Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39302e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e39302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          v8gjhHI1ZGTrr4QIguNiIg7RVjw0XLFmabaG2N3Djpw=
Subject key identifier:   5D:4F:A3:77:92:E7:3D:B1:47:96:09:6D:10:E9:A2:9F:0B:9A:6B:94
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6D9E64C0D8544A52B28A60D9507176A4FF8FD5CF
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        45.226.90.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:64:c0:d8:54:4a:52:b2:8a:60:d9:50:71:76:a4:ff:8f:d5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:e2:67:36:c5:21:25:fb:9d:56:11:09:0f:
                    97:9c:85:01:bb:eb:87:4d:0a:a4:12:ff:e4:fc:87:
                    1d:6c:87:5a:94:d5:dc:bd:e3:04:10:06:6a:78:c9:
                    12:55:63:01:05:d0:3f:17:6b:a5:6d:e7:00:2a:dc:
                    c0:c8:45:5d:0f:40:ce:5d:eb:9c:66:5e:68:d7:81:
                    48:84:f2:a7:4d:85:9b:98:0f:0b:07:a3:2e:bc:ce:
                    b6:fa:a8:6b:74:6d:54:e1:fb:78:d3:f9:7d:62:82:
                    8a:60:81:a7:5e:ca:ec:b3:b4:54:b6:6a:48:d5:9b:
                    d7:f7:f9:4b:a0:32:f0:95:95:b6:26:b1:89:e8:92:
                    76:71:48:d0:9b:d8:65:62:f0:9a:2d:5a:55:ea:f2:
                    c8:75:55:1b:50:5e:07:69:b6:93:e9:22:95:1d:de:
                    46:fa:24:30:3a:91:59:ba:d2:71:ce:cc:23:0b:8d:
                    55:54:3a:8a:13:37:c7:d9:a1:d3:e6:45:66:99:8b:
                    5f:aa:99:6d:4a:81:04:b2:8a:40:cf:93:19:c5:b2:
                    09:7e:e0:a4:00:c1:23:cd:f5:0e:f4:6e:d0:df:5e:
                    6f:a2:46:ba:13:86:40:ff:18:47:02:79:64:6c:6a:
                    d1:c9:f7:c3:26:c5:88:2f:66:7c:ff:27:ac:0b:44:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:A3:77:92:E7:3D:B1:47:96:09:6D:10:E9:A2:9F:0B:9A:6B:94
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a7:e0:06:58:78:57:28:d2:bb:b2:d4:b1:bb:0b:59:c9:5b:
         5e:e1:75:9e:92:91:72:30:c2:81:5b:d2:9d:c9:94:7a:b2:03:
         54:f4:b6:d7:71:8d:57:c4:ad:83:91:bd:3e:97:da:95:06:47:
         a4:3a:6f:bb:79:ac:46:a6:2e:cd:93:a2:a6:37:57:ed:bf:e0:
         85:93:c7:98:05:9f:06:9a:87:bf:c2:72:16:b5:8b:63:50:67:
         26:4e:25:45:5e:33:a7:cc:9b:3a:f1:92:46:6a:54:91:56:00:
         02:b8:f8:3f:6c:c1:b1:c3:7e:b1:7a:3b:e1:01:c2:65:ff:97:
         da:b7:d9:5c:d6:3f:07:23:87:02:09:67:0e:fc:e5:c1:9d:08:
         4d:00:74:dc:e2:8f:dd:0d:1e:a8:77:bc:0d:7f:da:ca:61:e6:
         d3:2f:16:ce:2e:22:03:46:26:dc:53:94:1e:08:b4:93:30:c1:
         c6:59:d0:76:c4:3a:39:f5:4b:6d:c7:94:16:8a:9e:56:02:a0:
         b3:5e:8c:69:19:00:9d:3d:92:73:6e:7b:a3:02:69:7b:25:9f:
         4f:cf:e3:3c:af:8a:b1:42:21:cb:49:14:cc:48:b7:ab:2c:d0:
         c7:a4:ac:57:d6:81:55:42:48:d3:81:e9:08:46:d7:6d:db:1e:
         52:77:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org