Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33342e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          qbnUA7dleN1DCCDQdEyXsQiZN2r/Bk89rCkpD+NzKQo=
Subject key identifier:   4B:E2:36:21:2F:25:87:F6:37:07:E9:55:B7:0F:66:69:FE:69:C9:0B
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       157020DBD2FDA4B023F53C1C9B66723E290F6E69
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:23 +0000
ROA not before:           Wed 10 Apr 2024 00:16:23 +0000
ROA not after:            Wed 09 Apr 2025 00:21:23 +0000
asID:                     264550
IP address blocks:        170.0.34.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:70:20:db:d2:fd:a4:b0:23:f5:3c:1c:9b:66:72:3e:29:0f:6e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:16:23 2024 GMT
            Not After : Apr  9 00:21:23 2025 GMT
        Subject: CN=4BE236212F2587F63707E955B70F6669FE69C90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:dd:29:8f:a7:f8:50:93:09:75:fb:8a:88:
                    75:69:15:f1:35:a7:2d:b7:a2:ad:39:f0:33:ea:c5:
                    2e:1d:04:22:a0:ea:e8:19:1a:07:77:3e:2d:b0:5f:
                    d3:29:00:9b:fa:21:c6:a8:50:58:96:06:b2:af:c5:
                    de:c0:32:26:8d:02:a1:f5:86:d7:fe:9f:fb:b4:77:
                    de:18:e1:a3:80:c9:49:f8:16:d8:55:24:5f:1c:b2:
                    ea:17:46:a8:b4:8c:26:78:c2:be:42:d9:0a:02:bd:
                    7b:e3:b6:0c:c7:20:eb:da:c5:86:24:82:36:29:18:
                    2e:32:a9:6f:2f:b7:82:f3:66:26:b1:5d:69:27:cd:
                    90:b3:7c:cb:20:72:fa:28:a7:db:14:47:cf:c0:2b:
                    ef:fa:2c:7e:82:4a:d7:71:2d:1c:d3:a9:3e:75:9e:
                    92:7d:d5:69:a3:a4:b2:f4:33:f8:36:e4:94:d6:44:
                    30:df:94:75:6a:9e:79:1e:09:3d:d3:20:d9:52:b4:
                    64:94:c8:8f:aa:67:8d:d7:e8:96:e1:84:4e:e6:49:
                    bf:f2:7f:f8:2b:ce:b1:8c:a6:52:ec:e4:83:3c:7f:
                    fa:88:75:35:1e:92:f9:e9:c2:5f:df:d9:04:f6:6a:
                    de:77:aa:d1:71:05:5a:d9:df:27:e0:fb:27:79:09:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E2:36:21:2F:25:87:F6:37:07:E9:55:B7:0F:66:69:FE:69:C9:0B
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:48:8f:de:95:d0:25:bb:bc:31:88:e8:90:34:7e:97:41:
         9c:56:22:b9:07:e4:4e:78:74:92:11:76:17:26:0e:ce:cf:e0:
         13:36:b6:ec:d7:0f:fc:e5:13:1f:51:be:6d:30:3d:3f:ee:08:
         f6:69:f3:1c:1b:2e:7e:4e:a4:e3:f1:11:ed:34:02:6b:69:9e:
         42:2f:b7:d0:ba:a3:2b:1d:5e:bd:55:f3:b0:eb:ba:5e:1e:a9:
         cb:99:3f:2f:7f:67:bd:d3:7a:1e:6c:fb:07:87:a3:3e:5b:61:
         6d:c6:e8:5a:c2:50:06:08:09:a8:67:cb:b2:f2:d5:45:59:05:
         24:74:27:ad:10:d7:7e:4c:ac:e8:37:74:5f:bf:6d:55:14:37:
         a9:a1:d2:11:b9:74:76:d9:a1:01:b3:43:c6:c4:1d:d0:bd:7e:
         6e:d2:dc:36:88:e8:2a:03:53:58:6a:f0:41:6d:43:f8:34:04:
         f4:d5:95:f5:d0:91:60:cb:07:4c:58:c0:95:88:c9:f8:14:36:
         e1:8c:ec:c9:93:fa:e0:63:f7:a5:71:5e:c6:c4:ba:a5:ba:50:
         e6:b0:98:43:1a:5e:ff:72:a6:5a:d5:46:8f:ad:f4:f4:5e:09:
         3f:54:04:de:e4:76:86:dd:84:45:07:ae:55:52:a2:4f:59:27:
         ca:4f:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org