Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36312e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          pMPuLQE+AhHjPQ73+eZAeX3nw29f5BoWs9ZXVIcI+Wc=
Subject key identifier:   3D:4A:3F:22:E2:BD:2E:68:68:A9:FC:6B:4B:E0:10:47:42:2A:6B:D6
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       737D02BBA0EDC1198E903C64BEA2E4642B74502E
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        179.191.61.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:02:bb:a0:ed:c1:19:8e:90:3c:64:be:a2:e4:64:2b:74:50:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:90:c4:e9:d3:c6:90:6f:fd:a4:9f:ae:ab:
                    69:ff:54:fa:35:30:51:45:04:20:1b:fc:a6:de:1d:
                    7e:e8:fd:be:33:8d:11:5f:f7:7d:25:cb:af:69:a7:
                    69:77:6b:0d:4e:ee:ca:77:49:57:97:43:c4:df:7a:
                    ec:d3:9f:0c:66:fd:be:43:c8:fc:e2:44:d3:57:0e:
                    46:88:6f:2f:35:53:9a:f9:31:b6:7c:03:5b:f9:26:
                    6b:d3:0d:e0:b1:79:af:98:15:44:96:4d:08:0f:f1:
                    67:fc:25:84:5b:22:a1:2d:15:34:bb:b5:13:0b:7b:
                    37:fa:98:c8:bb:e3:6b:4a:29:bc:4d:64:4e:9a:95:
                    90:3c:57:b8:f3:ac:68:0c:91:30:64:1b:03:b7:ad:
                    d1:a4:60:6b:11:ac:9c:44:f4:fb:9a:09:c0:8d:0b:
                    09:07:3f:42:9c:96:06:fa:6f:22:33:d7:c6:bd:6e:
                    19:c0:63:d7:d0:79:0f:1a:d3:5d:66:e3:bc:3a:c9:
                    b0:f8:2f:77:d4:9d:2a:4f:63:a7:5d:87:9b:23:8f:
                    25:8b:fa:dc:f6:7b:5d:23:f0:61:1d:d9:26:73:9e:
                    83:de:18:50:76:09:1c:b7:d0:20:56:da:19:f5:0d:
                    9d:26:44:76:b6:4a:a1:33:5f:7f:3a:08:95:a6:1f:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:3F:22:E2:BD:2E:68:68:A9:FC:6B:4B:E0:10:47:42:2A:6B:D6
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:8a:35:5b:2a:ed:96:99:fc:f2:62:51:19:84:49:11:c1:
         d7:51:9d:fe:e8:2d:a6:aa:a9:74:11:10:25:ac:d9:21:02:ed:
         7c:0b:1c:56:13:21:b9:5a:52:8a:74:6f:ff:51:0e:fa:e7:13:
         11:27:54:8e:5d:75:1b:9a:f4:5f:2b:b0:51:27:33:41:2b:9a:
         b2:df:73:26:dd:cb:40:17:9d:85:af:aa:aa:0c:dc:57:e7:10:
         24:25:fd:6f:a8:4f:4e:85:be:87:38:1b:d4:41:2a:20:ef:44:
         c0:d5:f4:f8:0e:54:47:7e:8b:cc:c5:af:e8:11:00:52:48:cd:
         66:c4:1f:65:cf:43:e4:4d:bd:53:ae:63:0b:c4:37:1d:7c:9a:
         51:d9:15:de:2a:3b:01:b5:d9:b8:a1:ff:ee:f0:3e:98:a8:df:
         05:04:2b:b0:71:e4:2a:ed:1b:d6:5c:3f:04:77:16:26:4d:6c:
         29:3e:6e:0a:8f:68:d3:38:bd:7a:00:93:66:91:05:b7:31:3e:
         7c:da:07:94:48:0a:f4:ea:52:f9:34:bd:ae:ca:08:43:9e:31:
         f9:8d:15:fa:a4:58:8e:cd:72:17:83:67:ea:ff:07:3d:d7:87:
         34:1b:dc:77:b0:2a:1b:d5:79:22:8e:38:92:7f:b7:b9:fe:69:
         68:07:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org