Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          cJhiGNxsmJQLRCamDc52PJUenHADzAxXoFaypvz0Js4=
Subject key identifier:   6E:2D:8D:D8:B9:35:A2:E2:08:D3:D3:E2:0D:A3:B1:E4:69:3E:AD:3F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5B1F26866A4829815EFF1C6EC80F08E52DFA9203
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        179.191.56.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1f:26:86:6a:48:29:81:5e:ff:1c:6e:c8:0f:08:e5:2d:fa:92:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject: CN=3082010A02820101009D7E4849398288EB2C11CFC676B12435A6AB6222BE55592FD2EA91502732EAB3076476B87772629DAA590EB3B37E99E38D9F458EBCD8D649093F4D8D8EE7922C0B7293E63EAAD334344B3E8681AD2A77E8F383EC1BEE7863FC86E44F09EBE80D5720C091EEC53B1F620D91EA0D56C51208CFE37BC5986F23495C6719307D5CDCDB1993399DAF06D83921B6CE5981D4570AAA66CE28B0BA1AF4845D4339DBEAEBFED808F8573DD3962F09639A5E9BA1C70AB61100D8E18238BDA975439EDC380D740E46C891B55D02F84832199C6A7CAFCEA020867B08DA9F984571738880F588CCF375C1638C1767432433BF88417F4466F1090F80D64D477524923A61DB6ED30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:48:49:39:82:88:eb:2c:11:cf:c6:76:b1:
                    24:35:a6:ab:62:22:be:55:59:2f:d2:ea:91:50:27:
                    32:ea:b3:07:64:76:b8:77:72:62:9d:aa:59:0e:b3:
                    b3:7e:99:e3:8d:9f:45:8e:bc:d8:d6:49:09:3f:4d:
                    8d:8e:e7:92:2c:0b:72:93:e6:3e:aa:d3:34:34:4b:
                    3e:86:81:ad:2a:77:e8:f3:83:ec:1b:ee:78:63:fc:
                    86:e4:4f:09:eb:e8:0d:57:20:c0:91:ee:c5:3b:1f:
                    62:0d:91:ea:0d:56:c5:12:08:cf:e3:7b:c5:98:6f:
                    23:49:5c:67:19:30:7d:5c:dc:db:19:93:39:9d:af:
                    06:d8:39:21:b6:ce:59:81:d4:57:0a:aa:66:ce:28:
                    b0:ba:1a:f4:84:5d:43:39:db:ea:eb:fe:d8:08:f8:
                    57:3d:d3:96:2f:09:63:9a:5e:9b:a1:c7:0a:b6:11:
                    00:d8:e1:82:38:bd:a9:75:43:9e:dc:38:0d:74:0e:
                    46:c8:91:b5:5d:02:f8:48:32:19:9c:6a:7c:af:ce:
                    a0:20:86:7b:08:da:9f:98:45:71:73:88:80:f5:88:
                    cc:f3:75:c1:63:8c:17:67:43:24:33:bf:88:41:7f:
                    44:66:f1:09:0f:80:d6:4d:47:75:24:92:3a:61:db:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2D:8D:D8:B9:35:A2:E2:08:D3:D3:E2:0D:A3:B1:E4:69:3E:AD:3F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:42:43:59:93:a0:e0:12:84:b7:9c:04:c8:24:7c:dd:fa:
         9e:5b:e1:e3:30:99:60:0d:65:ad:7d:48:1b:5e:ba:b9:87:13:
         92:79:ce:b8:69:20:69:73:ba:4b:78:9a:b5:3b:5c:18:14:c6:
         66:ce:eb:77:28:60:2f:7c:92:82:6b:e3:61:25:66:ec:a3:e8:
         36:29:2a:da:25:12:d1:e3:ce:22:92:c8:eb:9f:66:c2:30:53:
         db:26:2f:cd:ca:f4:50:2b:48:06:d6:b6:73:b1:fd:70:5b:ae:
         28:08:2c:2d:b7:a8:23:6c:9c:60:30:34:88:17:a7:71:31:fc:
         a3:cc:48:a6:35:2e:c1:fc:d1:01:4d:a9:c3:fb:03:aa:71:93:
         7e:79:2b:3f:66:73:db:e4:17:ee:e4:4f:67:19:91:dd:07:3c:
         4b:7b:6e:04:9b:1c:8f:cf:55:f4:a0:52:9b:8f:5d:a1:cc:16:
         92:b0:3c:a5:86:c5:8c:11:8f:9c:d8:10:a4:17:dd:4b:b0:ef:
         e7:f8:7b:bf:9e:c4:9c:f3:07:dd:d7:8c:c5:43:25:8f:71:8c:
         c7:d4:4e:2c:20:34:a4:f6:9f:b1:f4:b5:be:76:0e:a0:95:c9:
         e8:f5:77:f8:15:68:eb:c5:3a:ee:a4:eb:26:ef:36:38:02:25:
         2e:ea:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org