Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233362e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          lveYaLN6qQ4m+YYJgxArDG63NY6XRPIn5C5miAf8BK4=
Subject key identifier:   EF:62:FB:84:71:48:D9:BC:D2:58:9C:33:8C:FE:11:5B:40:4B:CB:2A
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       623311B59AD96BA5599C89A5C5ED2A8D627661AF
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32342d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:11:37 +0000
ROA not before:           Mon 12 Aug 2024 20:06:37 +0000
ROA not after:            Mon 11 Aug 2025 20:11:37 +0000
asID:                     28360
IP address blocks:        179.124.236.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:33:11:b5:9a:d9:6b:a5:59:9c:89:a5:c5:ed:2a:8d:62:76:61:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:06:37 2024 GMT
            Not After : Aug 11 20:11:37 2025 GMT
        Subject: CN=EF62FB847148D9BCD2589C338CFE115B404BCB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:91:52:51:4b:21:d3:d4:a0:b1:48:d7:a4:
                    ad:90:0c:b1:e2:d8:26:3a:31:ad:58:75:73:21:75:
                    13:65:60:de:81:37:1d:43:f3:b9:5b:3d:f1:69:9c:
                    c3:59:80:4c:e2:33:52:20:28:c8:36:5a:c5:0b:ee:
                    b4:64:a7:66:68:d7:3d:78:7b:2d:e9:73:c2:56:76:
                    76:5a:68:4e:f6:55:9c:5f:79:91:b6:ae:d3:90:f1:
                    4c:6f:63:19:7d:76:17:62:7c:8a:22:c4:fc:f7:37:
                    a0:d8:fd:71:44:da:e5:81:4e:ef:25:71:87:e9:0c:
                    99:15:3d:9e:f3:c6:cb:79:6b:1a:8b:3a:6f:91:c0:
                    75:d4:9d:5e:be:be:70:7f:3d:5c:d1:a2:38:cd:1b:
                    11:6c:94:a9:fd:3f:41:d7:d1:50:ce:44:bc:00:1b:
                    b5:75:28:63:9e:10:d8:92:80:e2:f3:e1:51:2e:ef:
                    33:14:ec:e3:83:33:cd:98:45:54:6f:aa:34:2b:1f:
                    4f:db:04:8b:ca:a3:80:d9:5c:8c:fe:97:49:5b:02:
                    eb:87:bd:35:b6:a8:4f:5a:e7:80:ab:7f:b9:82:06:
                    68:52:18:27:7c:e0:62:a9:fe:8e:18:95:3f:c4:df:
                    86:b0:bc:67:98:40:70:81:58:34:e1:60:7d:78:7e:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:62:FB:84:71:48:D9:BC:D2:58:9C:33:8C:FE:11:5B:40:4B:CB:2A
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:b6:05:dc:dc:9f:9b:10:88:c7:75:24:b2:18:14:28:c0:af:
         65:8f:cb:c4:ff:66:0e:38:77:73:2e:be:96:21:fb:ec:a4:9c:
         42:b5:11:92:04:70:b6:3c:d5:ac:0e:cc:81:bd:09:86:ab:3e:
         93:9b:ca:62:2f:36:79:99:7c:79:04:f1:83:bc:d8:03:f4:30:
         fd:df:bd:de:2b:67:57:d5:77:ad:b4:e3:cd:91:a4:f4:c1:2a:
         78:5b:59:65:bb:66:03:1d:f2:70:bd:ca:92:c0:4c:b3:33:7a:
         0a:ee:51:84:84:7a:ce:05:e6:a2:a8:49:59:58:d8:4c:8a:4d:
         33:52:72:d1:d5:b7:50:f2:5c:9c:7c:56:41:5a:9d:6a:a9:ff:
         c0:a0:30:d5:e2:7d:b5:db:12:af:c1:22:b3:7d:14:15:22:ec:
         73:2d:d6:3c:8a:98:9b:75:46:a3:7e:4b:ad:4c:24:3a:0f:d2:
         28:2b:9d:e9:68:bd:df:90:35:3d:e2:54:00:78:dd:c2:02:0d:
         9b:d6:aa:01:68:b6:5d:44:76:1f:b8:de:53:ab:27:ec:1b:15:
         86:29:fe:9c:e9:1b:cd:6e:c1:d1:a4:01:6c:9a:b9:83:6b:03:
         2c:08:79:e4:ce:e8:79:3f:61:30:3b:ad:c5:96:9e:e8:ce:64:
         3a:e5:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:28 2024 by rpki-client on console-ams.rpki-client.org