Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32332d3233203d3e20323634353530.roa
File:                     3137302e302e33342e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          KgNpM4RyMGEKGvql2w5AZwewZeGMZ5xk0F34QzK+zSU=
Subject key identifier:   0F:D8:BC:AD:9F:C7:7B:96:49:8A:86:D5:C1:3D:16:B6:DE:98:B9:5D
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       164B0981CCA0A8F8BA74C14ABC1A027DFB4ACEBE
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32332d3233203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:19 +0000
ROA not before:           Wed 10 Apr 2024 00:16:19 +0000
ROA not after:            Wed 09 Apr 2025 00:21:19 +0000
asID:                     264550
IP address blocks:        170.0.34.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4b:09:81:cc:a0:a8:f8:ba:74:c1:4a:bc:1a:02:7d:fb:4a:ce:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:16:19 2024 GMT
            Not After : Apr  9 00:21:19 2025 GMT
        Subject: CN=0FD8BCAD9FC77B96498A86D5C13D16B6DE98B95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:95:29:fc:e1:97:7a:10:8b:a0:d0:0a:19:
                    b8:06:89:68:f7:a6:da:99:e8:8d:d8:0e:b6:33:33:
                    f1:56:18:b1:a0:3c:19:76:0a:c3:6b:72:4c:95:d7:
                    30:af:52:4d:4b:31:78:61:9f:a7:a9:f5:ad:9e:29:
                    1a:cf:bb:5d:15:99:3e:9f:39:53:1c:81:da:83:6c:
                    c1:f9:8f:42:fc:75:fa:e3:5c:3f:b9:96:b4:a3:37:
                    df:4f:05:08:03:05:b4:dd:8c:59:04:03:79:0b:9e:
                    08:76:31:b9:77:08:9b:9e:73:fb:bb:f9:b4:8b:c1:
                    0d:03:a1:4a:6c:46:c5:7d:66:01:6f:4b:b7:b0:b0:
                    b0:78:69:29:c3:38:c2:3b:c9:d6:ee:1e:5e:64:b5:
                    2c:6d:6b:83:d1:5b:14:7d:c7:b4:6b:b0:11:ac:62:
                    84:d1:4d:cf:1a:51:d3:b2:44:9c:e4:5d:f3:e2:31:
                    89:09:42:19:56:b3:c7:2d:b4:ad:46:f3:85:31:2e:
                    42:c0:dd:ca:c8:ff:f6:08:38:f5:8a:cd:d4:ba:71:
                    29:40:0b:4a:95:4b:8a:48:0d:59:f2:93:7b:32:e5:
                    ce:61:57:1c:08:98:36:38:36:01:44:eb:ae:84:c2:
                    ca:9a:3c:94:26:aa:2b:5f:2c:57:5f:c9:64:d0:da:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D8:BC:AD:9F:C7:7B:96:49:8A:86:D5:C1:3D:16:B6:DE:98:B9:5D
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:03:4e:bc:f7:ff:96:de:51:fb:3e:1b:c5:db:1b:2d:67:60:
         20:9c:dc:89:a4:a4:05:07:e6:1f:69:c4:44:e0:6d:80:a9:26:
         01:0f:6e:a2:1c:65:a6:cb:d4:b4:df:2d:fc:1b:99:86:be:0f:
         dc:46:c6:0a:fe:6c:81:47:58:ec:fd:31:5e:5f:6d:39:b4:02:
         2c:4d:e6:06:9d:c9:bd:8e:f9:6b:0e:09:4d:b8:5a:3c:6a:83:
         95:5d:a4:88:44:e0:c1:aa:97:44:69:df:3a:9c:b5:9f:5a:61:
         39:67:3e:ca:20:c8:c5:3a:5e:9e:bb:ad:1c:fb:36:2b:2a:c6:
         e3:a7:8c:4a:7c:5f:29:63:99:dd:25:54:c5:71:44:67:9b:c7:
         d8:4b:ce:20:1b:04:36:cc:7c:02:b6:ac:bc:f4:e9:a1:39:0e:
         c4:b7:95:9c:9a:b8:46:fb:db:03:de:a5:cf:3b:81:eb:dd:9a:
         30:6d:32:0e:ea:5f:7b:43:83:c7:9f:2c:ab:86:1a:3f:34:83:
         66:98:aa:8a:d1:17:c1:ed:9f:c4:00:fa:94:14:58:32:07:cc:
         0d:cc:87:65:70:1a:55:d3:30:05:47:b0:24:ce:38:11:c2:dd:
         f9:7e:20:f9:ee:4b:ac:51:e2:24:b6:82:60:1b:ea:a5:b9:b7:
         25:9e:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org