Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          xJab1/6nnVAwO9kVFT0j4g5KDZZKKltyRUm4AFXCpZg=
Subject key identifier:   18:28:15:46:D2:DB:CE:3C:4F:5E:5B:BC:D5:E4:C3:06:B3:86:AF:FC
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       50B01B25F58EF160CBCD440C99C5E45E8A3ADD36
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        179.191.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b0:1b:25:f5:8e:f1:60:cb:cd:44:0c:99:c5:e4:5e:8a:3a:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:8a:e8:ca:89:e8:8b:4f:67:77:58:67:87:
                    98:85:a7:70:f7:80:eb:85:76:e7:fb:11:51:b4:aa:
                    e8:86:e3:50:9d:46:d3:8c:9f:e5:44:15:07:79:32:
                    4e:48:fb:ba:22:4d:d4:13:26:6d:b9:f2:2d:ae:72:
                    38:d1:f5:d4:ee:30:0d:4c:65:49:d2:23:f4:dd:0f:
                    5f:91:34:fd:e8:2c:cc:36:65:28:e0:28:88:e0:cf:
                    05:e0:05:9e:2d:e3:19:d2:88:ff:94:8b:6d:3c:fa:
                    5c:6a:0d:11:3f:29:ae:fc:43:e0:64:88:4f:a6:d7:
                    b2:c4:08:a9:56:46:06:6c:0b:de:55:15:33:57:82:
                    d3:e7:c4:c4:c2:a8:f7:e0:40:c6:7f:16:0e:7f:c3:
                    a2:fd:b1:f5:e7:4e:b2:9e:5c:ee:8b:d6:92:79:cf:
                    be:3b:10:1b:c2:11:d9:1a:aa:00:c5:f6:83:dc:7c:
                    90:5c:ba:9b:ea:6d:2f:52:46:1b:c0:ac:a0:4d:5e:
                    31:d1:5e:b9:6f:66:13:c8:9a:e3:43:07:c6:c7:77:
                    f7:9e:54:93:9a:1e:c0:84:4b:a8:44:40:02:85:a7:
                    de:d0:41:d7:54:32:1f:80:1d:85:31:fd:60:d4:f4:
                    a9:94:10:70:b6:00:58:f0:87:37:e2:4b:17:b2:ec:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:28:15:46:D2:DB:CE:3C:4F:5E:5B:BC:D5:E4:C3:06:B3:86:AF:FC
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:3a:64:65:91:e1:45:d5:d8:32:41:39:05:ce:b0:b5:4d:
         cb:89:a4:a0:52:c2:9f:ea:c0:2b:cd:9f:cf:48:4f:bc:8c:37:
         bc:c0:d5:95:d7:95:39:71:91:0c:5e:34:bb:8b:64:e8:e3:50:
         02:d8:aa:4c:a7:11:18:6a:cb:c3:61:0f:a9:0a:fa:f4:89:b0:
         6b:b9:e2:d3:79:97:97:6c:20:e3:a4:e8:bd:e3:d9:b2:e0:31:
         fd:d0:c4:b3:a3:55:cf:5c:9a:ce:1a:2e:80:ce:bb:c8:f0:55:
         82:fa:ba:35:18:de:0d:fb:2c:bc:06:25:ef:18:43:44:be:09:
         44:59:f0:a2:b6:3c:5b:72:07:ba:09:8b:bf:ce:41:8a:02:17:
         77:10:fa:d9:e2:47:7d:63:62:b2:ad:fd:19:9b:d5:fd:03:73:
         83:67:10:16:ab:30:01:7f:09:91:51:46:0e:31:43:a4:bf:1f:
         5b:ed:03:d7:07:ab:35:28:a1:6c:67:52:cc:6a:98:d5:e4:fa:
         2e:e4:46:0a:47:7e:a9:1a:03:7c:69:14:cf:8f:55:ea:61:2f:
         4d:ad:2c:ee:be:d9:a1:0a:81:5f:2d:d3:01:40:32:8c:32:47:
         da:1b:8b:5b:2e:81:87:d3:76:b2:56:78:48:c0:96:a0:48:47:
         e7:55:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org