Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32332d3233203d3e20323634353530.roa
File:                     3137302e302e33322e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          6IrfbFk+s0jouGPlrxjW0fdyzdGUtqB20XPXjyMxeIo=
Subject key identifier:   70:F5:CD:C9:95:59:75:20:DB:71:E3:4E:EF:6C:DD:3F:1D:3F:A5:75
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       5EA4CFC0ACCE04DC319F3F3EA03A1CD2FCADCBB7
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32332d3233203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:15 +0000
ROA not before:           Wed 10 Apr 2024 00:16:15 +0000
ROA not after:            Wed 09 Apr 2025 00:21:15 +0000
asID:                     264550
IP address blocks:        170.0.32.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a4:cf:c0:ac:ce:04:dc:31:9f:3f:3e:a0:3a:1c:d2:fc:ad:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:16:15 2024 GMT
            Not After : Apr  9 00:21:15 2025 GMT
        Subject: CN=70F5CDC995597520DB71E34EEF6CDD3F1D3FA575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:d9:a7:48:3b:e7:2b:eb:34:04:ca:c6:59:
                    32:c5:ad:c3:08:69:57:3e:9c:9f:a7:54:d8:71:fc:
                    e6:b1:d5:77:79:7f:b9:3a:03:fe:46:66:15:65:56:
                    33:53:7e:d6:f5:a5:bf:ec:05:9d:58:9e:ad:2d:c0:
                    d1:24:de:72:59:5d:14:d0:6e:69:24:eb:c9:73:72:
                    20:75:8f:70:4d:fe:89:16:31:20:5b:61:b8:78:68:
                    e8:bf:c5:e5:01:d2:a0:8f:c1:a3:fa:3d:f5:10:8f:
                    f3:83:9b:79:ce:bd:0c:b4:3a:a1:e3:cb:bd:20:94:
                    2f:74:b3:46:08:73:96:93:72:6f:5c:79:25:d1:95:
                    59:a6:c5:fb:48:a8:0f:22:07:dc:7f:48:56:5f:dc:
                    a2:49:30:d5:ee:0c:6b:85:4e:af:25:77:de:07:9e:
                    f2:f4:e8:43:96:ff:f7:69:50:52:bd:e6:55:64:2e:
                    e9:56:1f:f8:12:64:07:eb:5a:e3:a3:22:c5:81:6c:
                    a5:bc:eb:aa:de:69:94:ed:cb:b2:57:fc:47:23:26:
                    b9:c4:f5:ae:56:70:75:64:fa:f6:e3:0c:f0:96:9f:
                    8c:8e:e9:d8:28:20:91:2d:cf:28:9c:8f:ef:7b:de:
                    28:ac:15:a7:0d:dd:a2:1f:af:16:da:6b:2e:9f:e8:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:CD:C9:95:59:75:20:DB:71:E3:4E:EF:6C:DD:3F:1D:3F:A5:75
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:f5:ff:ff:fd:16:69:83:fa:3b:fd:91:c7:2f:1a:fb:1e:
         2d:c6:94:7b:7f:dd:37:17:49:fb:f0:bb:bb:fb:dd:33:28:24:
         29:ce:ef:66:f8:f3:1c:e1:5f:91:8e:0c:8c:e1:3d:8c:b1:e1:
         95:2a:91:c6:01:82:17:0e:4c:94:63:ed:18:19:d8:e5:0f:21:
         f2:d3:47:8f:d8:f6:a2:e7:14:3c:fa:c0:eb:ae:32:7f:29:73:
         17:41:05:47:e8:b9:97:8a:7a:d9:8a:2b:95:13:82:bb:1f:99:
         0d:92:45:6b:c5:af:31:8b:ce:42:de:7e:ed:fe:fb:14:1a:0d:
         93:98:dc:48:e3:c4:ba:01:c7:bb:c7:4f:b9:40:25:b4:a7:b4:
         f9:a1:97:0f:36:18:8f:e6:bc:7b:96:9d:71:d8:83:70:15:86:
         ad:bd:fb:84:ab:a8:da:cc:d4:3b:f4:e9:13:a1:c9:e3:06:a4:
         7a:95:b0:ed:00:05:0e:e0:5e:7f:7b:b8:86:12:be:57:e1:bd:
         ff:f4:c2:7d:ff:5c:59:ef:12:43:df:35:e2:ec:50:26:c7:e5:
         5a:af:d8:cc:1c:b0:df:c3:6a:2f:03:14:01:74:26:64:f3:75:
         ea:5b:35:5f:6a:70:34:a8:e5:bd:87:23:1d:96:b3:d9:88:e6:
         81:ba:d1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org