Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232382e302f32322d3233203d3e203238333630.roa
File:                     3137392e3132342e3232382e302f32322d3233203d3e203238333630.roa (raw, json)
Hash identifier:          QH235ogbrQUc2qXXMGnJAlqRg54NOtTv8mFlQr/a7sc=
Subject key identifier:   DD:62:49:4E:49:B0:3C:12:38:F6:55:77:B9:5C:D1:53:C9:D4:A9:04
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       2096034151E32A84EDDCED7872DD49BC0D554174
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232382e302f32322d3233203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:10:21 +0000
ROA not before:           Mon 12 Aug 2024 20:05:21 +0000
ROA not after:            Mon 11 Aug 2025 20:10:21 +0000
asID:                     28360
IP address blocks:        179.124.228.0/22 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:96:03:41:51:e3:2a:84:ed:dc:ed:78:72:dd:49:bc:0d:55:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:05:21 2024 GMT
            Not After : Aug 11 20:10:21 2025 GMT
        Subject: CN=DD62494E49B03C1238F65577B95CD153C9D4A904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:39:a6:24:ad:1e:e9:07:34:47:2d:54:a6:
                    11:e9:db:ca:82:96:9d:ca:da:46:32:57:26:88:7d:
                    c2:be:3b:f7:27:f1:84:fd:5c:30:57:25:90:22:7b:
                    1a:81:83:f4:a2:f7:73:9b:e6:0f:ac:53:7b:0f:c6:
                    6e:7f:c2:3f:1a:63:99:5d:2c:ea:db:6f:c2:00:80:
                    21:3a:ca:93:ae:38:b7:de:b6:f9:31:1a:0e:4e:81:
                    b6:2b:fc:bb:c6:de:b1:29:41:81:2c:7c:f8:3f:79:
                    30:f4:ef:ab:95:bf:2f:f8:bb:d0:76:f2:bc:b0:02:
                    41:3a:6d:9d:78:eb:6a:ad:05:fa:d3:f4:e4:8e:c1:
                    c7:41:43:6c:34:93:eb:b5:31:ba:fb:7f:5e:c8:9d:
                    f6:4f:aa:1e:66:8e:24:52:4d:28:ed:57:a5:b7:93:
                    5f:52:64:fc:78:27:7d:92:3a:32:9c:56:c9:c3:f3:
                    e7:b7:0e:e5:67:3e:eb:76:4b:4f:e4:c1:fb:76:0a:
                    d3:47:02:60:61:ac:23:cc:a2:b9:5e:0f:fe:e1:38:
                    cf:ba:23:f6:2e:f2:e3:8b:86:67:3d:bf:72:c5:96:
                    31:06:12:37:83:8b:85:de:1c:1e:4e:d3:b6:65:1e:
                    2c:77:38:5b:6c:42:77:55:fb:73:05:28:14:de:d4:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:49:4E:49:B0:3C:12:38:F6:55:77:B9:5C:D1:53:C9:D4:A9:04
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232382e302f32322d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:d9:96:3a:95:ad:4b:6f:5a:59:c3:00:88:e3:6d:e5:cc:
         fa:39:95:a2:66:66:4b:76:c2:95:4f:e0:f6:31:47:3f:7b:6c:
         14:bc:96:0c:e5:2f:3e:59:dc:99:f0:7c:a9:28:dd:37:a6:a2:
         a1:7d:cb:a7:51:bc:a6:39:cc:2d:20:65:54:e0:39:3d:3c:0b:
         4d:7a:4e:9b:c8:ed:10:3b:b8:f3:88:f2:2a:4c:f0:f2:f7:71:
         9e:87:66:07:66:67:c1:e9:3a:12:34:78:67:24:ee:93:7e:23:
         3b:59:d9:0f:ad:7f:ed:28:bc:a4:64:f5:71:6f:fa:5e:c9:67:
         67:8e:e1:65:47:01:57:a8:8b:71:c5:d3:74:44:3d:b1:a2:62:
         42:4f:06:d6:ef:00:26:1b:f3:d2:7c:0e:10:34:d3:e2:33:78:
         57:31:2f:da:e7:ef:9a:14:80:54:ac:ae:28:ef:d2:c2:36:1c:
         8f:11:c7:d8:34:5d:ca:d1:49:67:97:21:31:9b:9d:14:fb:80:
         df:f3:fd:57:d6:6e:0b:c5:94:72:df:43:a6:ab:2e:eb:c7:71:
         1c:6b:8c:63:dc:c5:94:7e:02:9f:2a:a9:bd:01:29:d3:01:0e:
         da:19:a8:dc:39:d1:cb:ca:5e:15:d7:45:0b:d0:71:41:03:19:
         99:b3:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:28 2024 by rpki-client on console-ams.rpki-client.org