Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          6s5mrms/lMgxFfyNhUcHA2NXuGFPpsvNY2tc7/OiBqY=
Subject key identifier:   2E:63:B2:9B:0B:87:A9:F7:0B:EB:52:1B:30:04:44:8A:70:EB:4B:74
Certificate issuer:       /CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
Certificate serial:       462925FDEE4DABFF064CEBA2B593C4436E649DC0
Authority key identifier: 5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa
Signing time:             Thu 24 Oct 2024 18:51:22 +0000
ROA not before:           Thu 24 Oct 2024 18:46:22 +0000
ROA not after:            Thu 23 Oct 2025 18:51:22 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:29:25:fd:ee:4d:ab:ff:06:4c:eb:a2:b5:93:c4:43:6e:64:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
        Validity
            Not Before: Oct 24 18:46:22 2024 GMT
            Not After : Oct 23 18:51:22 2025 GMT
        Subject: CN=2E63B29B0B87A9F70BEB521B3004448A70EB4B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:c7:74:f5:fb:f6:34:e3:3d:52:f5:0e:27:
                    f4:bd:f0:69:96:fb:66:56:84:cb:74:42:f4:40:4b:
                    31:e1:47:e2:a4:f0:64:bc:63:b6:bb:d7:b7:05:d2:
                    05:4c:e3:95:f5:65:3b:9e:af:a6:42:9d:0a:e5:b5:
                    4d:3d:2b:ed:0b:d1:54:a2:23:67:8a:d0:fe:99:21:
                    f8:75:59:62:6c:09:57:24:02:ea:61:ce:39:75:6f:
                    79:20:23:c1:c8:61:9f:c0:10:be:c8:99:54:a9:ce:
                    24:3a:e6:ad:fa:9c:f2:ac:f3:0c:d7:d4:a9:0a:55:
                    c6:25:e3:29:24:c1:11:bf:b2:1d:a8:37:a9:4a:fa:
                    5c:1e:36:93:4c:06:f2:4b:9c:df:e5:26:fc:7f:6a:
                    93:a8:a2:49:b4:11:36:e8:76:49:82:db:87:32:f4:
                    10:f0:7c:cd:fd:82:d7:bf:58:d3:80:b7:13:1a:57:
                    2c:35:a8:1e:24:d7:56:a9:cb:cb:0a:b7:8b:47:36:
                    70:32:02:a6:94:62:99:9d:a4:06:f1:01:22:ab:77:
                    4f:1f:0d:08:74:61:b0:ea:07:8f:cb:cc:11:65:5a:
                    3e:1f:4d:b3:06:ab:42:69:49:e0:31:80:e7:1f:0f:
                    b7:18:31:15:96:0b:77:0d:2b:ae:44:03:b4:4c:db:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:63:B2:9B:0B:87:A9:F7:0B:EB:52:1B:30:04:44:8A:70:EB:4B:74
            X509v3 Authority Key Identifier:
                keyid:5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:19:9a:cf:3f:10:f3:bd:0a:3c:ce:a3:30:de:dc:4d:db:f8:
         8f:e3:0e:ee:30:8a:55:cf:1a:32:f0:65:df:b7:e2:a4:28:a9:
         40:11:2e:a8:49:df:5f:5f:16:d3:60:01:35:09:05:05:c5:cc:
         4a:7d:d3:e2:b4:0d:ac:8c:8b:18:52:f9:9b:15:b9:28:c4:1e:
         23:3d:98:12:b2:f2:9c:be:8f:e6:fc:2d:f4:71:ff:d9:aa:de:
         0c:8a:95:88:c4:ec:e2:84:ae:4a:cd:f2:7b:14:c4:9d:02:3b:
         79:4a:15:c8:bf:47:0a:2c:56:7f:8d:c8:cd:9e:62:39:7a:68:
         37:8f:95:1e:95:14:af:fd:d3:22:61:cf:63:02:62:2a:af:14:
         fc:c0:8c:a3:9a:bc:31:f6:d6:f4:fe:80:e6:7a:41:c5:eb:e9:
         b8:fe:b8:2e:10:e4:49:1c:7e:e1:40:d0:b1:03:53:ac:5f:0c:
         78:82:35:b8:f0:85:39:97:cf:a3:ab:3a:83:f4:6a:4c:33:50:
         9c:44:ab:3f:a6:c8:ff:88:7f:8d:d2:09:03:5b:37:de:26:a7:
         d6:b9:26:4e:5f:a6:49:3b:64:0b:16:fc:a0:d4:68:76:ca:1e:
         37:3d:ff:2a:8a:68:3b:9f:6e:e2:14:d9:25:63:15:d7:9d:48:
         60:d7:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 22:25:48 2024 by rpki-client on console-fra.rpki-client.org