Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33352e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          MvHCTMKzR0GO4gEjcrJ/VfaKPQ6j8EQf3GzDKFy86j4=
Subject key identifier:   C3:5B:EB:F2:4C:D5:07:5A:AD:0D:02:55:F1:25:8E:9A:14:3F:80:94
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       648B348914BA0A45A58076D9CDB7FEF38E06A5AC
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:27 +0000
ROA not before:           Wed 10 Apr 2024 00:16:27 +0000
ROA not after:            Wed 09 Apr 2025 00:21:27 +0000
asID:                     264550
IP address blocks:        170.0.35.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:34:89:14:ba:0a:45:a5:80:76:d9:cd:b7:fe:f3:8e:06:a5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:16:27 2024 GMT
            Not After : Apr  9 00:21:27 2025 GMT
        Subject: CN=C35BEBF24CD5075AAD0D0255F1258E9A143F8094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:57:be:f3:28:ea:47:17:e6:bd:5e:94:f0:
                    63:80:52:f4:b5:a4:c0:53:06:4b:fc:b0:f2:93:9f:
                    35:34:38:17:8c:26:e3:fd:dd:7f:fb:b2:97:c0:32:
                    23:21:3e:a9:b0:22:3b:74:1d:8f:ff:1a:50:6c:d8:
                    54:dc:c3:fc:a7:6a:b6:30:31:9c:f4:f1:8e:0b:c1:
                    9f:7e:d9:10:77:e4:79:ca:d5:ca:0b:a0:37:d8:a6:
                    34:75:bd:5d:d9:f1:20:b0:f0:86:38:71:5a:65:d6:
                    bd:7d:e0:04:89:a6:ef:d3:60:3f:8c:11:3d:fc:7d:
                    ad:a4:90:bd:aa:f7:83:61:f7:25:a5:ee:cc:f3:8e:
                    c7:a5:a9:f2:de:b6:93:e3:35:e9:14:9c:8b:87:6e:
                    f2:94:de:34:0c:20:3c:3c:06:ea:3b:a1:f8:66:ec:
                    f1:97:2a:2f:ed:41:0c:a6:b2:99:89:22:01:83:80:
                    79:e5:03:0c:b0:8c:53:9c:68:b3:27:25:03:49:91:
                    73:3e:03:f8:3f:a2:16:a7:c9:93:db:70:99:38:b7:
                    72:05:c2:88:f8:af:e9:fb:5c:94:d1:b5:0d:9b:04:
                    54:03:4c:1d:89:8d:6e:99:e9:ba:cf:cc:3c:71:9d:
                    90:16:80:f2:68:ce:be:5c:b3:c8:5c:af:f6:55:e1:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:EB:F2:4C:D5:07:5A:AD:0D:02:55:F1:25:8E:9A:14:3F:80:94
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:56:99:01:94:90:c6:d3:34:fe:b4:81:fd:fa:91:a3:84:eb:
         fc:84:cb:6b:64:88:b6:f3:e5:68:33:46:5f:f5:89:6b:93:20:
         1d:53:6a:3e:d5:44:35:a5:d3:03:8c:cb:76:a4:25:e6:a5:ee:
         56:55:a9:d5:64:d0:00:26:56:bc:5d:f4:0b:07:82:27:15:c0:
         9a:8c:5f:64:d2:b6:f0:b6:a1:ee:9e:19:df:d1:27:f4:38:1e:
         8d:14:8b:15:8d:3d:d8:39:ee:d3:7f:15:4d:9c:e2:8d:31:de:
         a1:b7:86:0a:f5:a8:7d:01:db:9a:3a:4d:37:f0:dc:d9:c3:36:
         69:78:67:fe:7f:bc:fd:fc:8d:63:06:7f:89:6c:b9:d9:c4:e1:
         0f:0c:62:e2:a4:ca:2d:c0:4b:4e:8a:19:23:c6:dc:2e:5b:0d:
         8a:55:6b:9d:bb:ea:d1:e2:3f:ce:82:de:b1:ea:6d:3f:45:fe:
         47:41:7c:13:3b:01:7a:87:32:56:83:8a:bc:37:c8:b4:01:fe:
         11:3b:ce:77:69:0e:30:34:e9:c8:31:2b:6d:f1:dd:c8:0a:ac:
         16:34:8b:6f:27:4e:1b:eb:cd:69:98:31:ba:f7:7e:da:40:10:
         83:d4:2c:83:3d:48:e9:2c:74:d3:37:9d:12:8e:4d:66:07:47:
         94:91:e4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org