Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35392e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e35392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          K2m8IQt7MUZ1rK8gmNg2XVD0sKb490epxFa/aSa+s/8=
Subject key identifier:   BE:5A:2D:12:35:D0:92:92:1D:62:78:AE:C1:41:81:3D:71:0E:B1:BE
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       10C14A71F7F59A1C6F1C18CBF908B1288E140609
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35392e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262494
IP address blocks:        179.191.59.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:4a:71:f7:f5:9a:1c:6f:1c:18:cb:f9:08:b1:28:8e:14:06:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:35:2f:f4:d7:c7:3c:3f:3d:47:5f:74:1f:
                    13:6f:2d:d4:01:ea:67:4d:80:db:12:8f:4f:f4:d3:
                    3b:34:20:7a:3a:bd:10:67:5e:fb:78:ae:af:47:4f:
                    77:7a:cc:02:38:7b:63:c4:28:ac:73:17:8d:e4:b0:
                    a7:e8:02:77:6d:c3:24:6f:d3:1e:a7:0f:4e:ce:40:
                    46:c6:8d:1e:3f:30:60:0e:46:d1:90:cf:d7:33:f6:
                    a8:62:2b:94:ce:59:08:56:9a:ac:69:ae:6b:95:3a:
                    53:ae:b2:23:bc:c7:fe:db:32:7b:b9:84:48:45:cd:
                    36:12:c6:9d:2c:d0:66:c7:9f:ce:50:2a:db:4d:0b:
                    ef:50:12:64:b2:e8:28:b1:71:ec:80:96:f8:b9:fc:
                    ee:89:5c:9a:cd:79:d0:a5:50:28:fc:de:2d:bd:3c:
                    96:ff:09:92:4d:0d:c8:0c:93:f0:0d:fa:54:e6:76:
                    be:1e:ed:7b:3f:bb:6d:a4:44:ee:a6:c2:d8:2d:bc:
                    72:df:9d:7b:0d:b5:29:47:9b:9c:b9:3a:5f:85:a5:
                    4c:0a:6c:1b:14:46:82:f6:41:3d:e7:99:01:b8:52:
                    97:78:f2:39:02:f4:b5:0e:9c:a4:46:ac:93:d3:f3:
                    5a:2a:7b:9d:8e:d8:46:dd:35:c4:e4:ea:c0:c6:5b:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5A:2D:12:35:D0:92:92:1D:62:78:AE:C1:41:81:3D:71:0E:B1:BE
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:6d:92:f2:7d:09:bc:f6:ac:bf:eb:d2:c3:c4:8b:eb:50:
         96:09:4a:8d:2e:71:7f:d0:08:71:0d:b6:2b:0e:bf:0e:a1:e9:
         6b:7b:0d:31:ea:2d:b1:f1:19:93:77:11:33:73:af:c3:98:34:
         f4:9d:57:3a:c2:18:54:12:0f:fc:96:8b:96:22:67:e2:ad:ab:
         28:5b:1f:ef:4b:ce:d2:38:f4:32:8a:d3:f7:72:5d:10:05:7c:
         3a:2b:ac:13:07:d9:dd:6c:71:33:ca:7d:0d:1c:70:59:30:ed:
         f5:86:d8:94:02:aa:9f:00:97:ae:e7:90:04:1e:20:43:9c:a8:
         00:ff:03:4f:d0:0d:98:10:3c:cc:8d:85:ef:54:ef:15:f3:75:
         60:d6:fb:ad:8d:ba:13:16:6d:7f:d3:52:41:fb:1e:14:56:8e:
         83:af:fe:5f:a9:af:4a:be:2d:64:7a:bb:7b:df:38:31:f5:d6:
         80:c6:34:2d:be:03:b7:ed:51:33:57:da:ed:12:d8:ab:ba:83:
         a8:1d:fd:2d:29:c3:4d:4a:d1:c1:ea:58:1d:02:d6:8c:f2:c6:
         97:5b:29:63:aa:e7:77:88:98:63:6a:21:a1:48:e4:f1:b4:4e:
         4b:8a:68:96:d9:a1:a0:e9:2f:24:56:46:95:00:8d:44:3a:33:
         3f:3a:76:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org