Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa
File:                     3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa (raw, json)
Hash identifier:          gXfCpjqDAfvwya7/G+QUwWyw0ab0plO9oufmi5D3BJk=
Subject key identifier:   A8:CB:21:A9:C3:C0:28:46:9B:76:DE:1D:97:4D:3D:E8:DB:80:EF:70
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       1D169E65B95B2CBE5EAEEE7876A70C9F06C93D20
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:33 +0000
ROA not before:           Tue 05 Dec 2023 15:39:33 +0000
ROA not after:            Tue 03 Dec 2024 15:44:33 +0000
asID:                     263641
IP address blocks:        179.127.152.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:16:9e:65:b9:5b:2c:be:5e:ae:ee:78:76:a7:0c:9f:06:c9:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:33 2023 GMT
            Not After : Dec  3 15:44:33 2024 GMT
        Subject: CN=A8CB21A9C3C028469B76DE1D974D3DE8DB80EF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:5c:36:36:bd:a2:34:12:5a:a2:75:c5:6e:
                    f9:4a:31:26:e0:55:47:c2:8c:8f:e9:1a:f9:8b:7d:
                    fb:e3:89:67:d1:b9:bf:18:f5:ca:d4:e1:73:64:e1:
                    6c:8a:6d:90:1e:fe:9e:5d:5f:b9:69:a0:e1:cc:bd:
                    ab:74:6c:f8:5a:35:7c:d1:1e:41:46:b3:69:2c:9e:
                    2d:d1:dd:75:40:63:ea:76:a7:76:18:08:c6:2a:ed:
                    e5:8b:bb:71:64:50:7e:1e:c8:df:cb:a9:d5:02:66:
                    46:94:08:5c:8e:23:48:37:b5:46:cc:12:f2:30:bc:
                    6c:9d:e7:88:ed:6c:ff:ad:8b:85:0f:0e:31:fa:15:
                    36:6c:4e:17:13:3c:0c:db:27:b6:8c:6d:7f:6b:09:
                    c5:4d:3f:40:ff:62:f6:53:2a:9e:ba:14:73:d2:37:
                    a3:98:f3:07:a2:02:6b:ce:2f:52:4b:04:9c:51:84:
                    2f:86:39:d6:05:8b:94:0c:34:01:c4:0b:f1:14:52:
                    83:b9:5e:14:d7:5a:31:fd:0e:a4:91:30:2f:79:9d:
                    fb:fb:6d:f8:9a:e1:54:b6:b0:2b:63:31:e7:45:40:
                    eb:51:ab:08:01:0e:b6:83:86:72:08:d4:97:2e:d9:
                    b1:c0:5e:62:ec:67:12:fc:dd:ff:f4:53:6c:af:8a:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CB:21:A9:C3:C0:28:46:9B:76:DE:1D:97:4D:3D:E8:DB:80:EF:70
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:b9:e3:41:eb:54:53:5d:18:dd:93:76:b6:db:29:e5:9e:61:
         fa:d7:8b:70:6b:7c:3f:96:e5:33:42:ec:c6:85:45:9e:f1:c2:
         89:11:65:b9:69:49:e8:8b:19:ca:77:f6:82:9e:b8:cf:26:17:
         d4:c1:e8:b7:03:15:50:a0:3b:67:07:70:bd:f9:98:8a:53:9c:
         02:2a:66:9b:6d:a5:d7:4e:61:3f:9d:05:4a:7d:a1:41:2e:13:
         a6:b1:1a:d4:39:1a:0e:58:06:3a:0f:02:6c:cf:e9:de:97:3c:
         da:0d:92:15:fc:72:93:a7:0c:29:fc:51:23:3a:dc:d7:3f:7d:
         d8:f8:0e:ec:b8:c7:6a:86:f7:bc:6f:14:b3:06:fb:9e:f7:8c:
         5c:e4:e4:d0:48:2f:93:2b:51:45:8c:8c:d6:ca:70:cb:b4:07:
         7a:cf:b6:2d:b4:74:38:2d:e2:5b:0b:f0:e4:7d:5b:77:f7:cb:
         1b:55:b9:a7:88:37:6f:40:a4:8e:e3:e1:35:8c:29:9b:5d:76:
         d1:b8:ff:f3:a3:e0:6e:06:ca:c8:e3:b2:d0:63:60:f6:46:1b:
         0e:fd:0b:a6:54:be:b4:72:06:f7:f8:09:3b:71:bf:97:d8:bb:
         63:0a:b3:e1:e8:36:b2:80:c7:5c:1a:ce:5a:d7:c5:f1:09:f4:
         e9:97:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:37 2024 by rpki-client on console-ams.rpki-client.org