Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/3137302e37382e35322e302f32322d3234203d3e20323635343935.roa
File:                     3137302e37382e35322e302f32322d3234203d3e20323635343935.roa (raw, json)
Hash identifier:          Ix1gVBpG3qlmeI0cKwMbaiWKWPABBnk7S63zuNjaq78=
Subject key identifier:   DA:ED:07:3F:79:A4:A7:B3:18:FD:5D:C7:92:5E:26:47:5C:DE:24:2F
Certificate issuer:       /CN=B48FB69D109B757E2D156676A89BE567826A35D5
Certificate serial:       31569E8B7DBDAE7A14A7682EDD6926A8B563A87E
Authority key identifier: B4:8F:B6:9D:10:9B:75:7E:2D:15:66:76:A8:9B:E5:67:82:6A:35:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/3137302e37382e35322e302f32322d3234203d3e20323635343935.roa
Signing time:             Fri 05 Apr 2024 01:14:13 +0000
ROA not before:           Fri 05 Apr 2024 01:09:13 +0000
ROA not after:            Fri 04 Apr 2025 01:14:13 +0000
asID:                     265495
IP address blocks:        170.78.52.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:56:9e:8b:7d:bd:ae:7a:14:a7:68:2e:dd:69:26:a8:b5:63:a8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48FB69D109B757E2D156676A89BE567826A35D5
        Validity
            Not Before: Apr  5 01:09:13 2024 GMT
            Not After : Apr  4 01:14:13 2025 GMT
        Subject: CN=DAED073F79A4A7B318FD5DC7925E26475CDE242F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:09:bb:ff:17:3c:81:bf:d1:9c:48:b3:70:
                    16:76:b2:8d:48:61:ed:49:bd:ea:6e:dc:4c:f3:c1:
                    d9:06:19:41:23:d5:1f:10:db:5c:f9:d5:a0:81:51:
                    2b:72:48:2a:a7:6a:e0:90:e2:33:ed:dc:c0:fb:4a:
                    41:78:46:56:7e:24:84:5d:24:35:ec:02:72:db:86:
                    8a:c5:1d:ca:c9:fc:60:a1:92:dc:52:db:ff:84:e1:
                    6a:62:1a:f4:6f:32:94:6b:97:fc:be:02:3a:e0:a8:
                    da:05:e5:fc:eb:07:3d:9f:f1:a9:56:93:18:38:3d:
                    dd:87:05:79:7f:d0:74:91:a0:c0:1b:1d:19:e3:3f:
                    f4:6c:2f:e8:94:81:32:2e:1d:f8:1e:cb:34:56:37:
                    8b:d1:1f:80:e5:af:6c:27:c4:ce:60:09:65:b1:d7:
                    7f:4c:b5:6a:7d:2b:44:d8:3b:1f:14:2f:0d:e9:3a:
                    b6:f3:7e:ea:94:00:dc:81:76:02:57:e0:32:5e:08:
                    37:f4:85:7f:bc:8d:51:cd:df:a1:94:49:a4:0f:b2:
                    be:a0:19:8a:61:f1:1f:6c:a9:66:21:08:eb:95:96:
                    03:e0:20:c2:49:92:b4:2e:07:30:56:ac:27:b4:e8:
                    55:55:b4:dd:81:fc:d5:86:12:ae:d2:74:1a:fb:33:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:ED:07:3F:79:A4:A7:B3:18:FD:5D:C7:92:5E:26:47:5C:DE:24:2F
            X509v3 Authority Key Identifier:
                keyid:B4:8F:B6:9D:10:9B:75:7E:2D:15:66:76:A8:9B:E5:67:82:6A:35:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/B48FB69D109B757E2D156676A89BE567826A35D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/3137302e37382e35322e302f32322d3234203d3e20323635343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:ea:da:98:17:d9:4f:c3:99:30:5d:0a:20:8b:a1:9e:ec:
         2e:3d:a8:ca:8e:aa:00:28:02:95:9b:7b:cd:2a:cb:bf:ee:8c:
         d0:fa:9f:30:bc:6d:6d:7b:e2:a7:9d:d7:27:a4:49:2b:33:d0:
         bd:b6:ca:7e:bb:65:80:0b:e6:84:fd:3a:9b:50:bd:0c:82:b5:
         0b:4e:0b:52:d4:0d:84:3c:0d:c1:90:0c:82:8b:ea:a8:c3:44:
         4b:f6:da:ab:2e:76:a4:89:fd:1c:44:17:cd:4e:79:a0:57:12:
         9c:8d:1b:32:b7:54:89:e7:56:c7:ac:5a:19:f5:97:14:a0:c3:
         c3:8d:a4:ee:e3:03:e7:6c:09:9a:01:02:9e:7a:44:d9:9b:92:
         19:4b:b6:40:34:48:73:b6:8f:30:ec:c3:68:f3:6c:61:58:15:
         af:62:2e:09:69:7a:48:eb:7e:2b:93:31:d4:12:03:f2:c9:71:
         b9:64:7f:6c:a1:23:b9:f1:3c:95:35:01:ef:4a:ab:82:9a:df:
         dc:79:25:1b:cb:36:62:96:68:f1:23:01:db:f7:56:7b:91:9c:
         02:82:d4:0c:56:1a:73:fd:5a:f8:03:08:55:ca:10:5b:c1:ca:
         c8:23:ed:28:27:f7:62:35:de:92:5c:b9:04:f1:0c:f8:9d:1f:
         91:1c:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:43:48 2024 by rpki-client on console-fra.rpki-client.org