Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          w2S7ZM3QbNoyohgRoze/1LtX9indcgW3hqbT+wo6cNI=
Subject key identifier:   9B:F3:0B:A2:4A:C7:EC:48:21:19:77:F4:7E:0B:B4:2E:9A:42:55:73
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       2786AA330619567BF1D633BF085EE159C25CEBBE
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:11:21 +0000
ROA not before:           Mon 12 Aug 2024 20:06:21 +0000
ROA not after:            Mon 11 Aug 2025 20:11:21 +0000
asID:                     28360
IP address blocks:        179.124.233.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:86:aa:33:06:19:56:7b:f1:d6:33:bf:08:5e:e1:59:c2:5c:eb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:06:21 2024 GMT
            Not After : Aug 11 20:11:21 2025 GMT
        Subject: CN=9BF30BA24AC7EC48211977F47E0BB42E9A425573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:9f:fa:37:04:89:7c:e7:55:76:25:94:71:
                    c6:e9:c0:56:d6:32:e9:d3:e6:1e:df:85:e1:6f:c8:
                    30:17:97:c1:f0:d2:48:77:6b:d5:89:70:3a:8a:bd:
                    4a:6c:6e:c7:d9:75:06:6a:9d:f4:f3:63:4c:90:e2:
                    a3:3c:97:6c:1d:64:5e:87:5b:51:db:d3:a4:18:18:
                    29:da:f8:0d:6d:83:80:81:f6:ce:72:27:2e:b0:f6:
                    ce:c2:ba:6f:2d:e7:2a:eb:db:20:a1:ad:d3:ea:90:
                    47:a9:18:e2:8f:a4:2f:10:0c:f5:a3:73:73:90:9c:
                    79:3b:db:15:8c:52:4b:f5:c7:33:c5:ca:7e:b2:cc:
                    a6:d1:90:fd:0f:5d:f0:33:aa:25:9e:91:0c:15:0c:
                    f2:5b:2e:f6:84:8e:94:20:26:c0:4e:82:0d:0a:39:
                    82:14:42:3f:49:10:88:db:f0:f5:49:b9:5e:ec:c2:
                    62:ad:59:b0:52:da:56:f9:d0:cf:3d:9b:bf:42:08:
                    61:cd:92:77:3c:39:5c:e0:49:0b:eb:72:69:de:93:
                    83:3d:d3:40:95:05:0c:fa:e3:21:44:39:4f:89:67:
                    c6:44:26:5b:3c:35:54:50:7c:32:c9:c4:8e:ad:a1:
                    9e:68:7b:ea:dd:3d:8d:35:de:4e:01:ab:15:19:ac:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F3:0B:A2:4A:C7:EC:48:21:19:77:F4:7E:0B:B4:2E:9A:42:55:73
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f2:fa:6e:80:05:8d:dc:c0:7f:48:d1:e0:f6:ed:e2:8f:4b:
         4f:39:24:d3:db:f7:c5:cb:ba:36:aa:2e:b1:2b:97:1b:7b:3b:
         79:fe:17:d0:1b:e9:5d:53:dd:47:87:53:80:be:86:76:69:80:
         a7:d3:29:af:3b:82:45:3f:14:c8:fe:51:dc:aa:16:83:19:5e:
         c9:ba:4e:66:26:5c:df:70:3b:9e:ef:c4:c5:f6:d0:96:17:f4:
         7a:4e:f4:bd:c0:6a:1f:42:31:22:c6:4e:4f:ce:e6:72:41:ef:
         cf:fb:d0:bd:16:71:5f:a9:ba:b5:c7:6c:9f:bc:39:ef:02:15:
         73:f0:23:41:7f:bc:45:89:85:50:dd:c8:79:3e:a1:86:92:d8:
         4e:ab:f5:89:89:cf:42:48:30:71:49:5a:2e:e8:87:8e:ed:58:
         99:ff:8c:9e:3b:01:97:5b:dc:7d:ac:d1:2c:42:37:5e:f2:db:
         44:20:74:68:93:f7:56:53:98:f1:f3:6e:83:c1:c1:8e:19:03:
         82:66:3d:d6:99:cc:bf:40:24:62:ff:de:54:89:e9:ef:bc:0b:
         1a:e3:55:ae:8e:a0:e3:fc:2c:2a:b9:9f:61:a1:05:7a:d5:48:
         6b:c9:e1:bd:d6:a6:1a:e0:92:8e:fe:f8:69:cb:7f:1a:34:b9:
         bf:55:b1:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ4aqMwYZVnvx1jO/CF7hWcJc674wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNjcwM0JGNzcwNzY4QjJFRjQ0MUY0NjM0NUU0NkQx
Q0YxMDdBNjAeFw0yNDA4MTIyMDA2MjFaFw0yNTA4MTEyMDExMjFaMDMxMTAvBgNV
BAMTKDlCRjMwQkEyNEFDN0VDNDgyMTE5NzdGNDdFMEJCNDJFOUE0MjU1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMp/6NwSJfOdVdiWUccbpwFbW
MunT5h7fheFvyDAXl8Hw0kh3a9WJcDqKvUpsbsfZdQZqnfTzY0yQ4qM8l2wdZF6H
W1Hb06QYGCna+A1tg4CB9s5yJy6w9s7Cum8t5yrr2yChrdPqkEepGOKPpC8QDPWj
c3OQnHk72xWMUkv1xzPFyn6yzKbRkP0PXfAzqiWekQwVDPJbLvaEjpQgJsBOgg0K
OYIUQj9JEIjb8PVJuV7swmKtWbBS2lb50M89m79CCGHNknc8OVzgSQvrcmnek4M9
00CVBQz64yFEOU+JZ8ZEJls8NVRQfDLJxI6toZ5oe+rdPY013k4BqxUZrOQdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm/MLokrH7EghGXf0fgu0LppCVXMwHwYDVR0j
BBgwFoAUBqZwO/dwdosu9EH0Y0XkbRzxB6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wNkE2NzAzQkY3NzA3NjhCMkVGNDQxRjQ2MzQ1RTQ2RDFDRjEwN0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTY3MDNCRjc3MDc2OEIy
RUY0NDFGNDYzNDVFNDZEMUNGMTA3QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfOkwDQYJKoZIhvcNAQELBQADggEBAFTy+m6A
BY3cwH9I0eD27eKPS085JNPb98XLujaqLrErlxt7O3n+F9Ab6V1T3UeHU4C+hnZp
gKfTKa87gkU/FMj+UdyqFoMZXsm6TmYmXN9wO57vxMX20JYX9HpO9L3Aah9CMSLG
Tk/O5nJB78/70L0WcV+purXHbJ+8Oe8CFXPwI0F/vEWJhVDdyHk+oYaS2E6r9YmJ
z0JIMHFJWi7oh47tWJn/jJ47AZdb3H2s0SxCN17y20QgdGiT91ZTmPHzboPBwY4Z
A4JmPdaZzL9AJGL/3lSJ6e+8CxrjVa6OoOP8LCq5n2GhBXrVSGvJ4b3Wphrgko7+
+GnLfxo0ub9VsQI=
-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:28 2024 by rpki-client on console-ams.rpki-client.org