Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32322d3232203d3e20323636343731.roa (raw, json)
Hash identifier:          FNfdwfO+vguUoaX/ITYUfB8FyTSsPqR1X8acef0iQFs=
Subject key identifier:   99:5E:F9:73:82:DB:1B:0A:6D:8F:BF:3B:EA:01:B0:A2:67:10:28:A1
Certificate issuer:       /CN=6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C
Certificate serial:       297A346021A60FF6BBB67DB1D85D51F0841B3766
Authority key identifier: 6B:5F:9A:6F:36:6F:99:E7:01:F3:9E:2E:BA:71:CA:D7:4C:DB:6D:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa
Signing time:             Thu 26 Sep 2024 17:19:51 +0000
ROA not before:           Thu 26 Sep 2024 17:14:51 +0000
ROA not after:            Thu 25 Sep 2025 17:19:51 +0000
asID:                     266471
IP address blocks:        170.83.48.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:34:60:21:a6:0f:f6:bb:b6:7d:b1:d8:5d:51:f0:84:1b:37:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C
        Validity
            Not Before: Sep 26 17:14:51 2024 GMT
            Not After : Sep 25 17:19:51 2025 GMT
        Subject: CN=995EF97382DB1B0A6D8FBF3BEA01B0A2671028A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:df:73:6d:2f:94:21:92:b9:d1:4c:c9:f9:
                    86:57:1e:08:5d:e0:72:8a:5b:e9:ee:17:e3:21:85:
                    ae:ef:3a:18:44:3d:36:1c:ff:59:ee:e8:c3:1c:c7:
                    f0:b3:a3:7e:c1:48:83:be:ed:12:89:b4:df:fe:1b:
                    51:0a:a8:18:49:fd:76:31:66:a4:77:02:94:77:e0:
                    c5:99:22:f6:78:e3:cf:47:a0:8d:21:1b:f6:10:4f:
                    e9:fd:0b:08:0f:1b:9b:5c:62:59:7f:ea:2d:da:52:
                    e1:88:70:39:f9:7f:e1:3a:ac:12:06:12:f5:29:5c:
                    e8:c0:53:c5:9d:32:55:b7:21:dc:da:16:17:90:67:
                    5d:61:65:34:af:00:1f:a9:f3:68:d5:a3:a4:37:4d:
                    b4:cf:b0:53:72:cd:c8:76:ac:6c:2c:c1:47:dc:e6:
                    aa:5b:c8:5e:e5:df:72:94:8b:71:27:66:f2:75:76:
                    cf:b2:d4:e8:62:7f:04:e3:b5:83:7b:f1:54:2a:6e:
                    11:11:ae:b1:9f:e4:5b:f3:39:53:1a:07:00:af:37:
                    d2:a5:03:3a:80:33:39:60:7a:59:04:e5:08:ae:d7:
                    41:15:48:0d:fb:3f:6c:84:df:70:f3:04:0b:1b:c3:
                    d3:ee:3b:3c:ba:e6:ba:2c:0f:61:64:bd:bb:e1:ee:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5E:F9:73:82:DB:1B:0A:6D:8F:BF:3B:EA:01:B0:A2:67:10:28:A1
            X509v3 Authority Key Identifier:
                keyid:6B:5F:9A:6F:36:6F:99:E7:01:F3:9E:2E:BA:71:CA:D7:4C:DB:6D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:19:38:1f:c3:25:e5:92:ed:5a:e3:21:08:1a:24:25:48:7f:
         f7:e0:6a:8d:41:58:0b:d7:e2:15:33:2f:c4:dd:ba:75:10:b3:
         19:ce:ef:74:a7:11:c1:d9:7e:19:3a:f4:0a:63:5f:a1:d7:70:
         20:26:fa:0f:0b:14:0c:4b:95:6a:b3:aa:d8:7b:84:40:c6:60:
         23:79:da:b2:2d:5c:b8:4c:ef:54:0b:a1:e8:f2:7c:c7:69:e2:
         f1:01:4f:91:75:b1:da:99:fc:cf:58:f6:db:b0:7c:c7:67:d4:
         a7:f0:3d:1b:3a:ad:17:36:ba:a4:ef:e6:ae:cd:d6:b3:48:ab:
         6b:33:86:bf:8a:40:65:da:dd:0e:fc:94:43:8a:c8:cb:09:f6:
         93:79:99:67:5c:c8:a5:43:c9:41:41:37:51:56:89:db:e6:18:
         fc:e6:46:4d:5e:8d:35:fd:c5:16:be:50:0b:52:99:b3:3c:6f:
         08:91:6d:be:b0:c6:f2:47:98:49:cf:07:b2:cc:d8:32:8a:ba:
         9c:a3:fb:54:0f:da:75:c6:0e:74:f3:9f:51:01:46:e4:bc:47:
         11:e3:f2:0b:d1:82:99:ce:6c:38:f0:a6:e4:6b:70:1f:11:ee:
         c8:58:e4:ae:92:97:97:52:e8:5b:05:04:81:98:be:07:56:bb:
         aa:f1:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 07:10:28 2024 by rpki-client on console-ams.rpki-client.org