Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
File:                     3137302e302e33322e302f32322d3232203d3e20323634353530.roa (raw, json)
Hash identifier:          rwLJ/FRkSbiycj44/u6QlbHeEchssmq6Ld6ISxH3d34=
Subject key identifier:   46:CC:54:08:CC:68:D1:9B:C6:13:D4:6E:0F:CC:1B:DE:B2:14:36:18
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       7085AB890420627B753AF4618ECC83D6A0CD865A
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:58 +0000
ROA not before:           Wed 10 Apr 2024 00:15:58 +0000
ROA not after:            Wed 09 Apr 2025 00:20:58 +0000
asID:                     264550
IP address blocks:        170.0.32.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:85:ab:89:04:20:62:7b:75:3a:f4:61:8e:cc:83:d6:a0:cd:86:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:15:58 2024 GMT
            Not After : Apr  9 00:20:58 2025 GMT
        Subject: CN=46CC5408CC68D19BC613D46E0FCC1BDEB2143618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4b:ad:2d:13:58:9a:1a:12:66:f6:4e:4f:10:
                    f0:c4:d4:7e:47:50:b5:54:6b:b3:49:3a:a9:43:b7:
                    a5:cf:f0:41:88:db:8e:5e:b7:7b:c7:0e:a9:ae:3b:
                    b2:09:25:c1:47:b1:b8:f9:ba:6f:a6:fc:f3:c3:cf:
                    82:e0:1e:48:45:1f:c7:fd:17:fe:07:2a:00:b2:f0:
                    d2:71:3b:d2:b5:93:3e:96:32:dc:40:c9:ef:ff:97:
                    33:ef:12:a0:dd:38:03:4c:2e:bb:df:b3:9c:0a:e9:
                    96:8c:88:2d:20:0d:39:d8:a3:af:77:ce:18:5b:06:
                    a0:52:61:64:72:68:d7:bb:26:d3:9a:ad:a8:5f:82:
                    b9:83:60:9f:41:68:fb:a9:04:8b:fb:9a:39:61:26:
                    21:08:48:07:00:3d:21:af:d7:83:90:e1:89:3c:48:
                    a2:38:5a:35:4a:7a:25:75:9e:f6:b5:04:a6:dd:9e:
                    1a:f8:99:b7:65:79:73:11:f1:9a:23:67:50:ea:90:
                    9c:2a:b1:11:b1:ae:d1:a8:6e:25:0d:bf:fa:45:12:
                    df:3c:d5:43:97:7f:e8:9a:6e:7a:79:30:cb:89:91:
                    e7:30:aa:81:47:5a:a4:37:f6:11:91:b5:77:d8:59:
                    a1:04:cc:7d:51:22:79:02:ef:12:47:2e:8f:0a:c3:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CC:54:08:CC:68:D1:9B:C6:13:D4:6E:0F:CC:1B:DE:B2:14:36:18
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:5e:9a:6c:31:b7:2f:61:dd:94:ff:02:52:79:6a:6e:66:
         35:08:96:19:76:6e:5b:a0:af:16:07:cd:bc:53:80:3a:5d:48:
         7e:65:6a:32:30:f6:04:3f:ec:1b:c0:71:ec:81:8e:df:91:d5:
         a8:0c:0c:a3:e4:11:07:03:a3:7a:f1:a3:c0:02:ae:d1:f9:3a:
         1e:45:df:e2:9f:06:b9:83:24:78:fa:0d:e3:3f:0a:f1:c7:5c:
         7c:47:8f:77:51:ee:ec:c3:91:03:41:fe:87:08:d0:44:90:4c:
         90:2b:3e:eb:5c:d4:2e:e8:a9:82:b5:a8:63:50:0a:50:ba:60:
         e9:49:bd:cf:06:d1:2e:e4:55:e1:df:d3:f1:3e:13:ec:9a:54:
         43:e1:14:1d:b4:60:e8:62:44:37:3d:bd:d6:de:03:4f:70:78:
         65:60:b4:e7:ee:02:d3:67:59:90:91:6c:ca:94:66:c0:a4:22:
         8e:4d:95:06:a5:ab:03:f6:c8:bb:34:49:49:bf:db:ba:4e:ba:
         5e:8f:01:b2:d4:1c:f0:9f:40:bb:7a:4e:22:33:85:a4:d5:9c:
         c4:47:69:64:e5:7a:cf:b6:f0:a9:28:62:d7:84:b1:4f:84:1a:
         3a:88:4c:43:8e:b8:43:bf:b7:4c:31:dd:de:b5:9e:87:d0:a1:
         18:d5:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org