Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          Y+DF23UCZdIfHBx/FW3oLsyM5iszGNnkZJ/y3LZa9/I=
Subject key identifier:   D1:53:BB:28:3C:33:2B:61:09:1B:8C:34:F1:CA:DC:51:F8:E3:DF:2F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       44ACFEA4FC5BE91E1089E6700C1D682EC89244D0
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:04 +0000
ROA not before:           Wed 03 Apr 2024 18:55:04 +0000
ROA not after:            Thu 03 Apr 2025 19:00:04 +0000
asID:                     262494
IP address blocks:        179.191.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ac:fe:a4:fc:5b:e9:1e:10:89:e6:70:0c:1d:68:2e:c8:92:44:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:04 2024 GMT
            Not After : Apr  3 19:00:04 2025 GMT
        Subject: CN=3082010A0282010100DB5CF20F8AAA05C4C19B61601B97F47A92A7841AC28E3BBB93EE7A95A18AD6E7255B704A090CF370B8075DA73EC2E8571AB9D1FD55870615EF36F0EAF3BA495C2B5946D449F3D3423DB3C2D9BCDA530467CC6B655C74060E124B7F90BB46F301D71C419754AB20995D292FBFABA80FA54B6C66368CECCB2D1EFEC12D0D014158AD1885D5AFA95DD2491E09E0F00EB4134290728A5DE0F476C7445BFADB4B7051BA1FDFC99AE681CAB3F7BD59B72093E665A70D76751380D2BD7742FA6564B61E300119D13522F2C97A262DADB88BFF6CAA88AE4BEA716ACF26ECF7D736F9699EE0021C8FE27F96E0F8B9A873DDCED4B5BA79562F0B4F78D27E83719F4322F7430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:f2:0f:8a:aa:05:c4:c1:9b:61:60:1b:97:
                    f4:7a:92:a7:84:1a:c2:8e:3b:bb:93:ee:7a:95:a1:
                    8a:d6:e7:25:5b:70:4a:09:0c:f3:70:b8:07:5d:a7:
                    3e:c2:e8:57:1a:b9:d1:fd:55:87:06:15:ef:36:f0:
                    ea:f3:ba:49:5c:2b:59:46:d4:49:f3:d3:42:3d:b3:
                    c2:d9:bc:da:53:04:67:cc:6b:65:5c:74:06:0e:12:
                    4b:7f:90:bb:46:f3:01:d7:1c:41:97:54:ab:20:99:
                    5d:29:2f:bf:ab:a8:0f:a5:4b:6c:66:36:8c:ec:cb:
                    2d:1e:fe:c1:2d:0d:01:41:58:ad:18:85:d5:af:a9:
                    5d:d2:49:1e:09:e0:f0:0e:b4:13:42:90:72:8a:5d:
                    e0:f4:76:c7:44:5b:fa:db:4b:70:51:ba:1f:df:c9:
                    9a:e6:81:ca:b3:f7:bd:59:b7:20:93:e6:65:a7:0d:
                    76:75:13:80:d2:bd:77:42:fa:65:64:b6:1e:30:01:
                    19:d1:35:22:f2:c9:7a:26:2d:ad:b8:8b:ff:6c:aa:
                    88:ae:4b:ea:71:6a:cf:26:ec:f7:d7:36:f9:69:9e:
                    e0:02:1c:8f:e2:7f:96:e0:f8:b9:a8:73:dd:ce:d4:
                    b5:ba:79:56:2f:0b:4f:78:d2:7e:83:71:9f:43:22:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:BB:28:3C:33:2B:61:09:1B:8C:34:F1:CA:DC:51:F8:E3:DF:2F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:23:76:7e:32:01:48:5f:62:fe:07:8f:7f:6c:5f:e1:da:
         ab:76:ae:26:ce:15:20:d1:a1:a1:64:f1:b2:ec:ac:93:c7:1a:
         a9:55:d2:53:23:80:bc:bd:be:c6:e3:6b:72:f4:5f:2b:75:2a:
         c9:5d:52:47:7b:54:69:c4:e6:4b:3c:9c:3a:14:27:44:ba:4e:
         ea:cb:58:f8:8a:59:99:69:ef:12:6a:33:d3:f2:10:9e:3e:ff:
         14:df:2a:a5:f6:10:d7:47:1b:56:94:34:ce:67:5f:72:81:12:
         83:ac:bf:47:2d:83:64:79:86:d8:c8:4b:6b:4d:83:39:77:aa:
         61:4e:2e:b9:69:91:6f:42:81:4a:b5:0d:6c:94:60:a3:c7:41:
         b3:99:01:b3:f5:d6:7d:76:16:29:9b:68:e6:78:1b:d9:a3:94:
         5f:6f:84:98:54:a5:6e:d1:b5:05:0c:5a:3b:10:57:65:a2:db:
         67:49:ba:aa:0f:5a:c2:3f:05:25:60:12:28:f0:54:92:e2:bb:
         19:ba:c2:46:61:18:84:00:65:a6:8d:84:0e:56:26:9d:d1:ea:
         cf:e7:dd:29:7c:b0:1a:e1:dd:38:2f:6c:05:79:2d:4f:5b:3f:
         0e:a6:80:ab:cb:d0:61:4b:c3:79:95:f9:fd:09:97:c3:28:dd:
         c7:4f:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org