Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          srD1oGbZ2zjzbLjTY+XRSlxxa0bPNnAtBWZz0TTxi6U=
Subject key identifier:   A5:87:27:53:E5:9C:A3:55:C8:43:3D:04:2D:21:D7:7D:3F:51:10:AC
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       0B269B6DE69869E77D4FB26C5527BF6D8C8CC1C1
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        179.191.58.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:9b:6d:e6:98:69:e7:7d:4f:b2:6c:55:27:bf:6d:8c:8c:c1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:62:f5:42:89:0e:c8:c8:da:f1:df:4c:9e:
                    5e:0c:58:a9:a6:6c:d1:b2:12:c4:93:d2:89:b1:3b:
                    7b:0e:f1:0e:17:85:18:80:2f:6a:b8:e7:d6:64:89:
                    d8:59:6a:2b:5f:fb:14:e9:a1:1c:77:e9:0f:eb:a6:
                    21:1b:6d:63:1c:b1:6e:43:83:f9:32:63:77:9c:74:
                    3f:c7:8c:65:bf:99:15:67:30:64:36:47:29:73:52:
                    17:dd:3d:cf:f3:c0:db:8c:a3:26:ca:8c:18:86:45:
                    58:50:8f:4a:40:98:7d:76:73:2c:79:87:af:01:a2:
                    65:8f:a3:54:13:5d:22:18:36:64:60:f7:7d:9a:06:
                    7f:9e:3a:f3:8c:9d:f4:a3:ef:f9:c8:85:25:61:73:
                    35:22:10:83:61:e2:1d:8d:51:7f:fb:e9:10:c5:49:
                    2d:23:f1:73:fa:b4:23:65:83:c0:de:52:c7:2b:4b:
                    9d:43:b0:20:9b:cf:43:28:d4:52:bf:8e:48:7e:f9:
                    bb:e5:9f:c0:a4:4f:03:16:cf:1a:89:87:e9:e5:a3:
                    f2:5b:8a:16:d9:d5:11:66:f4:11:26:70:26:7b:23:
                    90:25:55:31:eb:49:21:dd:e7:0e:f4:0a:9b:af:28:
                    a9:9c:fd:e6:51:55:4b:25:f9:d0:03:e8:39:2f:58:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:87:27:53:E5:9C:A3:55:C8:43:3D:04:2D:21:D7:7D:3F:51:10:AC
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:db:25:6d:d1:c4:46:16:8d:70:2c:29:dc:5c:73:e0:8b:37:
         64:70:85:e2:5a:7f:ea:32:a8:e4:a7:fc:66:fe:b0:f2:94:5c:
         fb:72:79:55:02:30:21:de:99:82:58:f8:70:0c:0f:9d:36:e8:
         ab:e1:90:6e:4b:fd:c7:c4:3b:fa:6b:b3:3e:09:29:54:86:0a:
         d9:20:7f:9c:dc:9c:69:b8:59:7a:8e:43:57:0b:73:d2:1e:a3:
         ac:6c:e4:0d:dd:58:1f:f0:f0:8a:15:4b:ee:5e:ce:57:7c:b1:
         cc:11:bf:8c:2b:bc:e4:79:53:5a:5c:6f:6e:26:15:af:7a:24:
         90:6d:98:9d:47:0d:fd:84:17:3f:a9:88:84:78:b0:7a:8e:54:
         f0:cc:14:c3:ec:74:d2:ee:69:c6:95:99:87:91:41:94:29:ce:
         f4:48:4c:8c:d4:79:73:bf:8c:30:bc:4e:a8:6a:36:98:76:26:
         db:7a:f3:3f:bf:39:ba:95:75:d0:86:09:b0:95:e8:a5:90:a6:
         32:c1:8a:ac:9a:ba:b1:98:21:8a:eb:3e:6f:60:70:fc:76:24:
         fc:94:e9:ed:c0:aa:8e:3f:a8:4e:ce:7d:74:05:fc:43:19:cb:
         ce:56:df:34:e8:29:f5:90:bc:00:e0:cc:1f:27:5c:8d:33:fe:
         1b:cb:fe:c0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUCyabbeaYaed9T7JsVSe/bYyMwcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDZaFw0yNTA0MDMxOTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDAwNzYyRjU0Mjg5MEVDOEM4
REFGMURGNEM5RTVFMEM1OEE5QTY2Q0QxQjIxMkM0OTNEMjg5QjEzQjdCMEVGMTBF
MTc4NTE4ODAyRjZBQjhFN0Q2NjQ4OUQ4NTk2QTJCNUZGQjE0RTlBMTFDNzdFOTBG
RUJBNjIxMUI2RDYzMUNCMTZFNDM4M0Y5MzI2Mzc3OUM3NDNGQzc4QzY1QkY5OTE1
NjczMDY0MzY0NzI5NzM1MjE3REQzRENGRjNDMERCOENBMzI2Q0E4QzE4ODY0NTU4
NTA4RjRBNDA5ODdENzY3MzJDNzk4N0FGMDFBMjY1OEZBMzU0MTM1RDIyMTgzNjY0
NjBGNzdEOUEwNjdGOUUzQUYzOEM5REY0QTNFRkY5Qzg4NTI1NjE3MzM1MjIxMDgz
NjFFMjFEOEQ1MTdGRkJFOTEwQzU0OTJEMjNGMTczRkFCNDIzNjU4M0MwREU1MkM3
MkI0QjlENDNCMDIwOUJDRjQzMjhENDUyQkY4RTQ4N0VGOUJCRTU5RkMwQTQ0RjAz
MTZDRjFBODk4N0U5RTVBM0YyNUI4QTE2RDlENTExNjZGNDExMjY3MDI2N0IyMzkw
MjU1NTMxRUI0OTIxRERFNzBFRjQwQTlCQUYyOEE5OUNGREU2NTE1NTRCMjVGOUQw
MDNFODM5MkY1ODZGQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Adi9UKJDsjI2vHfTJ5eDFippmzRshLEk9KJsTt7DvEOF4UYgC9q
uOfWZInYWWorX/sU6aEcd+kP66YhG21jHLFuQ4P5MmN3nHQ/x4xlv5kVZzBkNkcp
c1IX3T3P88DbjKMmyowYhkVYUI9KQJh9dnMseYevAaJlj6NUE10iGDZkYPd9mgZ/
njrzjJ30o+/5yIUlYXM1IhCDYeIdjVF/++kQxUktI/Fz+rQjZYPA3lLHK0udQ7Ag
m89DKNRSv45Ifvm75Z/ApE8DFs8aiYfp5aPyW4oW2dURZvQRJnAmeyOQJVUx60kh
3ecO9AqbryipnP3mUVVLJfnQA+g5L1hvuQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKWHJ1PlnKNVyEM9BC0h130/URCsMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczOTJlMzEzOTMxMmUzNTM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
s786MA0GCSqGSIb3DQEBCwUAA4IBAQBS2yVt0cRGFo1wLCncXHPgizdkcIXiWn/q
Mqjkp/xm/rDylFz7cnlVAjAh3pmCWPhwDA+dNuir4ZBuS/3HxDv6a7M+CSlUhgrZ
IH+c3JxpuFl6jkNXC3PSHqOsbOQN3Vgf8PCKFUvuXs5XfLHMEb+MK7zkeVNaXG9u
JhWveiSQbZidRw39hBc/qYiEeLB6jlTwzBTD7HTS7mnGlZmHkUGUKc70SEyM1Hlz
v4wwvE6oajaYdibbevM/vzm6lXXQhgmwleilkKYywYqsmrqxmCGK6z5vYHD8diT8
lOntwKqOP6hOzn10BfxDGcvOVt806Cn1kLwA4MwfJ1yNM/4by/7A
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org