Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32322d3233203d3e203238333630.roa
File:                     3137392e3132342e3233362e302f32322d3233203d3e203238333630.roa (raw, json)
Hash identifier:          Lu7W9u0k9zL2W6T+dAP0JhBd6eFb4EoiTmAo58bIt+8=
Subject key identifier:   84:75:43:37:54:38:F1:7A:E8:EC:C0:2E:5E:3B:D8:0E:16:B6:3F:B4
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       4372F6EC1CF6B39F37F3C303E6DF6801A0A58843
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32322d3233203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:10:42 +0000
ROA not before:           Mon 12 Aug 2024 20:05:42 +0000
ROA not after:            Mon 11 Aug 2025 20:10:42 +0000
asID:                     28360
IP address blocks:        179.124.236.0/22 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:72:f6:ec:1c:f6:b3:9f:37:f3:c3:03:e6:df:68:01:a0:a5:88:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:05:42 2024 GMT
            Not After : Aug 11 20:10:42 2025 GMT
        Subject: CN=847543375438F17AE8ECC02E5E3BD80E16B63FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:2f:df:e2:84:1f:8d:9e:3d:75:a9:eb:47:
                    7a:e8:cf:d7:16:c6:b9:86:8a:91:3d:91:f7:12:f8:
                    0d:7e:70:d1:1e:0d:7b:df:48:c1:e0:a1:60:38:ff:
                    18:53:b6:f1:08:1a:4b:d2:9a:c0:54:b4:d3:a9:69:
                    1f:cf:25:56:91:e5:9c:61:8b:a2:2f:32:75:b9:09:
                    13:71:13:06:e3:a9:27:f2:eb:df:15:db:b6:29:88:
                    5f:68:49:a8:bd:1d:ed:92:15:af:39:17:22:86:6b:
                    79:f7:fc:12:58:f1:08:69:42:ec:3a:76:2b:c7:06:
                    65:b4:9d:34:f7:77:84:e0:5c:df:ee:0c:2b:39:d9:
                    6e:37:a2:09:fc:e9:2d:5b:f6:b1:ef:ac:fd:2b:e6:
                    e3:c9:fa:5e:70:75:c2:2c:6f:5e:e3:bd:91:c8:b8:
                    77:fb:ba:c0:53:76:bb:da:ab:4b:6b:08:4b:d0:fd:
                    cc:50:ff:3e:53:c6:a4:b3:8c:03:6d:4d:62:9d:0d:
                    42:48:10:ae:3f:24:4e:a0:d3:67:ce:fd:8d:17:41:
                    0f:d6:25:1f:06:ce:a1:f1:b7:e7:bc:d1:66:01:c2:
                    25:5d:b6:f6:ee:9e:d0:93:fb:1e:3d:d2:02:03:f4:
                    5d:7a:45:6d:2d:f2:c5:fe:88:3b:ee:b3:7e:ab:9c:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:75:43:37:54:38:F1:7A:E8:EC:C0:2E:5E:3B:D8:0E:16:B6:3F:B4
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32322d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:47:41:f7:82:74:ca:b1:f9:03:74:fb:b8:68:83:07:24:44:
         f7:49:55:77:e8:eb:3b:c4:d4:5e:ee:a2:c1:72:24:55:e3:65:
         d7:ce:0a:48:b5:64:f2:c4:6e:95:57:a9:e1:0c:03:48:3b:0b:
         c4:24:f7:c1:31:eb:b3:9f:d4:b4:f2:23:50:29:0b:ae:b4:73:
         bf:c7:98:a9:13:26:9d:8e:9c:21:4b:e4:b9:9e:7d:19:2d:4e:
         bc:91:9a:f6:a0:2d:0d:9d:97:cc:52:61:2d:3e:0f:62:c0:86:
         bc:30:0a:77:80:13:14:3e:8c:ba:2e:5b:92:2e:9e:61:07:a9:
         e6:78:69:a3:ec:44:22:b2:e3:ed:66:c2:2d:33:21:96:07:8f:
         cc:4a:43:8b:a0:9d:97:cd:ff:83:35:fa:88:07:2c:09:cc:31:
         27:a5:7c:68:cb:0d:17:e5:1c:83:18:d4:00:99:09:6e:cf:09:
         b6:53:b2:49:0a:3c:d7:07:37:c7:5d:03:e5:fd:c3:80:4e:00:
         86:52:b4:9e:ad:65:7c:a4:02:1f:c4:10:ad:4f:3d:48:e5:cf:
         6f:ad:ed:ba:a3:7b:e0:12:b6:ca:23:da:38:58:af:0b:c8:32:
         12:45:c3:e4:db:2a:ad:51:f4:e4:46:ab:ae:97:2d:15:e6:f3:
         44:5b:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 10:22:51 2024 by rpki-client on console-fra.rpki-client.org