Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          zpkGA9gasiSJyEMoDsM1K7JgAwyh2rfYlOiYf6sy3/k=
Subject key identifier:   E9:EA:B2:E3:E1:54:12:FE:EC:68:41:85:90:62:F4:F9:51:05:4D:09
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       0DB387C2C8343713DC49B4E7401EAA63E4D7E501
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        179.191.60.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b3:87:c2:c8:34:37:13:dc:49:b4:e7:40:1e:aa:63:e4:d7:e5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:fb:96:10:de:7e:42:d5:20:5d:80:ec:70:
                    62:ac:52:9a:4d:7d:3a:7a:d1:84:3e:f9:25:0c:2a:
                    51:d4:d3:5f:06:3d:e9:98:d7:aa:a0:70:81:30:66:
                    fe:ce:79:a6:c8:65:8c:88:f9:bb:3b:a0:e8:96:0a:
                    4c:33:ab:3e:df:50:34:7f:f8:93:c4:2e:bd:f9:5f:
                    b6:eb:67:86:60:87:74:6e:23:fa:7f:55:a2:12:ae:
                    79:19:80:3f:fd:14:94:54:7c:04:71:e6:30:8f:7e:
                    ec:c0:03:7d:8c:27:66:80:a6:82:27:11:24:d6:61:
                    7b:7f:54:d9:b2:aa:f4:4d:e4:f0:8c:13:66:98:3c:
                    b8:0c:a9:2b:ee:ae:37:f5:bf:e9:a1:0b:74:34:f4:
                    af:1b:8f:e5:2f:03:11:8f:eb:23:7a:b7:1a:4b:00:
                    31:12:03:d8:9c:9a:34:b8:8a:f0:5e:1f:60:6b:25:
                    74:08:49:a5:a8:35:bc:6a:34:61:36:58:d3:8b:85:
                    01:95:44:d4:94:85:aa:25:4a:96:8f:43:06:41:29:
                    d9:9a:c2:92:31:45:1b:51:a6:43:85:5b:77:4e:2c:
                    8a:72:9a:cc:d1:ed:00:70:77:11:d4:55:57:b5:c8:
                    e5:52:57:d2:a5:88:92:8f:80:e5:77:21:b8:b3:11:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:B2:E3:E1:54:12:FE:EC:68:41:85:90:62:F4:F9:51:05:4D:09
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:60:5c:5a:d8:9f:7e:50:38:8a:8d:f3:53:8f:0b:94:b5:
         04:c8:9a:82:21:35:9f:dc:f4:87:c4:37:6d:ab:0b:9f:57:89:
         41:67:39:55:cc:96:7b:3d:36:76:bb:20:9b:46:fe:fd:5a:7c:
         c1:02:e3:a7:e9:fa:63:0f:25:17:dc:61:95:76:77:45:a2:fd:
         bc:3d:28:8a:1d:88:2e:df:34:27:24:b8:0f:03:85:37:c8:b3:
         14:0b:6b:1a:9b:73:d7:f7:e3:74:f5:52:60:4d:ca:3c:00:01:
         65:42:bc:52:ab:e6:e2:9e:2d:1f:72:99:3d:ba:fb:1b:2e:7d:
         f7:9d:28:12:29:97:fd:09:a2:ff:7c:a6:47:b5:48:c3:5a:d5:
         06:92:6e:e5:f9:1b:96:83:6b:84:ac:97:32:b2:6b:d1:a0:d1:
         36:5c:94:3b:ce:2c:32:f7:c7:9e:cd:a1:76:d5:cb:9d:cf:f3:
         5c:e6:4c:61:9b:d1:bb:3e:6a:b5:fc:cd:ef:b0:46:b5:1a:4d:
         4a:6f:5b:53:84:32:15:a0:f9:f6:dc:1e:c2:98:cd:6e:cb:48:
         9e:fd:c5:b0:33:ac:10:24:58:9b:6e:a9:e8:ff:55:42:ca:97:
         d5:42:a5:ed:38:79:56:1c:f3:90:c3:a8:f9:ef:6e:1a:5c:0b:
         d1:06:4c:06
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDbOHwsg0NxPcSbTnQB6qY+TX5QEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDJaFw0yNTA0MDMxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VDNEZCOTYxMERFN0U0MkQ1
MjA1RDgwRUM3MDYyQUM1MjlBNEQ3RDNBN0FEMTg0M0VGOTI1MEMyQTUxRDREMzVG
MDYzREU5OThEN0FBQTA3MDgxMzA2NkZFQ0U3OUE2Qzg2NThDODhGOUJCM0JBMEU4
OTYwQTRDMzNBQjNFREY1MDM0N0ZGODkzQzQyRUJERjk1RkI2RUI2Nzg2NjA4Nzc0
NkUyM0ZBN0Y1NUEyMTJBRTc5MTk4MDNGRkQxNDk0NTQ3QzA0NzFFNjMwOEY3RUVD
QzAwMzdEOEMyNzY2ODBBNjgyMjcxMTI0RDY2MTdCN0Y1NEQ5QjJBQUY0NERFNEYw
OEMxMzY2OTgzQ0I4MENBOTJCRUVBRTM3RjVCRkU5QTEwQjc0MzRGNEFGMUI4RkU1
MkYwMzExOEZFQjIzN0FCNzFBNEIwMDMxMTIwM0Q4OUM5QTM0Qjg4QUYwNUUxRjYw
NkIyNTc0MDg0OUE1QTgzNUJDNkEzNDYxMzY1OEQzOEI4NTAxOTU0NEQ0OTQ4NUFB
MjU0QTk2OEY0MzA2NDEyOUQ5OUFDMjkyMzE0NTFCNTFBNjQzODU1Qjc3NEUyQzhB
NzI5QUNDRDFFRDAwNzA3NzExRDQ1NTU3QjVDOEU1NTI1N0QyQTU4ODkyOEY4MEU1
NzcyMUI4QjMxMTg2QUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzsT7lhDefkLVIF2A7HBirFKaTX06etGEPvklDCpR1NNfBj3pmNeq
oHCBMGb+znmmyGWMiPm7O6DolgpMM6s+31A0f/iTxC69+V+262eGYId0biP6f1Wi
Eq55GYA//RSUVHwEceYwj37swAN9jCdmgKaCJxEk1mF7f1TZsqr0TeTwjBNmmDy4
DKkr7q439b/poQt0NPSvG4/lLwMRj+sjercaSwAxEgPYnJo0uIrwXh9gayV0CEml
qDW8ajRhNljTi4UBlUTUlIWqJUqWj0MGQSnZmsKSMUUbUaZDhVt3TiyKcprM0e0A
cHcR1FVXtcjlUlfSpYiSj4DldyG4sxGGrwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOnqsuPhVBL+7GhBhZBi9PlRBU0JMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczOTJlMzEzOTMxMmUzNjMw
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
s788MA0GCSqGSIb3DQEBCwUAA4IBAQCaLGBcWtifflA4io3zU48LlLUEyJqCITWf
3PSHxDdtqwufV4lBZzlVzJZ7PTZ2uyCbRv79WnzBAuOn6fpjDyUX3GGVdndFov28
PSiKHYgu3zQnJLgPA4U3yLMUC2sam3PX9+N09VJgTco8AAFlQrxSq+bini0fcpk9
uvsbLn33nSgSKZf9CaL/fKZHtUjDWtUGkm7l+RuWg2uErJcysmvRoNE2XJQ7ziwy
98eezaF21cudz/Nc5kxhm9G7Pmq1/M3vsEa1Gk1Kb1tThDIVoPn23B7CmM1uy0ie
/cWwM6wQJFibbqno/1VCypfVQqXtOHlWHPOQw6j5724aXAvRBkwG
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org