Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          84cNIyRVfSmpGXmeKNi+TdZRzu72f+5ODTjxrAvRJgw=
Subject key identifier:   72:D4:B9:81:D8:81:73:73:EE:6B:BD:C8:05:95:63:0C:7F:58:2B:A6
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2B0DA323F114884517DA8D3329A1C96EDB4F4557
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        177.66.118.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0d:a3:23:f1:14:88:45:17:da:8d:33:29:a1:c9:6e:db:4f:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject: CN=3082010A0282010100C4FE65A314DCB4AAF8AF55D5CADD08D57EBB98A1A9C95C43C6D937117A287236F59BA7A87B58471583CE283BF81974D14A0EFDCC9115F983245BD242D2527281541B11AEA68E6076BF27DE73F4AAA8E7A77DA135E44F0D59FBBA37F1F5104D5BB478C245F70E6AE003E6CACC91CFA137A4C8F9DE4389B99D2619D4C152657D6C9315872BBD9030B767172754248CBC1CBFD5C4802C68AFCCE5539ED2CABD4451AC0CD7CF20FA1400315324759C73D8A77D44140A294D971DCC1BEF87BDB5C5C9AD9C8A2EFFC5D851204F5CB0FB9C65A6494D8A90AD9977CC4B0A59DE54AA88D238E9A5B72AF61D5B3B98C225058880D65EE70B146A027EDF2CE51DFEFA94C9410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:65:a3:14:dc:b4:aa:f8:af:55:d5:ca:dd:
                    08:d5:7e:bb:98:a1:a9:c9:5c:43:c6:d9:37:11:7a:
                    28:72:36:f5:9b:a7:a8:7b:58:47:15:83:ce:28:3b:
                    f8:19:74:d1:4a:0e:fd:cc:91:15:f9:83:24:5b:d2:
                    42:d2:52:72:81:54:1b:11:ae:a6:8e:60:76:bf:27:
                    de:73:f4:aa:a8:e7:a7:7d:a1:35:e4:4f:0d:59:fb:
                    ba:37:f1:f5:10:4d:5b:b4:78:c2:45:f7:0e:6a:e0:
                    03:e6:ca:cc:91:cf:a1:37:a4:c8:f9:de:43:89:b9:
                    9d:26:19:d4:c1:52:65:7d:6c:93:15:87:2b:bd:90:
                    30:b7:67:17:27:54:24:8c:bc:1c:bf:d5:c4:80:2c:
                    68:af:cc:e5:53:9e:d2:ca:bd:44:51:ac:0c:d7:cf:
                    20:fa:14:00:31:53:24:75:9c:73:d8:a7:7d:44:14:
                    0a:29:4d:97:1d:cc:1b:ef:87:bd:b5:c5:c9:ad:9c:
                    8a:2e:ff:c5:d8:51:20:4f:5c:b0:fb:9c:65:a6:49:
                    4d:8a:90:ad:99:77:cc:4b:0a:59:de:54:aa:88:d2:
                    38:e9:a5:b7:2a:f6:1d:5b:3b:98:c2:25:05:88:80:
                    d6:5e:e7:0b:14:6a:02:7e:df:2c:e5:1d:fe:fa:94:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D4:B9:81:D8:81:73:73:EE:6B:BD:C8:05:95:63:0C:7F:58:2B:A6
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:53:3f:f2:8e:6c:21:4c:62:51:32:e4:38:79:49:db:05:8c:
         d6:44:6a:24:70:68:80:81:de:16:e2:f0:6b:5c:e6:69:65:40:
         b4:35:fc:69:c0:f8:af:88:14:e3:a7:ad:a7:42:39:4a:89:28:
         9d:5e:15:3f:97:9d:74:0a:c7:8f:04:06:8e:86:62:54:ed:2d:
         4b:a6:79:12:82:86:a0:aa:79:79:d2:bd:cb:4f:b9:5a:6d:5c:
         47:5a:24:a2:54:a0:97:a3:34:f5:6c:63:b8:f8:ee:4e:9a:6d:
         b4:2b:b6:70:27:39:c7:8f:dd:5a:ef:1e:e5:b6:24:4f:be:2e:
         a6:14:0f:64:90:15:4f:c7:8f:f6:65:28:bc:32:cf:35:49:7b:
         67:31:b1:1c:36:5b:4c:79:cb:c0:f5:24:d0:a7:ac:16:02:0e:
         35:18:99:22:cf:8b:c6:2d:23:17:3c:b4:e4:68:18:28:d1:00:
         4a:64:18:2d:12:d9:b2:39:92:63:15:29:d0:62:46:98:42:8c:
         7c:a1:4c:a9:26:63:ab:4d:20:bd:9e:25:7f:d2:30:ae:6b:20:
         b9:8d:f1:cd:2a:e5:3c:eb:05:f9:23:e6:cd:99:38:de:2f:2f:
         c1:d5:8b:b4:d7:12:23:b3:82:fb:13:3c:68:a1:7d:d2:50:38:
         7c:78:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org