Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          5crwsQbyBbPu1O7ikAb7+I2pbxaJeW2j6/V1OFZq0o4=
Subject key identifier:   7F:1C:09:49:48:2C:F5:BC:C1:1B:A8:2F:03:80:33:90:18:E7:D8:64
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       436236D63F87A228ADDB13056BAE97DB02CBBA3D
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:35 +0000
ROA not before:           Tue 05 Dec 2023 15:39:35 +0000
ROA not after:            Tue 03 Dec 2024 15:44:35 +0000
asID:                     263641
IP address blocks:        179.127.155.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:62:36:d6:3f:87:a2:28:ad:db:13:05:6b:ae:97:db:02:cb:ba:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:35 2023 GMT
            Not After : Dec  3 15:44:35 2024 GMT
        Subject: CN=7F1C0949482CF5BCC11BA82F0380339018E7D864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:34:20:04:85:60:01:e2:70:90:e7:6c:2d:
                    e8:77:ae:60:da:fc:62:99:90:04:eb:93:0b:d1:33:
                    e7:e6:d6:03:b7:0e:7e:f5:2c:89:e0:b7:72:bf:84:
                    25:8c:7a:d6:83:9f:a1:6a:71:bb:99:6a:15:f2:9c:
                    8f:ab:ff:14:cb:9a:f1:91:19:43:c5:18:8c:74:e9:
                    f7:5c:dc:17:0a:ca:88:bb:91:18:bb:ee:69:8f:33:
                    ed:20:26:e0:de:b6:04:21:c7:e7:9f:f9:5c:ba:a1:
                    03:44:2e:3e:dc:fc:b5:61:57:1a:a6:b5:85:57:fa:
                    7c:19:91:64:86:cf:3d:5b:d2:cb:c8:bb:1e:87:03:
                    e8:42:66:99:44:36:b7:07:f6:03:0f:20:47:bf:7a:
                    56:0d:39:5b:24:65:56:91:ed:f3:cd:c1:94:81:fa:
                    bb:57:6f:a2:9b:c6:3c:66:af:30:eb:f3:d7:ae:1f:
                    45:d9:a2:29:ca:c6:b6:83:fd:bd:58:ef:e3:ba:68:
                    7c:06:b5:51:d7:69:57:88:56:2b:a9:fa:ff:3d:46:
                    4f:4a:79:a7:51:f1:d4:21:a0:42:92:e7:dc:89:e8:
                    3b:e0:d4:da:12:a3:27:5e:46:21:5d:49:bc:d7:c4:
                    7c:7e:65:a5:00:f9:ed:8c:16:b3:2e:c7:f3:86:ef:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1C:09:49:48:2C:F5:BC:C1:1B:A8:2F:03:80:33:90:18:E7:D8:64
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e3:a4:c4:4d:dc:d5:9b:e4:4b:57:6d:73:b9:f3:5a:09:8c:
         c2:2a:a8:be:51:c6:45:68:27:ed:cc:7f:07:04:36:52:07:ad:
         56:eb:a2:89:23:c7:f6:4a:57:f7:4e:fe:8e:96:d8:26:b6:f2:
         16:ee:18:9d:b1:1c:0e:be:00:38:f1:86:70:dc:31:f6:59:f0:
         85:fd:eb:32:ef:69:1e:0d:7e:0f:e8:0e:88:e1:c0:b8:af:ab:
         e8:88:fb:0f:4b:f1:39:54:3a:48:c2:ea:74:4d:f4:61:d6:72:
         87:8b:af:a9:ac:74:f1:7e:95:b1:eb:b1:0c:e3:af:dc:a6:6f:
         b9:32:26:93:64:33:16:16:19:01:ce:bb:19:5d:47:0b:40:30:
         8d:6e:8e:8f:a2:20:cf:c8:33:fd:7c:3b:43:1a:4a:33:79:8f:
         9e:f3:56:6c:20:34:57:4f:a9:09:b1:db:7f:20:f1:11:ab:47:
         72:55:2f:41:ee:6a:f8:dd:b6:ed:40:9a:36:c9:8f:26:c0:a9:
         80:a7:8d:75:1f:43:c3:16:48:aa:64:22:2d:7c:6f:db:6f:a9:
         e3:32:fb:66:70:46:15:70:dd:43:a3:d6:81:a0:04:1a:f4:d3:
         c2:b4:03:c4:6f:2e:4a:8c:ad:d9:32:74:67:7d:ae:7f:73:88:
         8a:be:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:37 2024 by rpki-client on console-ams.rpki-client.org