Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3231203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3231203d3e203238333630.roa (raw, json)
Hash identifier:          gteVReBUOhHURL90YKsuhohwAkxD+AWFAg5Kv32LtqA=
Subject key identifier:   45:BF:63:F9:07:C4:26:A2:9D:B8:D5:A5:B6:F9:B1:FF:BC:78:59:4A
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       709DD5F964BC2E58A15236D3EEC2D078499650C0
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3231203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:09:09 +0000
ROA not before:           Mon 12 Aug 2024 20:04:09 +0000
ROA not after:            Mon 11 Aug 2025 20:09:09 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9d:d5:f9:64:bc:2e:58:a1:52:36:d3:ee:c2:d0:78:49:96:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:04:09 2024 GMT
            Not After : Aug 11 20:09:09 2025 GMT
        Subject: CN=45BF63F907C426A29DB8D5A5B6F9B1FFBC78594A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:e8:f9:7a:26:1b:97:b1:5c:c4:84:02:f0:
                    7b:aa:ee:34:0e:8a:0f:0b:4d:17:ae:5f:75:7e:97:
                    16:2d:f4:46:5c:7d:bc:a7:ab:cc:e2:6d:3d:81:cf:
                    31:44:83:2f:82:86:c5:8d:2f:18:34:f3:39:ed:bf:
                    68:f7:c9:06:60:9d:34:51:29:1b:07:23:5e:4d:ec:
                    c3:f8:9d:a9:cc:ab:e7:f8:ae:63:b9:44:e9:f5:5c:
                    25:6e:26:9f:4d:b8:ac:10:fa:60:7c:ee:1a:7b:2b:
                    90:f4:80:29:84:e6:4e:7c:88:33:f9:a2:4c:f5:8e:
                    50:06:30:93:d9:44:ad:3c:1c:3f:ae:89:e0:e1:a0:
                    5f:94:10:50:4f:ad:a2:fe:97:31:68:e6:f2:41:f1:
                    61:1c:9c:0f:31:0a:60:13:e3:6d:05:f3:c0:99:e9:
                    8f:16:e9:72:c3:b9:f2:64:89:31:7c:56:ea:4b:7a:
                    4f:71:db:61:b8:8e:bc:8a:98:bc:db:77:6a:82:54:
                    ca:8a:bb:f4:fd:7a:73:e1:10:70:24:ea:c7:f9:9f:
                    f7:55:0b:a9:2e:2c:10:63:aa:f9:9b:ad:1e:da:52:
                    2a:a1:52:97:64:1c:bb:5e:ac:ff:05:86:b5:8c:8c:
                    83:7e:f9:e2:c0:d2:21:41:55:6f:dc:e2:92:d6:dd:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BF:63:F9:07:C4:26:A2:9D:B8:D5:A5:B6:F9:B1:FF:BC:78:59:4A
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:da:8b:33:95:9d:62:7a:f2:f3:0c:ec:20:fa:7c:e5:97:81:
         cf:9b:f6:3a:2b:e6:3a:ab:31:6d:70:b3:8c:c5:81:60:eb:2b:
         b6:17:1c:fd:51:cd:fb:13:2a:57:65:71:e5:03:9d:a8:9e:61:
         6b:3c:a7:82:73:9c:65:cf:43:36:e0:1c:4c:4f:63:62:f4:7c:
         42:c3:5b:69:c8:e5:ab:18:ef:41:88:f8:1a:bb:89:ea:c6:ff:
         fc:44:3f:86:98:fa:02:7a:dc:34:1b:6a:03:39:6d:64:ba:4e:
         15:3c:f8:34:2f:85:a2:ea:31:bf:6e:be:9c:6b:e7:ba:f3:9f:
         9b:7e:31:fe:eb:4a:77:6f:23:7f:c8:f2:c7:42:56:d0:46:a8:
         62:d2:33:3f:ac:fb:94:d6:d1:31:b9:3e:02:0c:33:71:ab:36:
         74:f0:b1:01:bc:d2:0e:b1:1c:88:1c:1e:a5:90:f8:39:54:bc:
         93:90:3c:c2:a8:a0:e0:25:ef:d8:8e:91:55:51:ac:8c:0e:0d:
         52:ff:3a:b1:dc:14:b5:a1:78:9e:6b:e9:40:cb:e3:4a:b4:ad:
         7d:2f:d0:86:eb:4f:e0:62:e2:86:c6:99:08:ab:f0:8f:06:eb:
         ba:05:0c:3a:f4:d6:91:b7:96:8d:a0:d9:82:d1:94:59:c9:dc:
         71:9d:62:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcJ3V+WS8LlihUjbT7sLQeEmWUMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNjcwM0JGNzcwNzY4QjJFRjQ0MUY0NjM0NUU0NkQx
Q0YxMDdBNjAeFw0yNDA4MTIyMDA0MDlaFw0yNTA4MTEyMDA5MDlaMDMxMTAvBgNV
BAMTKDQ1QkY2M0Y5MDdDNDI2QTI5REI4RDVBNUI2RjlCMUZGQkM3ODU5NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9Oj5eiYbl7FcxIQC8Huq7jQO
ig8LTReuX3V+lxYt9EZcfbynq8zibT2BzzFEgy+ChsWNLxg08zntv2j3yQZgnTRR
KRsHI15N7MP4nanMq+f4rmO5ROn1XCVuJp9NuKwQ+mB87hp7K5D0gCmE5k58iDP5
okz1jlAGMJPZRK08HD+uieDhoF+UEFBPraL+lzFo5vJB8WEcnA8xCmAT420F88CZ
6Y8W6XLDufJkiTF8VupLek9x22G4jryKmLzbd2qCVMqKu/T9enPhEHAk6sf5n/dV
C6kuLBBjqvmbrR7aUiqhUpdkHLterP8FhrWMjIN++eLA0iFBVW/c4pLW3YwTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURb9j+QfEJqKduNWltvmx/7x4WUowHwYDVR0j
BBgwFoAUBqZwO/dwdosu9EH0Y0XkbRzxB6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wNkE2NzAzQkY3NzA3NjhCMkVGNDQxRjQ2MzQ1RTQ2RDFDRjEwN0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTY3MDNCRjc3MDc2OEIy
RUY0NDFGNDYzNDVFNDZEMUNGMTA3QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzEyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzfOAwDQYJKoZIhvcNAQELBQADggEBADHaizOV
nWJ68vMM7CD6fOWXgc+b9jor5jqrMW1ws4zFgWDrK7YXHP1RzfsTKldlceUDnaie
YWs8p4JznGXPQzbgHExPY2L0fELDW2nI5asY70GI+Bq7ierG//xEP4aY+gJ63DQb
agM5bWS6ThU8+DQvhaLqMb9uvpxr57rzn5t+Mf7rSndvI3/I8sdCVtBGqGLSMz+s
+5TW0TG5PgIMM3GrNnTwsQG80g6xHIgcHqWQ+DlUvJOQPMKooOAl79iOkVVRrIwO
DVL/OrHcFLWheJ5r6UDL40q0rX0v0IbrT+Bi4obGmQir8I8G67oFDDr01pG3lo2g
2YLRlFnJ3HGdYq4=
-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:28 2024 by rpki-client on console-ams.rpki-client.org