Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          xtyOzOWCamolJYBLdIV9Cr7RTc7g01SguXUJMq7REHY=
Subject key identifier:   3B:29:A9:BD:56:C1:21:D1:7B:67:0C:44:33:68:65:86:88:0B:6C:68
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       555D5B27C1AA71703D80E4D64E09C8C5E65AC9AA
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        179.191.63.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5d:5b:27:c1:aa:71:70:3d:80:e4:d6:4e:09:c8:c5:e6:5a:c9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:50:51:62:c1:6d:15:6a:9b:f1:0b:a3:5b:
                    10:77:ea:6c:86:10:b4:69:5e:4e:bb:f0:02:35:92:
                    6a:58:68:ac:23:f2:04:fb:db:40:6c:97:8b:dd:01:
                    17:f5:8f:5c:64:2b:38:ca:c2:3f:a6:60:9c:7d:f2:
                    34:e1:bd:99:04:e3:12:e2:30:d3:0d:58:ea:b5:f0:
                    b7:73:78:c7:78:83:0a:ee:d4:4f:42:4c:fb:bf:3c:
                    bc:74:81:1c:76:b9:3f:2c:0e:b1:f7:7d:64:db:1c:
                    45:5c:f6:89:9b:31:af:62:5c:af:5d:8f:e0:dd:eb:
                    bb:10:72:9f:31:88:f2:5c:ce:00:0f:f1:57:f7:b1:
                    aa:77:1d:94:80:3f:ca:ea:13:08:74:14:88:ff:6c:
                    ee:d0:65:0f:ce:0e:8a:3d:ff:d6:8e:98:44:10:b6:
                    dd:7c:a0:b6:31:1c:26:e5:a7:76:eb:6a:fb:73:7e:
                    0a:41:c4:46:c9:68:5e:d6:7d:7c:51:aa:38:ba:dc:
                    b5:f9:df:bb:29:d1:37:be:b8:56:e2:e9:b9:f1:ef:
                    68:45:94:9b:78:84:9e:24:9c:80:a7:b7:b5:1a:e5:
                    19:5f:48:22:f4:42:51:fe:65:20:90:fe:94:7c:c8:
                    7f:2d:8f:ba:32:a4:99:a0:85:88:79:c8:42:5d:6e:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:A9:BD:56:C1:21:D1:7B:67:0C:44:33:68:65:86:88:0B:6C:68
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:4e:1d:75:e3:6e:49:20:da:8a:51:a7:81:23:af:95:22:
         db:be:c5:b5:41:b7:bd:87:33:17:94:32:b3:b5:c7:4c:47:83:
         12:d7:e7:b1:ac:71:80:4c:79:b0:b7:5f:f4:33:df:a2:8c:4d:
         b4:4c:66:9d:02:17:b6:92:88:95:e0:f0:3d:c6:da:58:3f:24:
         1c:34:0a:a9:ed:94:f2:dc:83:0c:eb:69:84:8f:61:48:09:e5:
         3e:bf:cd:56:17:c7:8a:80:94:b9:86:58:65:ce:fe:bd:be:c7:
         4b:05:92:b8:45:53:a5:ab:ba:7b:96:e6:30:9c:f4:13:b0:94:
         dc:ea:1a:2b:9d:37:99:4e:89:d6:8d:a6:b0:72:c4:9d:44:b6:
         b4:24:70:89:7d:17:eb:93:64:03:51:24:b4:52:1a:0d:42:0e:
         65:fe:3c:bf:58:a6:ad:ca:a8:9c:5f:d4:a2:82:e3:9a:e0:ea:
         b7:d1:2c:81:e2:ea:f3:2b:55:7b:20:4e:1e:2e:29:97:70:b1:
         04:c8:81:da:5a:cc:6c:35:29:ac:c3:f5:a2:8c:d8:a6:8c:58:
         a9:5e:d9:8e:6e:0a:5f:5c:a2:dc:05:f9:0e:27:38:b0:83:96:
         5b:d8:30:9d:9e:7a:c7:31:15:95:85:d7:42:1b:ae:6e:c9:4a:
         77:c2:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org