Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          ye4i+b5BACZnX/B9kw4NMdjkoEowi98V88p4HMTi9Oo=
Subject key identifier:   DE:54:3E:E8:57:32:05:95:02:C2:DD:2A:8E:03:7A:88:B3:18:01:51
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       2A426EF70A8D445188E7DD20FA564104CDE44B69
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:11:27 +0000
ROA not before:           Mon 12 Aug 2024 20:06:27 +0000
ROA not after:            Mon 11 Aug 2025 20:11:27 +0000
asID:                     28360
IP address blocks:        179.124.234.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:42:6e:f7:0a:8d:44:51:88:e7:dd:20:fa:56:41:04:cd:e4:4b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:06:27 2024 GMT
            Not After : Aug 11 20:11:27 2025 GMT
        Subject: CN=DE543EE85732059502C2DD2A8E037A88B3180151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:44:f4:b1:94:0d:90:c8:d6:30:30:d9:a0:
                    3e:25:d9:0b:04:c7:47:ab:34:67:b3:d8:0c:e5:f5:
                    85:b1:3f:25:3c:12:b5:27:e6:8b:da:0a:82:ff:be:
                    99:a3:2a:bf:6c:d5:fb:1e:e5:75:ef:47:c6:6d:4e:
                    38:fc:9b:4a:67:2f:6d:5b:0e:ac:b7:e8:e5:34:2b:
                    2b:fe:1f:d9:e5:03:b1:12:fd:fe:c0:dd:7a:db:45:
                    e2:f1:5d:76:5c:00:4a:a4:c1:53:38:57:c4:37:d4:
                    6c:e3:8d:ec:cc:23:aa:6e:b7:b1:d7:2e:95:64:f8:
                    b8:42:1a:58:17:7c:90:8c:eb:3e:d6:71:54:2b:53:
                    f7:0a:8c:e3:46:7d:68:23:fa:f8:2d:0b:de:46:d5:
                    0b:5f:25:bc:4c:62:45:41:ce:1a:57:eb:7f:60:75:
                    01:aa:97:82:4a:89:dc:0b:54:24:d6:21:f0:75:95:
                    c1:cd:b3:2b:1b:43:48:6f:b8:20:e6:a7:1c:e4:71:
                    3a:b5:05:72:d5:aa:4c:c3:37:3c:aa:4a:9d:3e:32:
                    7c:3c:63:17:fe:c0:3e:7f:8a:f8:5f:88:c5:9b:06:
                    84:f3:5b:cc:f2:e3:68:2d:34:12:25:64:05:31:6b:
                    79:4e:e3:44:e5:88:27:0a:4c:3b:de:81:9c:7e:6b:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:3E:E8:57:32:05:95:02:C2:DD:2A:8E:03:7A:88:B3:18:01:51
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:71:69:38:77:30:26:39:ea:55:a7:30:89:7b:03:d0:6d:25:
         26:ca:6a:73:bb:e8:66:36:24:36:9c:28:86:e5:7a:c7:32:fe:
         07:33:14:95:99:92:b2:e1:ce:4e:44:9f:ea:c0:09:ed:3a:de:
         ca:26:d5:d5:f7:97:70:fc:80:e1:4b:ba:d2:06:db:a0:c7:1f:
         42:5f:d8:96:25:72:36:7b:8d:6f:ba:b2:a7:79:00:47:1a:0d:
         ad:b1:04:e2:f9:a6:ba:87:b6:13:e5:ce:7a:cd:c6:20:33:1c:
         68:23:c1:3a:aa:d7:16:81:9e:a0:d4:3b:0d:a4:6c:1a:a1:5e:
         3d:d8:21:10:78:2e:a6:8d:87:e8:c0:d5:ad:35:ad:f7:40:33:
         0a:33:28:40:f8:6d:92:0e:9e:30:01:3f:c8:04:e3:ab:fd:2e:
         15:1e:11:26:d5:6b:5c:e7:7a:3e:a1:fa:f8:c3:e1:59:2a:28:
         bd:fa:58:12:92:e4:83:ec:20:25:1a:5c:8f:b3:76:47:b5:13:
         39:ff:cb:4e:04:62:0a:57:29:d4:b4:86:d6:39:97:b0:5e:a5:
         c1:f4:86:6f:a9:c7:12:58:c3:43:b6:bc:42:20:18:71:67:b5:
         3f:07:a5:71:90:11:73:ff:d1:27:ee:72:11:ea:ee:e7:3b:45:
         d9:47:41:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKkJu9wqNRFGI590g+lZBBM3kS2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNjcwM0JGNzcwNzY4QjJFRjQ0MUY0NjM0NUU0NkQx
Q0YxMDdBNjAeFw0yNDA4MTIyMDA2MjdaFw0yNTA4MTEyMDExMjdaMDMxMTAvBgNV
BAMTKERFNTQzRUU4NTczMjA1OTUwMkMyREQyQThFMDM3QTg4QjMxODAxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgj0T0sZQNkMjWMDDZoD4l2QsE
x0erNGez2Azl9YWxPyU8ErUn5ovaCoL/vpmjKr9s1fse5XXvR8ZtTjj8m0pnL21b
Dqy36OU0Kyv+H9nlA7ES/f7A3XrbReLxXXZcAEqkwVM4V8Q31GzjjezMI6put7HX
LpVk+LhCGlgXfJCM6z7WcVQrU/cKjONGfWgj+vgtC95G1QtfJbxMYkVBzhpX639g
dQGql4JKidwLVCTWIfB1lcHNsysbQ0hvuCDmpxzkcTq1BXLVqkzDNzyqSp0+Mnw8
Yxf+wD5/ivhfiMWbBoTzW8zy42gtNBIlZAUxa3lO40TliCcKTDvegZx+a7gZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3lQ+6FcyBZUCwt0qjgN6iLMYAVEwHwYDVR0j
BBgwFoAUBqZwO/dwdosu9EH0Y0XkbRzxB6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wNkE2NzAzQkY3NzA3NjhCMkVGNDQxRjQ2MzQ1RTQ2RDFDRjEwN0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTY3MDNCRjc3MDc2OEIy
RUY0NDFGNDYzNDVFNDZEMUNGMTA3QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfOowDQYJKoZIhvcNAQELBQADggEBAKVxaTh3
MCY56lWnMIl7A9BtJSbKanO76GY2JDacKIblescy/gczFJWZkrLhzk5En+rACe06
3som1dX3l3D8gOFLutIG26DHH0Jf2JYlcjZ7jW+6sqd5AEcaDa2xBOL5prqHthPl
znrNxiAzHGgjwTqq1xaBnqDUOw2kbBqhXj3YIRB4LqaNh+jA1a01rfdAMwozKED4
bZIOnjABP8gE46v9LhUeESbVa1znej6h+vjD4VkqKL36WBKS5IPsICUaXI+zdke1
Ezn/y04EYgpXKdS0htY5l7BepcH0hm+pxxJYw0O2vEIgGHFntT8HpXGQEXP/0Sfu
chHq7uc7RdlHQfQ=
-----END CERTIFICATE-----
Generated at Thu Aug 22 10:22:51 2024 by rpki-client on console-fra.rpki-client.org