Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa
File:                     34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          zeXNE5vlVLEGqCPp9Xfw4yvYRFK8vHbTq5nWUcKfWgs=
Subject key identifier:   DA:94:FB:C9:42:6B:CD:C6:AF:42:54:41:44:0B:DA:5D:A7:1E:45:B7
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1D5D048AC6EFDC13F2CEEBF17697C5155E634031
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 10 Apr 2024 11:25:51 +0000
ROA not before:           Wed 10 Apr 2024 11:20:51 +0000
ROA not after:            Thu 10 Apr 2025 11:25:51 +0000
asID:                     262494
IP address blocks:        45.179.112.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5d:04:8a:c6:ef:dc:13:f2:ce:eb:f1:76:97:c5:15:5e:63:40:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 10 11:20:51 2024 GMT
            Not After : Apr 10 11:25:51 2025 GMT
        Subject: CN=3082010A0282010100D47AF02080764024EA91CD31988726C6AE668D0782D6FC793ED50424AF4C68C28A26128434C68B4532C1830527B000039AB4EE7BC86C6C0112305B45048F3AA08DFB7318924D63E2A59951DCD0B7420758C15F356FF9E70022CFDCD25896104B3B266E008B74C6CC67058266CD469DEE9F00769FFEF2E1D392CF8F89518EDA9BED778D48F78AEF925E44572365408B016AA8988D86FAE6DD811ECDD7CD4E7E8B0BDC91BBDA03A6858A5D0937F46122096BC19FD9EB2EFC4ADC2C18D11FBBCDC9E7FC84DF88F2EE81F404CF053966F501FE286BEA7F07238E3FFA486305F2DE2481558440A127044861AD90690345B7785C7C5EF1B22BAED1A5A43309756BA90D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:f0:20:80:76:40:24:ea:91:cd:31:98:87:
                    26:c6:ae:66:8d:07:82:d6:fc:79:3e:d5:04:24:af:
                    4c:68:c2:8a:26:12:84:34:c6:8b:45:32:c1:83:05:
                    27:b0:00:03:9a:b4:ee:7b:c8:6c:6c:01:12:30:5b:
                    45:04:8f:3a:a0:8d:fb:73:18:92:4d:63:e2:a5:99:
                    51:dc:d0:b7:42:07:58:c1:5f:35:6f:f9:e7:00:22:
                    cf:dc:d2:58:96:10:4b:3b:26:6e:00:8b:74:c6:cc:
                    67:05:82:66:cd:46:9d:ee:9f:00:76:9f:fe:f2:e1:
                    d3:92:cf:8f:89:51:8e:da:9b:ed:77:8d:48:f7:8a:
                    ef:92:5e:44:57:23:65:40:8b:01:6a:a8:98:8d:86:
                    fa:e6:dd:81:1e:cd:d7:cd:4e:7e:8b:0b:dc:91:bb:
                    da:03:a6:85:8a:5d:09:37:f4:61:22:09:6b:c1:9f:
                    d9:eb:2e:fc:4a:dc:2c:18:d1:1f:bb:cd:c9:e7:fc:
                    84:df:88:f2:ee:81:f4:04:cf:05:39:66:f5:01:fe:
                    28:6b:ea:7f:07:23:8e:3f:fa:48:63:05:f2:de:24:
                    81:55:84:40:a1:27:04:48:61:ad:90:69:03:45:b7:
                    78:5c:7c:5e:f1:b2:2b:ae:d1:a5:a4:33:09:75:6b:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:FB:C9:42:6B:CD:C6:AF:42:54:41:44:0B:DA:5D:A7:1E:45:B7
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:78:77:48:62:46:35:39:9b:91:de:6d:60:88:48:d8:d7:
         19:48:4a:6c:0c:ca:1c:12:e6:25:9f:6c:af:b5:19:84:11:34:
         86:44:79:e6:5c:ea:db:f6:82:ed:22:ba:dc:85:6b:ce:35:17:
         54:55:1f:bb:8c:9b:69:66:fd:1a:3d:be:5e:0f:3f:a1:11:5a:
         9b:13:92:fe:46:22:e5:c3:c5:58:14:89:dc:fd:70:c1:d4:ce:
         27:5c:47:a7:79:57:1d:c3:a1:b3:5c:92:34:7b:f3:27:24:67:
         81:77:c4:7a:1d:93:4c:56:fc:2b:81:11:8c:66:04:e9:97:b6:
         6c:b6:7f:ae:f4:39:b8:39:8d:8d:00:c7:6f:6c:4d:b6:1e:a5:
         1e:7a:24:2c:3c:15:56:40:35:cf:4f:53:36:dd:71:d5:9c:14:
         ca:e6:91:aa:54:d1:a1:0a:f3:c4:0d:bb:ff:02:ac:25:68:03:
         3e:31:2f:e5:88:96:b4:9f:c5:ad:1d:19:05:cc:8d:05:de:76:
         61:26:a2:0a:19:ad:37:06:07:2f:6a:ab:76:83:51:46:30:f1:
         67:f1:b1:f3:92:45:fe:b9:89:49:88:05:d6:a3:89:44:e2:81:
         29:0c:4c:de:14:31:b4:ae:d6:d2:c4:80:2e:3e:fd:68:ab:98:
         02:3d:f9:0c
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHV0Eisbv3BPyzuvxdpfFFV5jQDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MTAxMTIwNTFaFw0yNTA0MTAxMTI1NTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQ3QUYwMjA4MDc2NDAyNEVB
OTFDRDMxOTg4NzI2QzZBRTY2OEQwNzgyRDZGQzc5M0VENTA0MjRBRjRDNjhDMjhB
MjYxMjg0MzRDNjhCNDUzMkMxODMwNTI3QjAwMDAzOUFCNEVFN0JDODZDNkMwMTEy
MzA1QjQ1MDQ4RjNBQTA4REZCNzMxODkyNEQ2M0UyQTU5OTUxRENEMEI3NDIwNzU4
QzE1RjM1NkZGOUU3MDAyMkNGRENEMjU4OTYxMDRCM0IyNjZFMDA4Qjc0QzZDQzY3
MDU4MjY2Q0Q0NjlERUU5RjAwNzY5RkZFRjJFMUQzOTJDRjhGODk1MThFREE5QkVE
Nzc4RDQ4Rjc4QUVGOTI1RTQ0NTcyMzY1NDA4QjAxNkFBODk4OEQ4NkZBRTZERDgx
MUVDREQ3Q0Q0RTdFOEIwQkRDOTFCQkRBMDNBNjg1OEE1RDA5MzdGNDYxMjIwOTZC
QzE5RkQ5RUIyRUZDNEFEQzJDMThEMTFGQkJDREM5RTdGQzg0REY4OEYyRUU4MUY0
MDRDRjA1Mzk2NkY1MDFGRTI4NkJFQTdGMDcyMzhFM0ZGQTQ4NjMwNUYyREUyNDgx
NTU4NDQwQTEyNzA0NDg2MUFEOTA2OTAzNDVCNzc4NUM3QzVFRjFCMjJCQUVEMUE1
QTQzMzA5NzU2QkE5MEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1HrwIIB2QCTqkc0xmIcmxq5mjQeC1vx5PtUEJK9MaMKKJhKENMaL
RTLBgwUnsAADmrTue8hsbAESMFtFBI86oI37cxiSTWPipZlR3NC3QgdYwV81b/nn
ACLP3NJYlhBLOyZuAIt0xsxnBYJmzUad7p8Adp/+8uHTks+PiVGO2pvtd41I94rv
kl5EVyNlQIsBaqiYjYb65t2BHs3XzU5+iwvckbvaA6aFil0JN/RhIglrwZ/Z6y78
StwsGNEfu83J5/yE34jy7oH0BM8FOWb1Af4oa+p/ByOOP/pIYwXy3iSBVYRAoScE
SGGtkGkDRbd4XHxe8bIrrtGlpDMJdWupDQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNqU+8lCa83Gr0JUQUQL2l2nHkW3MB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzM0MzUyZTMxMzczOTJlMzEzMTMy
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LbNwMA0GCSqGSIb3DQEBCwUAA4IBAQBD+nh3SGJGNTmbkd5tYIhI2NcZSEpsDMoc
EuYln2yvtRmEETSGRHnmXOrb9oLtIrrchWvONRdUVR+7jJtpZv0aPb5eDz+hEVqb
E5L+RiLlw8VYFInc/XDB1M4nXEeneVcdw6GzXJI0e/MnJGeBd8R6HZNMVvwrgRGM
ZgTpl7Zstn+u9Dm4OY2NAMdvbE22HqUeeiQsPBVWQDXPT1M23XHVnBTK5pGqVNGh
CvPEDbv/AqwlaAM+MS/liJa0n8WtHRkFzI0F3nZhJqIKGa03Bgcvaqt2g1FGMPFn
8bHzkkX+uYlJiAXWo4lE4oEpDEzeFDG0rtbSxIAuPv1oq5gCPfkM
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:09:40 2024 by rpki-client on console-fra.rpki-client.org