Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132352e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3132352e3132352e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          ZQnC7avh7APvLuT5rawicX5r5m87z4vIC+5zyNNuBHY=
Subject key identifier:   D4:24:7D:E9:02:8E:8B:AE:79:FB:D8:D8:1C:15:CF:2A:EA:8F:F5:BE
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2D0B9164E91B73D97331DB95A3C2C376FEF6A34B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132352e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        179.125.125.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0b:91:64:e9:1b:73:d9:73:31:db:95:a3:c2:c3:76:fe:f6:a3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:19:ff:ef:2e:d7:d9:ee:0d:9c:1b:7d:61:
                    90:ba:e6:1a:4e:a6:99:db:bb:73:17:2b:ee:30:a9:
                    07:c0:b1:85:b3:86:2b:d2:9b:fc:a1:2c:28:b7:fb:
                    6a:30:b1:4e:13:e8:70:c7:23:76:bb:9e:39:43:f2:
                    a1:a0:d3:30:1c:12:cf:b9:73:74:02:e3:a3:54:3e:
                    4a:8d:2e:99:16:0b:83:aa:0e:46:7a:cb:10:b7:21:
                    13:95:14:62:fe:32:c7:35:74:79:e1:af:55:30:01:
                    68:a7:bd:45:e3:97:7b:1d:c7:df:4d:73:e9:36:d5:
                    58:b9:9f:02:51:ab:29:d0:50:91:c9:2b:fc:fc:d8:
                    51:c5:4e:18:33:d5:5b:8a:f9:b0:bf:33:32:d6:85:
                    b0:8a:9d:6f:bf:02:3f:e8:f6:3a:d2:23:b5:dd:0f:
                    15:dd:77:b0:be:c7:3c:15:b5:e6:53:d2:5c:ad:29:
                    1d:0d:5e:ce:c2:bf:32:8f:4c:a9:f6:eb:c9:b3:67:
                    5a:56:09:fa:9f:0c:75:5a:ce:15:da:64:9b:76:2f:
                    97:fe:07:14:f3:4e:72:d0:7b:3f:40:95:bc:12:de:
                    3d:c5:e5:3b:34:3e:cd:35:28:02:76:f3:1b:e6:0c:
                    ff:fe:78:a5:f5:bf:e2:7b:98:42:2a:00:59:1b:99:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:7D:E9:02:8E:8B:AE:79:FB:D8:D8:1C:15:CF:2A:EA:8F:F5:BE
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132352e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:16:4a:c8:1b:e3:f8:f0:be:d1:6a:f4:e2:52:86:06:5f:
         48:ea:3d:d0:e9:af:5f:46:7f:e9:ac:01:b5:c0:f8:ba:fa:0d:
         05:3d:33:7b:98:77:f7:21:00:26:32:ac:06:27:e5:7a:90:dc:
         66:02:79:39:02:a0:da:82:18:a4:9c:1e:fd:88:57:bd:f5:a9:
         c5:72:b1:99:93:73:b5:86:76:57:76:4d:af:b7:f7:ea:35:94:
         0b:33:aa:c7:2c:02:3b:c1:2d:de:cd:45:f3:1a:40:03:84:5b:
         e3:43:7e:58:2a:d8:74:bc:1f:c5:db:03:f4:2f:0e:a5:06:35:
         7e:7c:37:eb:06:bd:72:f1:3c:0a:ae:7e:41:ea:0f:89:07:d5:
         7d:8e:82:7d:01:03:f1:6b:1a:ba:40:a2:7c:b7:55:61:c8:d8:
         f0:e5:7f:20:48:19:94:22:d2:61:62:11:7e:3d:a7:b3:f4:aa:
         43:41:98:7b:67:2c:c6:4d:59:f5:93:61:95:ea:3f:58:3a:fc:
         8c:cb:c5:90:02:ff:f0:7d:c7:31:85:5c:34:28:99:6d:6c:53:
         49:d6:cf:52:3a:ec:a6:f4:5c:fc:b8:5b:ec:0b:6f:6d:aa:ff:
         75:8b:eb:a5:ff:59:68:29:c4:2a:c1:7f:2d:c6:8e:54:99:d8:
         37:f6:78:e5
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIULQuRZOkbc9lzMduVo8LDdv72o0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDNaFw0yNTA0MDMxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRCNDE5RkZFRjJFRDdEOUVF
MEQ5QzFCN0Q2MTkwQkFFNjFBNEVBNjk5REJCQjczMTcyQkVFMzBBOTA3QzBCMTg1
QjM4NjJCRDI5QkZDQTEyQzI4QjdGQjZBMzBCMTRFMTNFODcwQzcyMzc2QkI5RTM5
NDNGMkExQTBEMzMwMUMxMkNGQjk3Mzc0MDJFM0EzNTQzRTRBOEQyRTk5MTYwQjgz
QUEwRTQ2N0FDQjEwQjcyMTEzOTUxNDYyRkUzMkM3MzU3NDc5RTFBRjU1MzAwMTY4
QTdCRDQ1RTM5NzdCMURDN0RGNEQ3M0U5MzZENTU4Qjk5RjAyNTFBQjI5RDA1MDkx
QzkyQkZDRkNEODUxQzU0RTE4MzNENTVCOEFGOUIwQkYzMzMyRDY4NUIwOEE5RDZG
QkYwMjNGRThGNjNBRDIyM0I1REQwRjE1REQ3N0IwQkVDNzNDMTVCNUU2NTNEMjVD
QUQyOTFEMEQ1RUNFQzJCRjMyOEY0Q0E5RjZFQkM5QjM2NzVBNTYwOUZBOUYwQzc1
NUFDRTE1REE2NDlCNzYyRjk3RkUwNzE0RjM0RTcyRDA3QjNGNDA5NUJDMTJERTNE
QzVFNTNCMzQzRUNEMzUyODAyNzZGMzFCRTYwQ0ZGRkU3OEE1RjVCRkUyN0I5ODQy
MkEwMDU5MUI5OTRCNkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxLQZ/+8u19nuDZwbfWGQuuYaTqaZ27tzFyvuMKkHwLGFs4Yr0pv8
oSwot/tqMLFOE+hwxyN2u545Q/KhoNMwHBLPuXN0AuOjVD5KjS6ZFguDqg5GessQ
tyETlRRi/jLHNXR54a9VMAFop71F45d7HcffTXPpNtVYuZ8CUasp0FCRySv8/NhR
xU4YM9VbivmwvzMy1oWwip1vvwI/6PY60iO13Q8V3Xewvsc8FbXmU9JcrSkdDV7O
wr8yj0yp9uvJs2daVgn6nwx1Ws4V2mSbdi+X/gcU805y0Hs/QJW8Et49xeU7ND7N
NSgCdvMb5gz//nil9b/ie5hCKgBZG5lLbwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FNQkfekCjouuefvY2BwVzyrqj/W+MB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczOTJlMzEzMjM1MmUzMTMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzfX0wDQYJKoZIhvcNAQELBQADggEBAKy6FkrIG+P48L7RavTiUoYGX0jqPdDp
r19Gf+msAbXA+Lr6DQU9M3uYd/chACYyrAYn5XqQ3GYCeTkCoNqCGKScHv2IV731
qcVysZmTc7WGdld2Ta+39+o1lAszqscsAjvBLd7NRfMaQAOEW+NDflgq2HS8H8Xb
A/QvDqUGNX58N+sGvXLxPAqufkHqD4kH1X2Ogn0BA/FrGrpAony3VWHI2PDlfyBI
GZQi0mFiEX49p7P0qkNBmHtnLMZNWfWTYZXqP1g6/IzLxZAC//B9xzGFXDQomW1s
U0nWz1I67Kb0XPy4W+wLb22q/3WL66X/WWgpxCrBfy3GjlSZ2Df2eOU=
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org