Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa (raw, json)
Hash identifier:          HtXDqT0w/LVcFGB0C7xNUakNX+9ppGYYW+oxWrWnzIA=
Subject key identifier:   85:79:E6:19:8B:6C:9A:00:E7:F6:08:C1:7C:CE:BD:AC:9B:83:F3:11
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       47F4FEBC053136E2FDB4CC365C00220239D35590
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:35:58 +0000
ROA not before:           Sat 06 Apr 2024 03:30:58 +0000
ROA not after:            Sat 05 Apr 2025 03:35:58 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f4:fe:bc:05:31:36:e2:fd:b4:cc:36:5c:00:22:02:39:d3:55:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:30:58 2024 GMT
            Not After : Apr  5 03:35:58 2025 GMT
        Subject: CN=8579E6198B6C9A00E7F608C17CCEBDAC9B83F311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:48:6e:c5:7a:41:b6:e2:fc:53:b8:9a:4b:
                    43:da:31:f9:68:07:e3:a0:d4:b6:71:90:54:ff:84:
                    67:ff:bb:e0:54:0d:94:7b:1d:32:37:0f:99:c6:d9:
                    9c:14:27:ec:06:f4:a0:03:f1:1a:46:6e:5b:7a:52:
                    64:a5:c8:21:22:05:f4:0e:57:7d:c2:ac:ec:31:0a:
                    42:9b:aa:a0:8e:ce:54:7b:9d:5e:c0:f8:bc:9f:03:
                    f9:94:ef:22:6f:b5:f0:f8:94:61:86:da:52:4e:20:
                    e7:bb:41:df:46:4c:93:5f:dc:8e:28:e3:cc:79:91:
                    0f:fe:75:67:29:a4:6b:73:4e:01:79:4a:4d:79:83:
                    7d:ea:13:47:60:78:2e:11:1f:47:30:0b:91:ce:4d:
                    e6:1c:eb:df:e5:2c:53:5c:1f:3b:9b:10:34:3c:02:
                    50:94:d5:2f:69:d6:0b:0f:99:c1:99:d9:a2:87:ba:
                    72:fb:f7:41:f2:1c:ca:35:c3:56:ed:c4:ae:d8:3c:
                    78:75:30:d2:be:4a:97:6c:99:8f:08:70:59:29:b0:
                    89:ff:a5:3e:51:52:96:6e:48:de:87:61:b5:5d:a6:
                    a1:a9:82:f0:27:fd:07:7b:9e:c8:19:fe:16:3e:f1:
                    f7:b8:0d:37:4c:4c:5d:f3:b5:e3:eb:7c:f5:c5:5b:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:79:E6:19:8B:6C:9A:00:E7:F6:08:C1:7C:CE:BD:AC:9B:83:F3:11
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:ce:6c:ff:36:9c:10:31:69:ed:6f:6a:3f:08:2c:02:01:
         cc:58:22:0b:06:fb:a0:2f:fb:18:f1:1d:80:89:fe:3b:bf:7d:
         a4:36:59:36:02:5d:8c:32:aa:91:cb:de:be:9c:13:0c:73:92:
         a0:5e:ee:60:18:63:18:40:b3:54:93:32:93:7e:2e:63:26:47:
         b9:95:d5:b7:c2:5b:b3:02:6b:19:31:a9:fa:41:27:51:2b:d9:
         9b:bd:a3:41:aa:a7:1d:37:0e:60:41:08:36:4a:8f:2e:e9:51:
         93:91:df:17:a5:87:08:0c:69:c8:ac:88:6e:48:bd:1b:f4:0e:
         0e:5d:c2:72:14:4e:43:a7:5c:ca:fa:70:b3:72:d9:51:e7:48:
         5a:c9:69:68:b0:be:42:a6:ee:b7:8c:b3:5f:b6:18:e3:c8:2e:
         e0:9a:f8:83:0a:d4:9f:cd:dc:a7:2b:84:ac:12:f8:4e:f0:8f:
         7d:ca:fb:77:51:0d:72:93:d4:5f:b2:2b:29:fb:6e:64:af:b5:
         29:25:aa:6d:3d:4f:f9:66:60:76:00:14:62:00:e9:00:eb:d7:
         a3:9b:81:64:75:ae:9f:6f:ec:57:33:3c:7d:e2:46:8d:53:20:
         16:94:d8:03:d5:bd:6f:f6:50:f7:d6:9a:82:03:74:50:fb:48:
         a7:2b:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:07:11 2024 by rpki-client on console-ams.rpki-client.org