Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          sS8zf+bv4atdMKLqZ/M/BJT+/WS8b0TnBhIUAq2bVhk=
Subject key identifier:   6B:C5:22:2A:CC:72:C9:94:FA:62:BE:7B:2E:4D:8C:DD:C5:C9:2B:65
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       20EF7DF583FCF0D168E578FB9F311A07F78046DC
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262494
IP address blocks:        177.66.119.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ef:7d:f5:83:fc:f0:d1:68:e5:78:fb:9f:31:1a:07:f7:80:46:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:30:ea:69:22:9c:fc:35:74:2b:6e:49:56:
                    97:9a:fd:92:ee:a5:d3:00:22:bf:be:11:c1:06:5b:
                    51:fb:9e:19:81:86:63:e4:d7:f0:8c:ca:a0:2b:9e:
                    7d:28:a2:28:c1:bc:4f:fc:5a:92:b7:17:a0:91:64:
                    a2:8b:15:4b:ad:27:be:f3:5a:cf:19:9d:53:15:71:
                    85:d7:d3:a7:93:93:a5:8a:d7:00:74:55:41:de:78:
                    40:f5:c2:d9:f2:78:0b:39:eb:f6:96:ad:3a:e2:29:
                    90:39:84:02:d0:3c:db:15:86:38:c9:23:6e:7f:50:
                    cc:52:df:7d:de:b1:79:21:76:18:cd:0b:8a:d7:df:
                    9c:52:23:fe:3e:fd:46:85:75:79:fb:97:ce:4c:70:
                    63:10:13:48:ee:fc:6b:4e:b1:3b:9f:b4:43:24:22:
                    46:71:22:e9:06:06:c1:d4:50:27:48:54:4f:90:70:
                    4f:55:a0:91:e3:b4:f9:2a:17:43:dd:d7:3c:df:01:
                    77:19:85:34:d7:4b:a3:42:18:be:ca:a3:4a:4f:0c:
                    92:61:ee:4a:0c:59:be:7b:4d:96:f7:f7:02:6e:89:
                    2c:90:87:20:62:ff:11:93:b8:aa:f2:0d:2b:3b:da:
                    f3:a6:ca:e4:2f:dd:a1:59:d5:64:e5:cb:9f:40:9b:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:22:2A:CC:72:C9:94:FA:62:BE:7B:2E:4D:8C:DD:C5:C9:2B:65
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:95:d9:4a:36:7e:16:95:b7:fc:11:df:19:6d:b3:90:e0:d0:
         81:ef:be:89:3d:c0:20:fc:f6:1e:41:e6:33:c8:a0:83:44:6d:
         d3:b0:ec:bc:a0:fb:d8:df:76:a6:ef:94:aa:be:f9:91:94:ad:
         d7:34:55:31:53:57:84:5f:f7:f1:bc:13:ff:3c:b2:1b:f4:e8:
         a6:0d:7f:ea:4f:9d:62:27:f5:51:ae:e2:f7:07:e3:99:bc:07:
         0e:45:21:bc:33:b8:21:42:76:22:f8:8a:b5:2b:ed:f0:68:be:
         2d:61:29:4f:c3:87:67:36:49:56:a8:ae:d0:8b:67:d2:4c:2e:
         fc:5f:e3:ed:e6:6c:86:48:15:be:05:e5:78:e9:9b:00:81:1a:
         bf:3f:a5:55:39:d4:23:9f:85:00:8e:0f:bc:db:20:8d:81:a6:
         0c:fa:d1:5d:75:dc:97:6e:4b:00:5f:85:cd:3d:82:27:9a:81:
         b9:8d:51:ad:07:07:bd:f9:bf:4c:3d:ca:8d:56:fc:15:c0:8f:
         90:f0:b2:5c:36:01:a6:c7:c7:52:c1:64:c2:02:8a:c0:6f:cb:
         67:3e:0f:d5:7d:27:ed:40:9e:e2:8e:e9:f7:9b:57:9e:80:45:
         d4:60:29:52:e7:6a:de:34:f3:b8:55:ea:c0:da:4e:a9:87:3e:
         55:bd:15:52
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIO999YP88NFo5Xj7nzEaB/eARtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ZCMTMwRUE2OTIyOUNGQzM1
NzQyQjZFNDk1Njk3OUFGRDkyRUVBNUQzMDAyMkJGQkUxMUMxMDY1QjUxRkI5RTE5
ODE4NjYzRTREN0YwOENDQUEwMkI5RTdEMjhBMjI4QzFCQzRGRkM1QTkyQjcxN0Ew
OTE2NEEyOEIxNTRCQUQyN0JFRjM1QUNGMTk5RDUzMTU3MTg1RDdEM0E3OTM5M0E1
OEFENzAwNzQ1NTQxREU3ODQwRjVDMkQ5RjI3ODBCMzlFQkY2OTZBRDNBRTIyOTkw
Mzk4NDAyRDAzQ0RCMTU4NjM4QzkyMzZFN0Y1MENDNTJERjdEREVCMTc5MjE3NjE4
Q0QwQjhBRDdERjlDNTIyM0ZFM0VGRDQ2ODU3NTc5RkI5N0NFNEM3MDYzMTAxMzQ4
RUVGQzZCNEVCMTNCOUZCNDQzMjQyMjQ2NzEyMkU5MDYwNkMxRDQ1MDI3NDg1NDRG
OTA3MDRGNTVBMDkxRTNCNEY5MkExNzQzRERENzNDREYwMTc3MTk4NTM0RDc0QkEz
NDIxOEJFQ0FBMzRBNEYwQzkyNjFFRTRBMEM1OUJFN0I0RDk2RjdGNzAyNkU4OTJD
OTA4NzIwNjJGRjExOTNCOEFBRjIwRDJCM0JEQUYzQTZDQUU0MkZEREExNTlENTY0
RTVDQjlGNDA5QkUzNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz7Ew6mkinPw1dCtuSVaXmv2S7qXTACK/vhHBBltR+54ZgYZj5Nfw
jMqgK559KKIowbxP/FqStxegkWSiixVLrSe+81rPGZ1TFXGF19Onk5OlitcAdFVB
3nhA9cLZ8ngLOev2lq064imQOYQC0DzbFYY4ySNuf1DMUt993rF5IXYYzQuK19+c
UiP+Pv1GhXV5+5fOTHBjEBNI7vxrTrE7n7RDJCJGcSLpBgbB1FAnSFRPkHBPVaCR
47T5KhdD3dc83wF3GYU010ujQhi+yqNKTwySYe5KDFm+e02W9/cCbokskIcgYv8R
k7iq8g0rO9rzpsrkL92hWdVk5cufQJvjbQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGvFIirMcsmU+mK+ey5NjN3FyStlMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczNzJlMzYzNjJlMzEzMTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sUJ3MA0GCSqGSIb3DQEBCwUAA4IBAQBrldlKNn4Wlbf8Ed8ZbbOQ4NCB776JPcAg
/PYeQeYzyKCDRG3TsOy8oPvY33am75SqvvmRlK3XNFUxU1eEX/fxvBP/PLIb9Oim
DX/qT51iJ/VRruL3B+OZvAcORSG8M7ghQnYi+Iq1K+3waL4tYSlPw4dnNklWqK7Q
i2fSTC78X+Pt5myGSBW+BeV46ZsAgRq/P6VVOdQjn4UAjg+82yCNgaYM+tFdddyX
bksAX4XNPYInmoG5jVGtBwe9+b9MPcqNVvwVwI+Q8LJcNgGmx8dSwWTCAorAb8tn
Pg/VfSftQJ7ijun3m1eegEXUYClS52reNPO4VerA2k6phz5VvRVS
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org