Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa
File:                     34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          9wUTj0iRh/Sfr1hSFmDQ2apIXsa77B/omOSD612cNv0=
Subject key identifier:   BA:45:E6:7C:88:12:8E:3F:4D:22:A3:56:D1:41:27:53:7D:06:68:65
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5A2C0972AB4F6E18FB2B49E01FE637C050102C12
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 10 Apr 2024 11:26:53 +0000
ROA not before:           Wed 10 Apr 2024 11:21:53 +0000
ROA not after:            Thu 10 Apr 2025 11:26:53 +0000
asID:                     262494
IP address blocks:        45.179.113.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2c:09:72:ab:4f:6e:18:fb:2b:49:e0:1f:e6:37:c0:50:10:2c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 10 11:21:53 2024 GMT
            Not After : Apr 10 11:26:53 2025 GMT
        Subject: CN=3082010A0282010100B9539F6058FBA393893581EAAEB5A730C85E2B70E74489384B97F29E3003B55B273398BB5F6A4FB5151726FA2FBB1E5195EADA82355CD5F3F0B240148639A5F2845EC7EA233269CB73031D7496076B8B76BCB42F6A9934A4AC67843CF9CF48B6B018C44CADBF9B88550C612E63E6702AFF4257259CEFFECE5019C81F87691F0708083B2B8E724945C70608ABD5EF046DB3DE6F76304CB038E053E2AE8DEE8201BC7033ADC73EA13B548B2E2C5457686F733BDAA84D5AA5BEDA7289B749C7F3C13A5FA84790B234E88D82B17CC8DED28EBE529FA3D5EB73A41B18C0ADA7DC86D1C7611CA00344C7023B23679DB35A628FA59E641A56CAABFCA5842B1F91CEE0070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:9f:60:58:fb:a3:93:89:35:81:ea:ae:b5:
                    a7:30:c8:5e:2b:70:e7:44:89:38:4b:97:f2:9e:30:
                    03:b5:5b:27:33:98:bb:5f:6a:4f:b5:15:17:26:fa:
                    2f:bb:1e:51:95:ea:da:82:35:5c:d5:f3:f0:b2:40:
                    14:86:39:a5:f2:84:5e:c7:ea:23:32:69:cb:73:03:
                    1d:74:96:07:6b:8b:76:bc:b4:2f:6a:99:34:a4:ac:
                    67:84:3c:f9:cf:48:b6:b0:18:c4:4c:ad:bf:9b:88:
                    55:0c:61:2e:63:e6:70:2a:ff:42:57:25:9c:ef:fe:
                    ce:50:19:c8:1f:87:69:1f:07:08:08:3b:2b:8e:72:
                    49:45:c7:06:08:ab:d5:ef:04:6d:b3:de:6f:76:30:
                    4c:b0:38:e0:53:e2:ae:8d:ee:82:01:bc:70:33:ad:
                    c7:3e:a1:3b:54:8b:2e:2c:54:57:68:6f:73:3b:da:
                    a8:4d:5a:a5:be:da:72:89:b7:49:c7:f3:c1:3a:5f:
                    a8:47:90:b2:34:e8:8d:82:b1:7c:c8:de:d2:8e:be:
                    52:9f:a3:d5:eb:73:a4:1b:18:c0:ad:a7:dc:86:d1:
                    c7:61:1c:a0:03:44:c7:02:3b:23:67:9d:b3:5a:62:
                    8f:a5:9e:64:1a:56:ca:ab:fc:a5:84:2b:1f:91:ce:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:45:E6:7C:88:12:8E:3F:4D:22:A3:56:D1:41:27:53:7D:06:68:65
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:f0:35:18:ff:c1:48:9c:a0:7e:36:f3:75:e1:ae:a2:be:
         91:e5:3b:02:bc:58:78:35:37:e0:b4:d8:e3:a4:53:c4:ed:0f:
         5e:f4:d3:a4:ab:cf:e4:45:d2:bd:44:f3:99:8d:d4:9b:28:1c:
         be:94:5c:de:a6:b1:96:ef:8d:91:3a:39:94:20:96:6b:ae:c7:
         86:3f:74:66:b6:6b:69:8d:94:da:35:b5:81:82:aa:93:32:c5:
         3a:57:8d:51:e5:2c:ff:7a:81:71:b3:5f:7f:34:ba:fc:93:1d:
         34:7a:78:bb:1e:96:ff:7e:94:33:bf:5a:68:53:30:16:6e:13:
         46:22:9b:11:3c:99:1e:a7:b0:ac:48:22:55:a1:81:ba:7b:1b:
         36:ed:6a:f8:71:91:59:8f:94:21:03:79:4e:82:cc:e4:5d:3c:
         1f:8b:8b:c4:af:78:ae:4f:39:d0:ea:38:a8:09:22:76:99:32:
         88:64:29:c3:ce:77:d9:1d:86:14:f4:b7:9a:b9:50:f5:a3:ca:
         8b:b3:7a:7f:a3:11:ed:38:c0:9c:f1:e2:bd:fa:e6:03:ae:73:
         4c:32:21:1f:8a:ff:58:19:fc:eb:db:7d:6f:b5:5a:46:5f:c3:
         0c:fd:8a:05:32:30:2c:8b:b3:8c:0d:f7:ed:74:37:19:8b:6c:
         94:ef:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org