Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          0U+ZSBrcQBa5sCrQ4bfsviaNk1gAyGzEYaYOJMZ4kdo=
Subject key identifier:   24:AB:73:52:72:77:33:41:60:5F:BE:46:B8:00:FF:2D:C9:A6:B5:21
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       0877EC8CD4B3FEB1F8F311DCB3194ABCA7596022
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        179.191.57.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:77:ec:8c:d4:b3:fe:b1:f8:f3:11:dc:b3:19:4a:bc:a7:59:60:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:d6:30:26:71:a0:96:25:80:f6:f8:8f:7b:
                    cb:4a:a8:fc:8f:bb:ed:39:65:6c:5c:31:fe:f0:c7:
                    ce:37:ac:bf:0c:0e:33:27:2c:cc:d2:51:65:16:4e:
                    ce:a7:24:93:40:4b:8f:ab:cf:f0:ba:5e:20:7c:4a:
                    9b:66:9d:3e:80:36:c7:64:7d:da:4c:b3:fb:23:8d:
                    0e:33:36:8c:38:fd:2a:b8:8c:e9:fc:45:ef:c8:c7:
                    41:84:be:69:fc:a5:85:05:f1:bd:cb:41:b5:a3:33:
                    a5:25:c5:9f:ae:67:85:f4:bf:69:fe:22:9a:8a:06:
                    aa:32:bf:07:64:6e:6c:b3:45:b7:a0:ae:1e:9c:76:
                    24:6a:fe:90:52:21:48:ac:f0:b3:b7:91:ef:fa:c9:
                    b4:b7:9f:a4:9a:7d:cb:8b:9a:3a:11:75:d6:29:4b:
                    ca:64:49:3c:c8:bb:8c:e5:cc:f2:e0:ff:ba:09:b7:
                    15:76:e5:57:04:f0:55:b1:c7:97:69:2d:82:6d:76:
                    62:9b:39:50:a1:a8:0c:66:bc:19:34:aa:1e:ab:34:
                    b5:17:b8:cf:a0:b6:f4:12:33:47:a4:a8:e0:f1:8e:
                    c9:5b:fc:4e:ac:67:cc:32:70:e8:8d:38:1a:3d:89:
                    9c:39:f5:db:a2:31:9c:22:87:10:c8:8e:3d:ec:fe:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AB:73:52:72:77:33:41:60:5F:BE:46:B8:00:FF:2D:C9:A6:B5:21
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:8e:2c:6a:55:ba:d8:33:b2:3c:b3:58:6c:b0:52:bb:b1:
         cd:8e:22:1f:43:eb:02:cd:00:5a:2f:dc:17:e1:41:af:11:99:
         c2:37:3f:08:0d:85:88:52:10:e6:24:0f:8f:ee:97:85:11:5f:
         9b:99:31:f3:40:4a:5f:5f:85:93:ad:09:33:4e:a9:de:0e:8f:
         21:93:22:a6:71:e5:13:69:4d:8b:38:91:17:9b:d3:41:12:e7:
         cc:09:fa:74:dc:7c:61:f4:1c:13:04:38:6c:34:b7:97:1d:a5:
         7a:7c:01:5c:f2:78:87:3e:1b:36:f4:e2:65:7e:bd:31:a6:9c:
         86:fb:1c:f4:03:64:ce:90:1b:bc:a9:87:b7:dc:40:ae:f1:19:
         5c:5a:77:f2:4d:b0:4d:46:40:6a:f1:a5:8d:0a:d5:b8:fa:10:
         f2:60:43:f0:72:89:9c:69:b2:db:7a:20:f0:72:62:1f:a7:23:
         98:91:0b:88:a7:8f:7b:9b:78:0f:17:2e:cc:9b:39:15:69:08:
         3b:cb:c0:3e:e1:02:4a:90:7b:19:ea:1e:98:42:ce:2d:f5:72:
         0a:b8:da:ff:c2:a2:33:9f:77:6b:08:49:eb:67:bd:f9:1e:e5:
         97:78:9c:33:42:61:89:2a:ae:ad:7c:fa:8b:35:4b:c3:7b:99:
         26:22:9d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org