Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          HTrLfSTcdiSAhAweyu77R8LgNlXPDnh1bNPPk+71L+M=
Subject key identifier:   F2:F2:45:E3:59:D8:F0:25:86:49:66:C7:C0:9F:B6:99:A1:1D:97:E5
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1EF9529D38B31738CB40401FB64BD7B4EFF52823
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262494
IP address blocks:        179.191.62.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f9:52:9d:38:b3:17:38:cb:40:40:1f:b6:4b:d7:b4:ef:f5:28:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:d6:ac:99:88:85:43:71:e4:d7:df:22:66:
                    15:4f:f6:80:21:1d:d8:34:f2:d3:02:d4:8b:3a:ad:
                    da:e6:9d:d7:45:4e:03:3f:34:d9:4e:28:c9:be:11:
                    fd:39:7f:58:26:22:5f:fa:6c:69:d1:89:cc:c6:4e:
                    cd:84:0d:70:49:24:32:3d:1e:c9:33:54:99:62:f2:
                    a8:d0:99:7f:3b:89:0e:00:4e:9a:13:3d:7b:c9:05:
                    48:aa:1b:3b:30:a0:3b:b6:ad:ac:4d:d6:1f:50:b2:
                    d2:24:61:1b:be:be:9e:c6:1e:de:1e:0d:dc:66:f1:
                    1a:0d:63:6c:19:32:1a:4e:e4:ff:db:1b:05:b0:b5:
                    1a:db:23:c4:fa:81:21:ed:a4:db:e2:c1:2c:65:90:
                    76:77:aa:9d:e8:f4:d0:a3:8e:29:e2:03:a5:f5:d6:
                    66:06:e1:96:99:75:ad:ad:8e:0f:c9:db:e8:cb:99:
                    82:25:60:5e:b9:c3:3f:55:cb:9b:09:be:c2:61:43:
                    4c:43:5b:b0:46:6f:16:bc:53:0c:fb:d0:75:06:02:
                    d0:e3:7d:0e:5d:b8:93:69:d4:38:e6:06:39:53:98:
                    64:ab:18:e4:e3:ce:b7:7a:ef:29:0d:66:d4:d4:04:
                    60:30:df:6b:0a:7c:09:01:0c:7b:04:a8:7c:ec:33:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F2:45:E3:59:D8:F0:25:86:49:66:C7:C0:9F:B6:99:A1:1D:97:E5
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:17:1c:3c:d9:a0:75:38:e3:9f:f5:dd:ae:4b:02:28:a2:3a:
         a6:e8:ff:36:bd:ad:32:fb:10:aa:4d:61:23:a5:65:66:20:51:
         af:02:0c:61:cd:dd:a1:cc:02:b5:ae:47:ae:9a:26:23:f5:7d:
         9a:5b:f5:73:c4:f0:f6:8a:01:63:12:1d:19:61:a2:b0:05:88:
         86:b5:26:b3:08:06:56:d7:52:fe:db:64:a8:e4:9f:cf:b3:44:
         58:1b:21:9d:d2:4b:52:df:df:2c:88:08:1f:6e:a4:27:a3:13:
         e6:78:fe:04:93:2a:91:bb:16:7b:76:83:f6:9a:0d:65:07:4e:
         01:67:4d:af:af:14:d1:c0:13:c3:eb:03:51:a3:32:77:55:51:
         09:16:03:08:ef:b9:17:03:cd:fb:bd:43:48:42:88:fe:2d:4f:
         69:26:b8:2b:16:7a:cf:0a:03:67:95:fd:20:18:4f:59:50:6d:
         6e:f5:fc:ff:97:0c:cc:2d:c1:5a:08:bc:c5:00:d7:53:22:62:
         2f:d5:87:50:61:cc:fb:41:2d:32:fb:ad:99:1d:d5:c3:67:92:
         bc:1c:7e:46:5d:f7:60:e0:54:46:83:5e:da:d8:8c:3b:99:56:
         55:6b:bc:9e:b7:d0:ed:69:cd:fb:de:11:cc:59:b9:c7:d5:86:
         4e:d5:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org