Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32322d3233203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32322d3233203d3e203238333630.roa (raw, json)
Hash identifier:          aXxCXqIXtbxN7I68D3eaD3sDV0tduMIQf1Eg0gnIJMw=
Subject key identifier:   2D:C7:36:E5:E0:FB:02:C9:25:EC:1F:6B:41:A9:68:44:AE:62:25:FF
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       5E3CE56DE964F797C3BCDA1D15BC8DCAD461CAE7
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32322d3233203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:10:12 +0000
ROA not before:           Mon 12 Aug 2024 20:05:12 +0000
ROA not after:            Mon 11 Aug 2025 20:10:12 +0000
asID:                     28360
IP address blocks:        179.124.224.0/22 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3c:e5:6d:e9:64:f7:97:c3:bc:da:1d:15:bc:8d:ca:d4:61:ca:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:05:12 2024 GMT
            Not After : Aug 11 20:10:12 2025 GMT
        Subject: CN=2DC736E5E0FB02C925EC1F6B41A96844AE6225FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:19:07:89:8f:34:c4:f9:8d:05:e1:58:58:
                    a7:1f:de:a6:f2:66:c1:68:30:88:b3:a9:e4:db:6f:
                    55:26:03:73:dd:b9:3c:d0:09:30:c8:db:4e:ac:fe:
                    9d:e2:93:38:1b:77:09:6c:c7:45:49:60:1b:6d:30:
                    e5:26:ae:d1:ce:1a:3d:0a:75:f1:d8:2c:6a:50:bd:
                    12:cf:6c:0c:37:db:2a:e5:f1:18:c7:50:73:d0:c5:
                    d4:e6:a3:19:6e:d6:88:7a:bb:35:39:bd:a8:7b:d6:
                    73:22:6c:cf:91:79:c1:17:83:90:0b:20:a8:bd:82:
                    05:4e:f6:b9:68:46:07:c3:9d:5e:bb:09:e0:16:e2:
                    c3:23:db:74:8a:1f:9b:06:e7:35:13:94:99:d9:33:
                    60:aa:89:ce:50:c8:60:98:3d:eb:40:78:2c:fe:ec:
                    0a:15:83:c9:0d:6a:2c:bf:96:43:29:3b:79:b3:73:
                    34:7d:29:e7:2a:68:52:42:fb:af:1c:95:bf:8a:c0:
                    df:7d:6a:51:ec:3b:f0:89:45:3b:73:f3:d6:88:b1:
                    ec:bf:01:28:ad:b2:f8:1b:ad:b6:2b:df:9b:52:bd:
                    46:63:bb:10:9d:53:0b:ed:fb:4a:4d:32:95:3e:8a:
                    d0:97:13:b8:fa:b5:18:6a:00:f2:10:ba:e8:5e:4c:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:36:E5:E0:FB:02:C9:25:EC:1F:6B:41:A9:68:44:AE:62:25:FF
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32322d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:08:86:c2:6f:9e:a5:a7:1c:a5:b4:b6:83:b4:a6:ad:f3:f7:
         19:52:af:7f:93:58:ce:43:13:1f:c7:32:2d:27:91:d6:44:03:
         75:57:fc:08:78:01:de:d5:94:f0:1e:bd:46:89:b6:95:29:e1:
         94:b1:5b:5a:e8:fd:a8:75:f3:e9:b1:37:6c:b3:9c:38:25:1c:
         bd:1c:6c:35:b2:c4:b8:9c:e3:16:df:42:d9:21:47:12:af:74:
         86:f7:57:1e:ec:b0:fe:0c:30:4d:f5:03:35:a2:2b:56:e2:0e:
         96:ce:0a:cf:04:bd:c2:b5:c1:5b:7c:6b:a4:79:fe:14:bb:1f:
         90:52:67:31:0f:a2:f4:7d:90:a2:b6:3a:c2:3e:3a:f8:91:c0:
         4f:bb:c5:c7:f8:24:51:95:fa:c5:7c:b7:18:33:ac:dc:87:e2:
         32:88:9e:f7:c3:c3:15:d1:21:8c:89:37:a3:f6:81:18:88:d0:
         bb:56:53:06:37:2f:63:0e:2d:ce:82:80:07:54:3a:f7:6e:3e:
         22:ab:c8:63:64:f1:37:ec:c0:fe:1d:d4:c3:93:ed:f4:03:78:
         f3:07:3d:a9:75:d6:c2:c0:27:07:f5:dc:8a:85:a7:58:6e:17:
         46:ef:2c:d3:a0:77:50:41:0a:4e:1e:1c:13:91:1e:5a:ba:39:
         e5:64:5a:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXjzlbelk95fDvNodFbyNytRhyucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNjcwM0JGNzcwNzY4QjJFRjQ0MUY0NjM0NUU0NkQx
Q0YxMDdBNjAeFw0yNDA4MTIyMDA1MTJaFw0yNTA4MTEyMDEwMTJaMDMxMTAvBgNV
BAMTKDJEQzczNkU1RTBGQjAyQzkyNUVDMUY2QjQxQTk2ODQ0QUU2MjI1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDBkHiY80xPmNBeFYWKcf3qby
ZsFoMIizqeTbb1UmA3PduTzQCTDI206s/p3ikzgbdwlsx0VJYBttMOUmrtHOGj0K
dfHYLGpQvRLPbAw32yrl8RjHUHPQxdTmoxlu1oh6uzU5vah71nMibM+RecEXg5AL
IKi9ggVO9rloRgfDnV67CeAW4sMj23SKH5sG5zUTlJnZM2Cqic5QyGCYPetAeCz+
7AoVg8kNaiy/lkMpO3mzczR9KecqaFJC+68clb+KwN99alHsO/CJRTtz89aIsey/
ASitsvgbrbYr35tSvUZjuxCdUwvt+0pNMpU+itCXE7j6tRhqAPIQuuheTEkpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULcc25eD7Askl7B9rQaloRK5iJf8wHwYDVR0j
BBgwFoAUBqZwO/dwdosu9EH0Y0XkbRzxB6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wNkE2NzAzQkY3NzA3NjhCMkVGNDQxRjQ2MzQ1RTQ2RDFDRjEwN0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTY3MDNCRjc3MDc2OEIy
RUY0NDFGNDYzNDVFNDZEMUNGMTA3QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzfOAwDQYJKoZIhvcNAQELBQADggEBABcIhsJv
nqWnHKW0toO0pq3z9xlSr3+TWM5DEx/HMi0nkdZEA3VX/Ah4Ad7VlPAevUaJtpUp
4ZSxW1ro/ah18+mxN2yznDglHL0cbDWyxLic4xbfQtkhRxKvdIb3Vx7ssP4MME31
AzWiK1biDpbOCs8EvcK1wVt8a6R5/hS7H5BSZzEPovR9kKK2OsI+OviRwE+7xcf4
JFGV+sV8txgzrNyH4jKInvfDwxXRIYyJN6P2gRiI0LtWUwY3L2MOLc6CgAdUOvdu
PiKryGNk8TfswP4d1MOT7fQDePMHPal11sLAJwf13IqFp1huF0bvLNOgd1BBCk4e
HBORHlq6OeVkWgc=
-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:28 2024 by rpki-client on console-ams.rpki-client.org