Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32322d3233203d3e203238333630.roa
File:                     3137392e3132342e3233322e302f32322d3233203d3e203238333630.roa (raw, json)
Hash identifier:          7VODqQG6CX88/7Fq/W6Axo2T0X7dWvPrpKQ1nI2lOQk=
Subject key identifier:   31:FD:FB:52:34:97:6C:2F:32:8C:9C:85:1E:31:01:A5:06:D6:A7:71
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       1E38DDB79E7B55EBCAE55318882D36A233414669
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32322d3233203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:10:31 +0000
ROA not before:           Mon 12 Aug 2024 20:05:31 +0000
ROA not after:            Mon 11 Aug 2025 20:10:31 +0000
asID:                     28360
IP address blocks:        179.124.232.0/22 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:38:dd:b7:9e:7b:55:eb:ca:e5:53:18:88:2d:36:a2:33:41:46:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:05:31 2024 GMT
            Not After : Aug 11 20:10:31 2025 GMT
        Subject: CN=31FDFB5234976C2F328C9C851E3101A506D6A771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:cf:56:02:ae:b4:97:91:05:e2:c2:80:9d:
                    9d:6d:34:2f:d2:aa:f8:54:92:ec:b5:d9:68:cf:f0:
                    94:c7:d9:5c:c7:52:08:43:73:b4:ee:95:b2:85:38:
                    3b:40:1a:1d:b8:ae:8d:33:99:8c:55:ea:b1:5f:9b:
                    29:bd:f2:d2:0a:0a:25:c4:a9:49:00:48:aa:ca:d4:
                    4b:bd:99:dd:8d:02:e4:6e:03:c5:6d:27:fe:e7:c1:
                    17:98:7b:7f:63:be:af:b0:36:b6:39:bb:9d:8d:96:
                    91:14:8b:17:d9:65:99:c3:45:f5:2e:bd:c4:31:0a:
                    4f:8c:58:fe:74:a0:e1:d3:55:1d:67:f2:52:16:d0:
                    6d:d4:5f:ba:dd:2d:64:80:59:6c:e7:3b:4b:84:3e:
                    f4:0a:0f:db:6e:2f:35:85:36:e9:3c:50:7c:0a:72:
                    58:69:19:e9:34:d1:be:8b:09:b1:09:22:54:9a:89:
                    48:48:c5:44:8e:f1:55:c3:00:d7:11:60:c7:7b:52:
                    c6:aa:fe:4f:29:4d:a8:23:2e:a4:c5:ba:40:a9:6a:
                    3d:46:b6:5c:f9:3a:17:77:c2:42:14:d1:a0:67:65:
                    4c:a8:6b:b4:78:33:48:99:28:b3:d3:14:d4:30:69:
                    40:b1:26:57:b2:df:4f:5f:b1:c7:ce:e7:de:8c:7d:
                    42:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FD:FB:52:34:97:6C:2F:32:8C:9C:85:1E:31:01:A5:06:D6:A7:71
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32322d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:98:3a:55:f3:74:c1:1d:48:fb:bc:3f:c8:69:6c:45:42:
         ab:69:97:d3:ee:f7:eb:41:a3:16:06:7c:c1:5b:a8:16:55:ea:
         e8:38:a1:6a:62:b2:dd:b3:4a:64:d3:93:0a:eb:3d:3d:69:5a:
         be:e4:22:da:d7:e4:68:ca:60:15:6f:7a:8c:1b:77:59:c9:a7:
         9e:98:dc:58:50:2f:49:a8:f1:a6:65:e4:ac:9b:7c:31:9b:f9:
         5b:e6:c4:a8:01:35:51:f2:73:f4:c5:7a:a5:45:5d:3d:fd:8d:
         a1:4f:27:4c:59:04:e8:b1:da:70:c1:69:c0:27:92:0b:f3:d8:
         d7:23:e6:df:22:57:55:1c:5c:ca:15:5d:ee:10:bd:bd:32:d9:
         2c:d2:45:12:17:5d:4c:49:e8:08:77:46:c5:11:38:8f:18:55:
         36:49:37:9f:dc:8d:9d:19:ab:60:1e:5a:93:31:fb:ed:b8:ff:
         05:16:53:9d:f4:92:81:90:92:d5:b4:0d:24:eb:77:ff:f9:83:
         53:98:51:38:29:ea:30:ba:30:ed:4f:d9:8b:7b:26:05:12:7d:
         ec:10:3b:b7:e3:7e:47:f5:3c:a8:23:63:0d:51:f8:69:af:f8:
         d3:5f:e8:b2:cf:5e:a0:37:6b:6f:c4:06:12:cc:c0:bc:d3:c3:
         15:92:e8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 10:22:51 2024 by rpki-client on console-fra.rpki-client.org