Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32312d3231203d3e20323632343934.roa
File:                     3137392e3139312e35362e302f32312d3231203d3e20323632343934.roa (raw, json)
Hash identifier:          Bd9IKl5VHma88sAXxWBoN0jisLBtLDB1EoSkCWQ6z4Q=
Subject key identifier:   C0:A9:B8:4E:52:11:97:64:06:27:72:A5:A0:B7:80:8F:97:15:7B:1B
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5C956D891E3B186960707C5E7DBE640F5C40580A
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32312d3231203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        179.191.56.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:95:6d:89:1e:3b:18:69:60:70:7c:5e:7d:be:64:0f:5c:40:58:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject: CN=3082010A0282010100BBFB5B5D37B1860E0CE8C7ABA9E7406AFEF727960B6A4CFB29CEE4C42107C385192C9718B9F9E62E96304376EFCF66C5384E65560A7BA07BCE351A5DE92E8BA4E0D9D0824C64112FAED5ED3B5DAF2B05D8C9A924F50A3AFEC1ACCDAD55B2BBCE60E6B5515FFEDA19F160E1F0E6E2EFF84D497259C98B1DDFE1E4BF96BC3508FA07CF9721D6879455A451482B0AEFC6E7FBA2EC10CD4D3ACE53F76A989CD273A220EC744B2EFFECAD6F92FDA9786FE41867EC6FA3BE78F3A30CE1B973F83D3F8C30C7C83DFEDB7A12DE6F56EED97471C4C9C104A481D4B85966D07932D4B15E2FB50BADDB62D1020F1DFE60F7BCD7E55E12E7B2B036D267544C41A847AA36B3530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:5b:5d:37:b1:86:0e:0c:e8:c7:ab:a9:e7:
                    40:6a:fe:f7:27:96:0b:6a:4c:fb:29:ce:e4:c4:21:
                    07:c3:85:19:2c:97:18:b9:f9:e6:2e:96:30:43:76:
                    ef:cf:66:c5:38:4e:65:56:0a:7b:a0:7b:ce:35:1a:
                    5d:e9:2e:8b:a4:e0:d9:d0:82:4c:64:11:2f:ae:d5:
                    ed:3b:5d:af:2b:05:d8:c9:a9:24:f5:0a:3a:fe:c1:
                    ac:cd:ad:55:b2:bb:ce:60:e6:b5:51:5f:fe:da:19:
                    f1:60:e1:f0:e6:e2:ef:f8:4d:49:72:59:c9:8b:1d:
                    df:e1:e4:bf:96:bc:35:08:fa:07:cf:97:21:d6:87:
                    94:55:a4:51:48:2b:0a:ef:c6:e7:fb:a2:ec:10:cd:
                    4d:3a:ce:53:f7:6a:98:9c:d2:73:a2:20:ec:74:4b:
                    2e:ff:ec:ad:6f:92:fd:a9:78:6f:e4:18:67:ec:6f:
                    a3:be:78:f3:a3:0c:e1:b9:73:f8:3d:3f:8c:30:c7:
                    c8:3d:fe:db:7a:12:de:6f:56:ee:d9:74:71:c4:c9:
                    c1:04:a4:81:d4:b8:59:66:d0:79:32:d4:b1:5e:2f:
                    b5:0b:ad:db:62:d1:02:0f:1d:fe:60:f7:bc:d7:e5:
                    5e:12:e7:b2:b0:36:d2:67:54:4c:41:a8:47:aa:36:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A9:B8:4E:52:11:97:64:06:27:72:A5:A0:B7:80:8F:97:15:7B:1B
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32312d3231203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:14:4d:b1:70:7d:c2:cf:75:2d:74:cb:dd:3b:79:6a:d7:d2:
         23:0b:09:80:52:02:61:85:0c:67:9b:75:3b:0c:74:98:03:d3:
         ea:eb:04:0a:b0:db:0f:c7:93:bf:8e:b1:ac:2c:9c:f5:ef:2f:
         63:71:80:5e:e3:d4:ac:42:ab:2e:d3:1d:a0:7c:e8:da:bf:cf:
         87:90:76:84:2d:43:16:9a:c5:ab:73:df:96:32:d3:59:d5:da:
         8f:c8:8e:2d:77:a6:08:cf:54:da:3c:09:42:8b:b9:aa:6d:fe:
         a7:f3:7d:84:85:05:14:7b:87:e0:c8:86:25:48:9b:86:c6:62:
         d7:65:e4:9f:1c:07:25:04:3d:0c:62:70:ce:3b:a0:6d:0b:e9:
         4d:27:aa:a2:31:7b:20:ef:97:d6:34:29:65:d0:96:be:f8:a5:
         2e:51:84:bf:51:f1:95:42:f1:b6:f3:e7:89:94:78:49:51:ad:
         a7:de:54:53:d2:f8:6b:bf:63:d4:24:c6:84:8e:d2:64:65:7c:
         94:45:a9:53:2f:7e:c8:b6:9c:e1:0f:2c:9b:51:9b:7f:58:f6:
         ca:50:02:9c:b6:8f:55:92:1e:99:35:f5:fa:ba:2b:d3:9f:4f:
         7a:11:4d:e1:00:c1:57:0a:77:7e:78:42:46:aa:2c:4a:56:38:
         f2:ed:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org