Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          CFSMSsjnQYfQX8njM/EcqioNDQm/yOpDclSNHcjq/js=
Subject key identifier:   45:D8:5D:E4:55:90:DA:4F:DC:B6:BC:AC:32:7E:D2:53:DF:74:41:BC
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       46B5B0B32B55C0BB46A7E7AFABAA90187BE83AA9
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:33 +0000
ROA not before:           Tue 05 Dec 2023 15:39:33 +0000
ROA not after:            Tue 03 Dec 2024 15:44:33 +0000
asID:                     263641
IP address blocks:        179.127.153.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b5:b0:b3:2b:55:c0:bb:46:a7:e7:af:ab:aa:90:18:7b:e8:3a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:33 2023 GMT
            Not After : Dec  3 15:44:33 2024 GMT
        Subject: CN=45D85DE45590DA4FDCB6BCAC327ED253DF7441BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:0c:e9:1a:ec:86:3d:c8:1d:24:d6:b4:38:
                    3a:96:e9:63:8f:16:b5:14:d7:ac:ab:5c:28:66:2e:
                    cf:77:fa:90:ba:f8:30:44:00:f5:af:04:97:a4:81:
                    b5:a0:1d:cc:da:c9:ca:12:a7:87:b5:cc:d4:54:51:
                    90:8f:7f:f8:f5:dd:2d:45:62:f1:e2:35:4e:e0:7b:
                    9b:b6:f8:0a:d0:8c:a4:ed:93:52:95:70:03:23:db:
                    de:c5:d1:82:d5:4e:d0:50:f7:b3:ba:8c:ab:f0:fc:
                    37:a7:b7:c1:9d:13:a2:99:54:5a:3a:d2:69:8c:e8:
                    01:1d:c9:d1:0a:c8:33:2c:8a:e1:3c:0c:7d:27:ed:
                    a1:ff:e5:3c:fc:55:0f:14:ac:e4:ef:df:0d:4d:7b:
                    ab:21:1b:83:eb:2d:f8:c4:81:1d:81:3b:cb:02:51:
                    4c:c2:02:2b:ab:0a:c4:f1:1a:5d:01:91:e6:60:9c:
                    a1:2d:ce:ca:56:05:c0:3b:c1:a0:bc:7e:5e:cb:9d:
                    7c:53:56:0c:c5:83:23:5d:06:2d:cd:f0:3b:45:a8:
                    27:64:c9:cf:f0:8a:0b:4c:e8:06:31:0d:44:55:e8:
                    8a:4c:ca:3d:f1:fc:fc:cc:bc:82:fb:45:29:0a:25:
                    b3:46:28:69:94:55:4d:d6:8c:5e:52:0f:de:72:c7:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D8:5D:E4:55:90:DA:4F:DC:B6:BC:AC:32:7E:D2:53:DF:74:41:BC
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:a1:69:2c:ef:5a:ab:9b:22:78:91:5d:d9:44:8d:77:c9:
         42:b6:73:7a:fe:93:44:ee:08:70:b6:15:3d:65:c3:c1:43:c5:
         f9:3e:3d:95:06:c7:33:05:ba:36:39:55:24:6d:5e:c0:12:ba:
         37:17:18:db:20:14:6c:63:ee:cc:35:de:19:00:19:c3:dc:10:
         b9:60:03:3a:ef:d6:a4:a8:64:d7:9f:33:00:dd:d4:50:e9:5b:
         23:50:04:c5:1d:71:ad:fc:fb:95:3e:bb:4b:77:bf:c9:33:aa:
         7c:29:79:f8:8e:aa:5f:4f:47:ec:a8:64:3f:85:4f:8b:8d:ab:
         56:1b:be:ba:48:22:4e:1f:c1:ed:ba:75:91:60:a2:ed:7e:cf:
         ba:34:7a:46:c5:e3:01:32:f6:0e:9c:ca:f4:32:8c:59:c6:05:
         e0:52:d5:03:f0:aa:86:6d:86:d8:ff:99:44:35:17:c5:5f:8f:
         a8:24:59:22:23:1d:a9:e6:4a:59:b2:04:ed:c0:47:90:d9:b9:
         bf:46:64:6c:64:c2:9f:be:89:8c:ce:3e:01:b2:47:1f:d1:fd:
         56:b0:0c:ca:71:bb:8c:58:c5:3d:d1:cb:6b:e9:0d:9c:b7:90:
         8e:92:2f:f5:39:dc:df:6b:6d:6a:9c:5e:52:50:b9:b9:dc:b5:
         01:ae:fb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:37 2024 by rpki-client on console-ams.rpki-client.org