Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          bIuBOllZRbBCjGqaENW3VQvazK++RaxmlVg3qgyEF8A=
Subject key identifier:   3F:E4:E1:B9:7A:5C:0F:FC:7C:E0:2B:0A:B0:EE:02:8B:82:56:C6:0E
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       0A9F2E88A110C20D06FC28CCB25DB5D10BBC1608
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        179.125.124.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9f:2e:88:a1:10:c2:0d:06:fc:28:cc:b2:5d:b5:d1:0b:bc:16:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:d5:f2:ff:89:14:be:8d:ef:03:21:b6:c9:
                    a7:d2:d9:ce:bd:fa:89:56:6c:28:19:7b:2e:d6:14:
                    1b:f2:aa:c7:15:b5:4c:7d:58:68:d0:1d:a5:d6:72:
                    e2:4a:40:1b:81:62:a5:b4:15:71:e2:3f:4b:d7:f7:
                    73:2f:b7:c0:82:07:25:74:e5:b0:be:71:90:cc:43:
                    f0:a6:61:9a:05:d1:7b:64:6a:fe:00:27:bb:1f:6a:
                    09:a7:cf:0d:af:b4:74:bc:92:73:a9:58:df:a9:d7:
                    fb:23:8c:52:a8:3d:f9:06:e5:17:96:6c:3a:cd:11:
                    b2:e2:a4:f2:89:3d:9f:65:07:3f:91:13:28:cc:a3:
                    c2:c0:cb:51:4b:bd:06:28:d5:a0:1a:56:f7:90:b1:
                    be:a5:52:0c:f7:59:94:23:64:c3:a2:45:85:e8:84:
                    b4:fe:e8:95:e6:26:13:7b:b9:08:43:1e:20:3f:d8:
                    fe:bf:ea:d9:ac:16:13:36:e2:d0:d3:11:ff:b5:9d:
                    ee:de:c5:4f:7c:18:74:e1:71:a4:0c:78:31:4b:32:
                    dc:88:3d:97:10:30:5c:b0:26:28:42:ac:3b:a2:97:
                    c8:0a:8c:7b:61:5f:21:a3:c6:f6:2d:f0:26:a9:77:
                    33:67:0d:72:58:b7:f8:1b:bd:1a:b5:b5:36:b2:ae:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:E1:B9:7A:5C:0F:FC:7C:E0:2B:0A:B0:EE:02:8B:82:56:C6:0E
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:43:25:ea:07:76:e0:cd:86:c7:aa:4d:2f:61:f1:7a:04:
         0d:2e:40:8b:5a:29:bf:2b:b9:f7:45:02:45:07:5c:0d:d4:0c:
         66:8e:de:63:bf:16:ea:01:be:2d:54:88:63:03:f5:92:61:2a:
         8e:b5:35:7f:20:71:98:d6:11:43:49:b0:74:7e:c3:a6:a5:7b:
         9b:b8:c2:f6:a1:92:d4:60:82:ca:1d:53:96:19:c6:5f:e6:8a:
         58:e5:b3:b6:04:04:61:99:22:59:3c:b2:47:00:64:70:b2:4e:
         4d:03:f7:d3:af:06:73:ab:6a:a9:54:18:81:2a:ef:a3:82:72:
         35:d4:dc:d1:dd:c2:3a:9d:95:15:d4:ca:cb:3c:71:83:85:51:
         b3:1e:42:55:3c:b7:18:8c:05:f6:10:84:9a:96:a5:2d:99:e8:
         50:16:f7:ef:b1:c8:27:59:e1:eb:88:7d:f2:02:14:0d:fb:98:
         c0:f8:ec:4a:65:3b:ad:1d:ad:2c:bc:28:63:c0:14:ff:21:9e:
         9b:d4:0b:d3:ad:aa:84:ef:bb:60:cd:54:62:c4:62:0d:0c:53:
         5b:6b:e4:f6:01:3c:47:ab:a8:36:da:63:c0:52:84:da:6b:a8:
         79:73:28:ca:a6:60:fa:ac:49:4d:7a:62:30:f6:c5:d5:5e:64:
         d1:eb:70:cc
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUCp8uiKEQwg0G/CjMsl210Qu8FggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDdaFw0yNTA0MDMxOTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDgxQ0Q1RjJGRjg5MTRCRThE
RUYwMzIxQjZDOUE3RDJEOUNFQkRGQTg5NTY2QzI4MTk3QjJFRDYxNDFCRjJBQUM3
MTVCNTRDN0Q1ODY4RDAxREE1RDY3MkUyNEE0MDFCODE2MkE1QjQxNTcxRTIzRjRC
RDdGNzczMkZCN0MwODIwNzI1NzRFNUIwQkU3MTkwQ0M0M0YwQTY2MTlBMDVEMTdC
NjQ2QUZFMDAyN0JCMUY2QTA5QTdDRjBEQUZCNDc0QkM5MjczQTk1OERGQTlEN0ZC
MjM4QzUyQTgzREY5MDZFNTE3OTY2QzNBQ0QxMUIyRTJBNEYyODkzRDlGNjUwNzNG
OTExMzI4Q0NBM0MyQzBDQjUxNEJCRDA2MjhENUEwMUE1NkY3OTBCMUJFQTU1MjBD
Rjc1OTk0MjM2NEMzQTI0NTg1RTg4NEI0RkVFODk1RTYyNjEzN0JCOTA4NDMxRTIw
M0ZEOEZFQkZFQUQ5QUMxNjEzMzZFMkQwRDMxMUZGQjU5REVFREVDNTRGN0MxODc0
RTE3MUE0MEM3ODMxNEIzMkRDODgzRDk3MTAzMDVDQjAyNjI4NDJBQzNCQTI5N0M4
MEE4QzdCNjE1RjIxQTNDNkY2MkRGMDI2QTk3NzMzNjcwRDcyNThCN0Y4MUJCRDFB
QjVCNTM2QjJBRTBFMDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2BzV8v+JFL6N7wMhtsmn0tnOvfqJVmwoGXsu1hQb8qrHFbVMfVho
0B2l1nLiSkAbgWKltBVx4j9L1/dzL7fAggcldOWwvnGQzEPwpmGaBdF7ZGr+ACe7
H2oJp88Nr7R0vJJzqVjfqdf7I4xSqD35BuUXlmw6zRGy4qTyiT2fZQc/kRMozKPC
wMtRS70GKNWgGlb3kLG+pVIM91mUI2TDokWF6IS0/uiV5iYTe7kIQx4gP9j+v+rZ
rBYTNuLQ0xH/tZ3u3sVPfBh04XGkDHgxSzLciD2XEDBcsCYoQqw7opfICox7YV8h
o8b2LfAmqXczZw1yWLf4G70atbU2sq4OBwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FD/k4bl6XA/8fOArCrDuAouCVsYOMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczOTJlMzEzMjM1MmUzMTMy
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzfXwwDQYJKoZIhvcNAQELBQADggEBAA/6QyXqB3bgzYbHqk0vYfF6BA0uQIta
Kb8rufdFAkUHXA3UDGaO3mO/FuoBvi1UiGMD9ZJhKo61NX8gcZjWEUNJsHR+w6al
e5u4wvahktRggsodU5YZxl/miljls7YEBGGZIlk8skcAZHCyTk0D99OvBnOraqlU
GIEq76OCcjXU3NHdwjqdlRXUyss8cYOFUbMeQlU8txiMBfYQhJqWpS2Z6FAW9++x
yCdZ4euIffICFA37mMD47EplO60drSy8KGPAFP8hnpvUC9OtqoTvu2DNVGLEYg0M
U1tr5PYBPEerqDbaY8BShNprqHlzKMqmYPqsSU16YjD2xdVeZNHrcMw=
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org