Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131342e302f32332d3233203d3e20323632343934.roa
File:                     34352e3137392e3131342e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          1z1A4xsM849wSkYPZ+dPAfEFwvVVuF4fIqS3m8Pc87s=
Subject key identifier:   5F:5D:19:D4:D0:3B:5A:83:78:0C:D1:8D:B3:5B:8A:C4:CD:86:FD:07
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5DFDFAAB23756E2C8027CD173BF04278DA5567B9
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131342e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 10 Apr 2024 11:26:34 +0000
ROA not before:           Wed 10 Apr 2024 11:21:34 +0000
ROA not after:            Thu 10 Apr 2025 11:26:34 +0000
asID:                     262494
IP address blocks:        45.179.114.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fd:fa:ab:23:75:6e:2c:80:27:cd:17:3b:f0:42:78:da:55:67:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 10 11:21:34 2024 GMT
            Not After : Apr 10 11:26:34 2025 GMT
        Subject: CN=3082010A0282010100AD0F20B6D19D2BE2B2CB064BD028E01A2F608CCD3A14ACA4E9571C96CDF560848366EF3FC4F0E0C201E0830ED2635861F390158BE6B98ECE76DCA5B2960049881A6213808D5A6551895051260E7A2DC2EFFA99F24C547F9F6B64C5A33163CBDC2BC07CC626F22A79DEBD2EC0AA84B317036BBF1403B300C2E8D3E449CB561853626ACE7D2A534AB1B3F54E93F0F21E9D771B7CBC35E01205F9799C5B60FFECDB37F5FA719879B6D94AC9A2D4BBCB1F2ED6F509B623A516289D1C52F014E651966E0010384B75AFA230DB84AA5B5646D4AF510A10ABF267F60EAA2F0A5DF605F0D57B6D682862D0AA00BA4CCE48869A98343DE243234A4AF3C09DFD048C42FF9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:20:b6:d1:9d:2b:e2:b2:cb:06:4b:d0:28:
                    e0:1a:2f:60:8c:cd:3a:14:ac:a4:e9:57:1c:96:cd:
                    f5:60:84:83:66:ef:3f:c4:f0:e0:c2:01:e0:83:0e:
                    d2:63:58:61:f3:90:15:8b:e6:b9:8e:ce:76:dc:a5:
                    b2:96:00:49:88:1a:62:13:80:8d:5a:65:51:89:50:
                    51:26:0e:7a:2d:c2:ef:fa:99:f2:4c:54:7f:9f:6b:
                    64:c5:a3:31:63:cb:dc:2b:c0:7c:c6:26:f2:2a:79:
                    de:bd:2e:c0:aa:84:b3:17:03:6b:bf:14:03:b3:00:
                    c2:e8:d3:e4:49:cb:56:18:53:62:6a:ce:7d:2a:53:
                    4a:b1:b3:f5:4e:93:f0:f2:1e:9d:77:1b:7c:bc:35:
                    e0:12:05:f9:79:9c:5b:60:ff:ec:db:37:f5:fa:71:
                    98:79:b6:d9:4a:c9:a2:d4:bb:cb:1f:2e:d6:f5:09:
                    b6:23:a5:16:28:9d:1c:52:f0:14:e6:51:96:6e:00:
                    10:38:4b:75:af:a2:30:db:84:aa:5b:56:46:d4:af:
                    51:0a:10:ab:f2:67:f6:0e:aa:2f:0a:5d:f6:05:f0:
                    d5:7b:6d:68:28:62:d0:aa:00:ba:4c:ce:48:86:9a:
                    98:34:3d:e2:43:23:4a:4a:f3:c0:9d:fd:04:8c:42:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5D:19:D4:D0:3B:5A:83:78:0C:D1:8D:B3:5B:8A:C4:CD:86:FD:07
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3137392e3131342e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:01:f7:d8:78:ef:0f:a4:a1:33:37:28:94:84:55:61:7a:f8:
         2a:52:cc:51:49:f9:02:4a:21:eb:c1:3a:b6:36:7f:f4:6e:73:
         6d:9d:98:1e:f6:ad:b4:4a:dd:eb:41:c0:cd:ba:01:7f:97:b7:
         ef:77:03:97:d9:e0:9c:81:60:73:18:c8:f3:7a:b2:9e:fe:87:
         4d:c9:ba:90:f1:8b:d3:ac:ce:58:e0:db:9d:17:7b:ed:7e:d9:
         8d:ec:56:0d:11:ca:9a:01:d8:f9:51:9d:2a:13:48:51:8a:a8:
         73:cc:8b:c0:0b:1c:ae:c5:f5:7c:89:1c:dc:83:91:7f:95:1f:
         18:1c:02:10:5b:0b:df:7a:5b:75:cb:32:84:19:c1:ab:a8:40:
         2c:85:de:8b:78:9d:a6:d3:28:c1:e7:74:f3:24:f3:fd:33:90:
         0a:0b:f2:7e:42:a4:8b:4f:ad:2d:5a:a3:86:77:89:6c:5a:18:
         0c:86:d9:c0:a0:9b:74:6a:fd:e9:4e:9c:88:6c:96:30:d6:97:
         27:a0:90:ea:33:01:08:43:57:53:64:1c:01:fc:5c:79:01:d5:
         7e:34:51:fc:46:43:17:c0:56:4b:ab:be:58:bf:e4:7b:88:3f:
         ab:06:6d:71:14:fd:bf:80:41:92:5d:f5:b6:6c:33:69:dd:74:
         58:f7:11:e1
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXf36qyN1biyAJ80XO/BCeNpVZ7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MTAxMTIxMzRaFw0yNTA0MTAxMTI2MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQwRjIwQjZEMTlEMkJFMkIy
Q0IwNjRCRDAyOEUwMUEyRjYwOENDRDNBMTRBQ0E0RTk1NzFDOTZDREY1NjA4NDgz
NjZFRjNGQzRGMEUwQzIwMUUwODMwRUQyNjM1ODYxRjM5MDE1OEJFNkI5OEVDRTc2
RENBNUIyOTYwMDQ5ODgxQTYyMTM4MDhENUE2NTUxODk1MDUxMjYwRTdBMkRDMkVG
RkE5OUYyNEM1NDdGOUY2QjY0QzVBMzMxNjNDQkRDMkJDMDdDQzYyNkYyMkE3OURF
QkQyRUMwQUE4NEIzMTcwMzZCQkYxNDAzQjMwMEMyRThEM0U0NDlDQjU2MTg1MzYy
NkFDRTdEMkE1MzRBQjFCM0Y1NEU5M0YwRjIxRTlENzcxQjdDQkMzNUUwMTIwNUY5
Nzk5QzVCNjBGRkVDREIzN0Y1RkE3MTk4NzlCNkQ5NEFDOUEyRDRCQkNCMUYyRUQ2
RjUwOUI2MjNBNTE2Mjg5RDFDNTJGMDE0RTY1MTk2NkUwMDEwMzg0Qjc1QUZBMjMw
REI4NEFBNUI1NjQ2RDRBRjUxMEExMEFCRjI2N0Y2MEVBQTJGMEE1REY2MDVGMEQ1
N0I2RDY4Mjg2MkQwQUEwMEJBNENDRTQ4ODY5QTk4MzQzREUyNDMyMzRBNEFGM0Mw
OURGRDA0OEM0MkZGOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArQ8gttGdK+KyywZL0CjgGi9gjM06FKyk6Vccls31YISDZu8/xPDg
wgHggw7SY1hh85AVi+a5js523KWylgBJiBpiE4CNWmVRiVBRJg56LcLv+pnyTFR/
n2tkxaMxY8vcK8B8xibyKnnevS7AqoSzFwNrvxQDswDC6NPkSctWGFNias59KlNK
sbP1TpPw8h6ddxt8vDXgEgX5eZxbYP/s2zf1+nGYebbZSsmi1LvLHy7W9Qm2I6UW
KJ0cUvAU5lGWbgAQOEt1r6Iw24SqW1ZG1K9RChCr8mf2DqovCl32BfDVe21oKGLQ
qgC6TM5IhpqYND3iQyNKSvPAnf0EjEL/nQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FF9dGdTQO1qDeAzRjbNbisTNhv0HMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzM0MzUyZTMxMzczOTJlMzEzMTM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LbNyMA0GCSqGSIb3DQEBCwUAA4IBAQBVAffYeO8PpKEzNyiUhFVhevgqUsxRSfkC
SiHrwTq2Nn/0bnNtnZge9q20St3rQcDNugF/l7fvdwOX2eCcgWBzGMjzerKe/odN
ybqQ8YvTrM5Y4NudF3vtftmN7FYNEcqaAdj5UZ0qE0hRiqhzzIvACxyuxfV8iRzc
g5F/lR8YHAIQWwvfelt1yzKEGcGrqEAshd6LeJ2m0yjB53TzJPP9M5AKC/J+QqSL
T60tWqOGd4lsWhgMhtnAoJt0av3pTpyIbJYw1pcnoJDqMwEIQ1dTZBwB/Fx5AdV+
NFH8RkMXwFZLq75Yv+R7iD+rBm1xFP2/gEGSXfW2bDNp3XRY9xHh
-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org