Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137302e37392e342e302f32322d3332203d3e203533303435.roa
File:                     3137302e37392e342e302f32322d3332203d3e203533303435.roa (raw, json)
Hash identifier:          JTYc5KC7m2xIqNJ2hQhgPyOFPjUjE9ePD15fI4ZAMoI=
Subject key identifier:   C3:5C:C9:E1:52:75:4B:A4:E5:37:E9:CB:E2:E8:AE:FE:7B:A9:C2:DF
Certificate issuer:       /CN=67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC
Certificate serial:       48B3214596DA82338DCDBB70A311021E4F26307B
Authority key identifier: 67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137302e37392e342e302f32322d3332203d3e203533303435.roa
Signing time:             Tue 25 Jun 2024 14:34:15 +0000
ROA not before:           Tue 25 Jun 2024 14:29:15 +0000
ROA not after:            Tue 24 Jun 2025 14:34:15 +0000
asID:                     53045
IP address blocks:        170.79.4.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b3:21:45:96:da:82:33:8d:cd:bb:70:a3:11:02:1e:4f:26:30:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC
        Validity
            Not Before: Jun 25 14:29:15 2024 GMT
            Not After : Jun 24 14:34:15 2025 GMT
        Subject: CN=C35CC9E152754BA4E537E9CBE2E8AEFE7BA9C2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:45:32:d3:c3:12:20:16:79:71:d3:30:1c:ea:
                    46:5d:86:43:cd:56:16:00:b4:31:9c:b8:dc:a5:fb:
                    80:f0:df:ec:ee:a0:af:69:6a:f9:a5:93:7e:ce:9b:
                    33:63:2f:4b:91:f3:ff:0f:fb:23:84:c8:4f:5d:63:
                    ba:bd:71:8f:27:c0:7b:57:e7:4d:59:60:31:ec:56:
                    85:2a:a9:49:1b:03:5d:0c:d0:bc:44:40:f7:23:21:
                    78:d9:92:81:9d:6e:91:ce:79:50:16:64:0c:1e:46:
                    c7:01:58:88:c7:c9:87:f8:d4:37:95:c1:3b:13:56:
                    26:f9:ae:d7:f5:d5:a1:06:e3:2d:16:87:89:aa:35:
                    6b:d9:76:f5:be:8b:71:52:a8:2e:73:78:82:99:b2:
                    8f:f1:ba:f4:32:2d:e4:27:e5:03:95:4a:c9:76:07:
                    c1:4f:cf:81:53:12:36:06:5e:92:31:08:7e:51:e6:
                    bf:6a:63:d6:ae:a8:29:58:80:6c:46:97:c6:13:fe:
                    0a:f2:66:7d:c9:ad:72:5d:6d:4a:f7:79:a8:73:25:
                    67:17:a0:32:48:4f:8e:9e:58:29:34:d9:66:93:b1:
                    26:56:6d:25:cd:d6:07:a6:ee:87:a3:37:76:41:42:
                    eb:82:ea:43:85:04:84:e8:08:dd:0e:9a:97:e0:1c:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:C9:E1:52:75:4B:A4:E5:37:E9:CB:E2:E8:AE:FE:7B:A9:C2:DF
            X509v3 Authority Key Identifier:
                keyid:67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137302e37392e342e302f32322d3332203d3e203533303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:bd:72:5b:b1:3a:c0:7f:2a:e7:b3:ac:49:af:1d:4f:70:c9:
         21:63:27:24:b9:c5:a7:f1:42:62:ee:5c:e5:32:14:8c:62:33:
         3c:34:55:20:f7:43:9f:ac:46:4c:04:94:0b:44:e9:c4:1d:7c:
         21:7e:d2:55:43:8e:58:9b:d6:7b:fa:88:9f:73:2b:29:15:ea:
         42:cd:fb:3a:9e:cb:a4:b0:46:f8:ef:69:90:07:82:8f:38:56:
         b7:7b:3d:19:82:f1:01:b9:5d:c7:07:ee:99:48:f3:0f:d7:74:
         4b:54:23:88:90:95:65:fa:c0:ac:32:54:c6:06:fc:eb:b1:22:
         1f:37:92:39:50:a2:f1:d5:00:b0:2b:60:d5:98:09:40:84:a1:
         b5:6c:cc:fe:01:9f:44:76:c3:55:63:0e:3c:73:57:ff:a9:a6:
         dd:7b:ad:27:e8:86:d5:23:66:d6:e6:fc:9f:67:35:42:13:be:
         91:a9:c0:ba:3c:89:df:83:b8:78:ce:fd:a0:f1:88:0c:ea:d9:
         88:c8:2d:df:8c:8d:6f:38:e0:d8:f1:0e:df:f2:43:af:a5:a6:
         66:36:b1:b1:e8:67:05:5e:be:64:58:f6:45:7e:56:c4:30:93:
         d7:94:7d:9e:29:21:1d:8f:15:37:83:55:2e:a2:c8:c0:69:0b:
         80:26:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 14:38:35 2024 by rpki-client on console-fra.rpki-client.org