:30:53:b4:
                    7f:07:23:be:86:ac:4e:a5:74:7b:9a:c8:60:cd:4e:
                    f4:c6:71:d8:d5:61:e3:34:a1:81:48:df:66:93:2a:
                    e2:c5:bf:a9:ab:61:a0:bb:4c:ab:2c:7a:74:01:6b:
                    29:8e:48:43:68:9e:49:23:2e:ba:4d:13:cf:09:f6:
                    7b:7f:66:6a:a6:ab:26:dd:a2:9a:5c:67:2c:60:d5:
                    87:95:85:a6:8d:f1:82:82:aa:a5:dc:3e:be:fd:a2:
                    0d:c9:ea:a9:b4:da:46:fb:a2:a8:d5:4f:32:99:bc:
                    3f:1a:bd:1e:f8:44:23:ff:93:16:87:eb:10:b7:1b:
                    8b:4f:ae:c8:84:c6:92:b7:b7:df:9e:96:98:06:d7:
                    0f:f5:71:e2:9e:87:1b:40:eb:ef:86:af:e3:94:64:
                    ca:a7:50:fa:03:94:8d:5c:2f:e2:63:57:8f:ac:dd:
                    2f:1f:82:93:dd:20:f5:b5:5a:bf:aa:e9:ec:ee:08:
                    81:4f:39:66:4c:1a:26:1b:5e:e0:1b:af:ec:73:39:
                    ee:0a:e1:3e:1f:56:46:bf:b0:6f:91:03:13:8e:88:
                    52:dc:e8:60:c8:9f:ae:29:a3:e6:00:f3:bd:9c:74:
                    e9:54:ad:74:42:94:12:1c:b1:18:23:13:da:e3:3c:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:D1:EC:F3:F0:0E:D3:D0:AB:0D:8D:5B:3D:5A:3C:92:B1:61:77
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:c0:6f:bb:31:9a:50:91:42:2e:da:09:91:33:29:5e:38:
         c5:82:56:27:03:ea:a1:09:72:66:6c:dd:e1:13:f9:de:6b:b2:
         0f:0e:e4:b0:11:ca:6c:f4:0c:c2:30:c8:7e:27:32:09:e4:d7:
         1b:65:b4:57:48:11:25:9a:00:02:2d:7e:c6:03:a8:ce:f2:e6:
         45:95:45:50:8e:aa:b4:aa:9f:85:d8:21:b6:1b:f5:2f:2c:c2:
         53:16:c6:40:90:06:f0:6d:e2:16:8b:ed:b0:70:8f:3e:c9:a8:
         bc:d2:3e:12:eb:01:e0:49:58:75:4c:55:13:86:a5:f0:05:22:
         61:0a:61:4e:6f:9c:5f:88:cb:55:25:c7:c8:5d:33:0d:6d:51:
         3b:e6:85:f9:70:b2:5d:e6:69:c0:68:a2:99:24:e7:7e:63:f3:
         a2:6b:51:9b:a4:68:c9:0d:46:30:29:52:9d:3e:d7:bf:e2:8e:
         fc:99:75:84:72:53:9e:f7:16:d5:b1:d5:de:3d:10:cc:61:a4:
         88:e4:73:c6:b4:14:12:41:db:7a:71:98:fe:3a:1b:e2:6f:f1:
         c6:6d:4c:7a:00:f9:77:d8:ae:4d:43:58:1f:9b:f8:50:e6:fc:
         10:19:36:2e:47:bc:28:68:a9:74:fd:15:81:9d:e9:8e:dc:d4:
         b5:6e:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org