Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35382e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e35382e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          lc2Nc+yp6VDu51hwQTeCGCFrRBPJlmK3t1jq2Svrt4g=
Subject key identifier:   D2:80:5E:CF:44:87:0E:9C:BC:C3:D6:E5:4F:B1:F4:24:AA:3A:7D:E6
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       20388E911E2072FCD73CF92BBDD92D0D135C7BA8
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35382e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        179.191.58.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:38:8e:91:1e:20:72:fc:d7:3c:f9:2b:bd:d9:2d:0d:13:5c:7b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:eb:40:dc:51:3f:68:d9:fc:de:82:f5:9e:
                    1d:0a:5a:70:79:e5:1c:16:ec:92:15:74:11:8d:24:
                    3d:43:34:9d:fd:23:10:eb:e9:5b:5b:a9:1c:d0:0e:
                    1e:3a:7c:24:47:cc:65:08:0b:04:79:06:7d:ae:8f:
                    c7:f9:ee:d4:a4:d0:9d:8f:a1:e4:79:5d:d8:c4:68:
                    e8:12:72:cd:b0:f6:d7:b4:c8:18:0b:39:b9:46:d6:
                    50:ce:80:89:2e:2b:d6:a3:cc:5a:ef:ad:9b:a3:a1:
                    f6:30:60:1c:6e:b3:7d:7a:e8:58:c4:16:53:53:2f:
                    c7:f1:65:29:b6:17:34:ef:df:8b:43:83:e4:f9:10:
                    0f:b8:20:2a:c1:e1:f7:a6:28:aa:16:02:90:37:de:
                    de:e3:02:69:25:22:45:06:ac:21:b4:f4:5a:f1:05:
                    1d:7c:fa:0d:cf:58:69:b0:af:a6:41:83:46:3e:ed:
                    07:b3:8c:36:83:f9:fe:89:f5:5c:c3:8b:00:2b:29:
                    02:cc:64:c6:37:50:63:b7:dd:05:ec:13:d8:a6:f8:
                    91:f8:87:0d:ae:e2:b2:df:02:9f:2c:d0:e3:6f:0a:
                    63:36:eb:2a:1f:3e:76:58:fb:72:dc:36:c9:9f:7d:
                    74:0d:c2:d5:42:2d:32:54:dc:f9:f4:03:be:fa:4c:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:5E:CF:44:87:0E:9C:BC:C3:D6:E5:4F:B1:F4:24:AA:3A:7D:E6
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35382e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:26:7c:df:0b:d6:b7:1d:cc:21:72:bb:84:3b:ca:4f:ad:60:
         c4:c9:d5:56:f3:5a:5d:0b:b1:fa:9c:9d:e6:a1:71:33:2e:2d:
         bc:39:c1:fb:9b:dd:6a:68:94:97:a8:38:09:e5:f5:9e:f5:56:
         b1:d4:b3:fe:6c:9c:26:c1:3c:17:2d:10:1c:2c:94:05:ed:88:
         34:ec:9e:18:82:74:c4:d7:7f:e9:70:c5:f5:5e:fe:5e:bf:d3:
         2f:54:d5:d3:cb:94:b8:e1:e6:bd:48:3d:4d:6f:d1:fd:bc:36:
         e9:bb:3b:51:d7:b3:55:04:f3:db:02:45:19:dc:7b:73:68:7c:
         0b:ec:d8:54:fa:53:3c:68:38:f5:1a:9e:cf:c3:45:01:0c:1d:
         30:9f:f7:33:a3:8e:25:b6:ff:5e:01:d3:b9:de:93:4d:c9:a9:
         3e:cf:90:0e:8f:c4:e0:3e:e8:5b:35:d2:32:2d:76:96:dd:90:
         3a:6f:30:b9:9d:55:fe:d9:6e:ea:7b:d4:13:81:c8:3f:dc:59:
         71:12:97:a2:fe:e9:90:11:02:4f:aa:5d:ba:ae:da:6a:1f:2d:
         0f:c5:8e:e1:68:f1:1e:48:c5:ae:5e:bb:7a:7e:06:36:d1:4c:
         ca:23:ad:b8:e8:ae:b0:88:92:c6:b7:fe:92:b0:05:99:5c:ad:
         8e:4b:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org