Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa
File:                     34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          o3n32ofrgJqhXLBdAqb6+jnSJmEfzmMMxzCAMW25ggo=
Subject key identifier:   44:A9:1D:DE:EE:24:7E:37:DD:F1:31:18:65:DA:AC:06:AA:50:2A:28
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       05F98976C5CD04850E084E0F6E389DD87C0058BD
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 10 Apr 2024 11:26:01 +0000
ROA not before:           Wed 10 Apr 2024 11:21:01 +0000
ROA not after:            Thu 10 Apr 2025 11:26:01 +0000
asID:                     262494
IP address blocks:        45.179.112.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f9:89:76:c5:cd:04:85:0e:08:4e:0f:6e:38:9d:d8:7c:00:58:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 10 11:21:01 2024 GMT
            Not After : Apr 10 11:26:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:47:99:be:c5:0a:0e:2d:57:c1:99:e2:ed:
                    21:14:52:57:66:2f:ea:8d:9b:c4:13:c7:fb:cf:2e:
                    6d:46:13:e2:65:81:88:a9:5a:66:f7:05:50:90:e0:
                    cb:28:23:0e:69:bd:04:39:2a:b2:88:e5:20:3d:90:
                    c8:81:0a:08:fb:4c:fe:ae:a3:de:45:41:e1:0b:68:
                    f7:0e:0a:4a:57:ee:14:c1:99:7b:cf:f1:fe:02:d1:
                    cb:db:18:cb:2c:fa:e4:dd:c0:9b:83:31:c9:5f:7b:
                    f7:02:3f:bf:51:66:78:7f:93:1c:fb:18:28:71:15:
                    7d:9f:02:29:4b:3d:1b:06:ff:04:28:af:04:5a:64:
                    19:f8:52:af:aa:47:d7:84:2f:f4:70:11:ad:47:0b:
                    92:6a:cc:3c:39:6e:99:ee:b4:b4:78:7b:f7:24:32:
                    68:eb:a9:f7:1f:5d:f7:4b:51:44:22:ec:3f:17:f2:
                    f4:72:cb:85:e2:df:77:1e:2b:b0:48:9b:07:30:a2:
                    3b:e7:ed:bc:e3:50:8a:63:a0:e5:9e:ea:e9:b5:ab:
                    ec:4b:19:bd:ff:17:87:29:25:58:4c:bc:86:ce:7b:
                    96:79:7f:bd:0a:40:57:b1:39:2d:65:62:9b:e6:3f:
                    bc:24:74:fb:e7:c6:f4:8e:69:cc:66:59:2f:19:91:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A9:1D:DE:EE:24:7E:37:DD:F1:31:18:65:DA:AC:06:AA:50:2A:28
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:69:1b:04:03:74:83:29:32:9a:4f:03:01:01:71:e5:12:a1:
         bd:ce:1d:bf:27:38:b2:8d:52:e5:96:18:2c:6a:0b:42:9d:4c:
         3e:5c:43:6f:dd:20:dd:d0:38:3f:3b:96:08:0b:41:40:79:cb:
         b9:52:5e:cb:d6:21:c9:eb:50:d4:99:08:4a:3e:de:f8:7e:a4:
         f3:ed:e5:ab:5d:02:f8:fe:ae:39:0f:00:5c:b2:01:be:9a:d8:
         73:87:e6:af:3e:d0:98:ce:cf:20:13:49:9a:ee:0d:dd:f8:f3:
         db:03:ac:ec:70:5f:e4:78:03:18:da:12:5e:2d:a3:39:84:3d:
         85:2e:87:dc:89:9f:1d:51:e3:ac:61:24:2c:b6:3a:8c:85:12:
         17:ed:12:1b:a2:92:ee:86:10:e5:a1:e5:d3:e6:d0:2f:17:33:
         2c:cb:3f:71:92:89:f9:13:7b:06:e6:97:77:e3:18:93:d8:6f:
         3f:ed:55:1a:a3:bf:a5:94:95:68:7d:18:54:74:96:d5:ed:b5:
         ee:c1:2f:a2:b5:48:ee:e3:33:b9:29:46:97:38:2d:a9:a0:00:
         ec:ee:9d:19:f8:64:45:84:ec:14:ae:8f:8a:85:5a:d8:b6:15:
         11:c4:9f:03:85:b3:c4:c6:16:d8:55:0b:d7:06:78:0b:80:8d:
         06:e5:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org