Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          3C3DGIqky3bklwk8Fk2aqOyy987EANBwytIsW6PIXQs=
Subject key identifier:   BB:FB:57:93:B1:B6:D4:D3:50:F3:9A:3B:DC:69:43:7E:85:6A:39:15
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       3A5208F9E2C3E46015E910431D1F3F5089AEECCF
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:21 +0000
ROA not before:           Sat 06 Apr 2024 03:31:21 +0000
ROA not after:            Sat 05 Apr 2025 03:36:21 +0000
asID:                     28360
IP address blocks:        179.124.232.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:08:f9:e2:c3:e4:60:15:e9:10:43:1d:1f:3f:50:89:ae:ec:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:31:21 2024 GMT
            Not After : Apr  5 03:36:21 2025 GMT
        Subject: CN=BBFB5793B1B6D4D350F39A3BDC69437E856A3915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:68:c1:19:c1:15:00:8e:4c:63:36:d3:cc:
                    77:25:b7:0d:9e:0e:84:97:bf:07:fb:73:18:fc:4c:
                    5c:26:63:d9:7f:78:a8:69:8d:c2:8a:03:26:27:79:
                    19:3d:6c:82:9a:ea:7f:26:fa:d8:2d:36:8e:0f:e3:
                    71:63:0f:02:f0:90:f5:fc:09:6e:83:e1:91:69:2e:
                    a2:58:d8:e3:30:6d:66:be:5d:7c:5c:1c:92:a5:60:
                    db:7b:67:2f:84:f8:bb:86:4d:7f:47:8a:71:f9:7a:
                    d8:3f:99:4e:24:f8:5f:fd:0e:2c:32:e9:94:8c:a7:
                    47:3b:18:48:6b:9d:64:2b:20:87:b8:b8:b2:a5:1f:
                    58:3e:27:e6:ff:47:bc:2a:e7:96:90:d1:5e:eb:30:
                    72:d4:cc:50:bd:58:ce:0d:4f:be:7b:0c:65:bc:4d:
                    08:8d:79:c4:cc:91:e9:07:d5:af:b8:8a:59:db:4b:
                    5c:b6:1c:15:b9:21:5f:ae:60:b8:5c:39:e0:0d:3f:
                    8e:24:a7:8d:22:88:b8:59:ae:67:23:63:86:b9:34:
                    a6:dc:1a:8a:d7:f0:8b:be:45:28:0f:bc:93:1e:91:
                    61:0e:16:41:a9:99:be:25:fd:d9:01:76:b9:81:e0:
                    b5:ea:7f:4b:93:70:86:b7:3f:29:57:4f:8c:41:47:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:57:93:B1:B6:D4:D3:50:F3:9A:3B:DC:69:43:7E:85:6A:39:15
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:1b:ef:42:0b:e0:f6:72:99:30:7c:ab:14:ef:ce:b1:7e:
         8a:20:36:fe:b8:49:4f:6b:be:a9:23:77:64:0b:8b:89:65:9d:
         8b:5b:cb:c5:93:db:6e:96:e3:00:db:ee:32:1e:08:90:68:57:
         7b:eb:72:86:c3:6b:33:4d:c2:90:38:89:4d:6a:7d:d4:10:e2:
         02:87:a9:dd:12:bf:b2:02:41:12:b6:3c:15:e9:5e:27:56:95:
         cd:0f:cf:aa:b6:b0:16:2e:b5:ac:d1:a6:04:5e:0a:95:d3:80:
         fe:45:55:35:6e:64:fe:e7:fd:59:55:95:5d:54:c4:da:89:45:
         fc:d9:a9:60:94:55:fb:b4:75:90:9a:0d:ac:fd:02:55:f9:b1:
         e4:49:5e:28:3c:1f:9e:17:63:42:6a:c1:10:6e:6d:4f:6e:83:
         1c:e4:1d:08:c6:ae:ed:2f:29:c2:22:67:8b:fa:bf:d2:53:b8:
         2d:a2:90:cf:16:3c:04:4b:61:cc:9e:b2:d9:00:6a:24:b3:d2:
         08:48:02:56:a4:7b:b0:e6:48:f8:64:97:30:0c:6d:74:29:62:
         6c:78:22:1a:cc:b6:6a:99:26:83:c9:de:cf:71:00:e5:c4:97:
         5e:ea:59:6c:54:13:77:64:e5:5c:2e:84:90:42:ad:95:97:ec:
         99:d8:77:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOlII+eLD5GAV6RBDHR8/UImu7M8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNEQjgzNkMyMDc3QjQzRUQ4ODFBMDY1QTREQzIxNjEx
NDUwM0NFRTAeFw0yNDA0MDYwMzMxMjFaFw0yNTA0MDUwMzM2MjFaMDMxMTAvBgNV
BAMTKEJCRkI1NzkzQjFCNkQ0RDM1MEYzOUEzQkRDNjk0MzdFODU2QTM5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUc2jBGcEVAI5MYzbTzHcltw2e
DoSXvwf7cxj8TFwmY9l/eKhpjcKKAyYneRk9bIKa6n8m+tgtNo4P43FjDwLwkPX8
CW6D4ZFpLqJY2OMwbWa+XXxcHJKlYNt7Zy+E+LuGTX9HinH5etg/mU4k+F/9Diwy
6ZSMp0c7GEhrnWQrIIe4uLKlH1g+J+b/R7wq55aQ0V7rMHLUzFC9WM4NT757DGW8
TQiNecTMkekH1a+4ilnbS1y2HBW5IV+uYLhcOeANP44kp40iiLhZrmcjY4a5NKbc
GorX8Iu+RSgPvJMekWEOFkGpmb4l/dkBdrmB4LXqf0uTcIa3PylXT4xBR+OVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUu/tXk7G21NNQ85o73GlDfoVqORUwHwYDVR0j
BBgwFoAUQ9uDbCB3tD7YgaBlpNwhYRRQPO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMS80M0RCODM2QzIwNzdCNDNFRDg4MUEwNjVBNERDMjE2MTE0NTAzQ0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzREI4MzZDMjA3N0I0M0VE
ODgxQTA2NUE0REMyMTYxMTQ1MDNDRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzEv
MzEzNzM5MmUzMTMyMzQyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfOgwDQYJKoZIhvcNAQELBQADggEBAEYdG+9C
C+D2cpkwfKsU786xfoogNv64SU9rvqkjd2QLi4llnYtby8WT226W4wDb7jIeCJBo
V3vrcobDazNNwpA4iU1qfdQQ4gKHqd0Sv7ICQRK2PBXpXidWlc0Pz6q2sBYutazR
pgReCpXTgP5FVTVuZP7n/VlVlV1UxNqJRfzZqWCUVfu0dZCaDaz9AlX5seRJXig8
H54XY0JqwRBubU9ugxzkHQjGru0vKcIiZ4v6v9JTuC2ikM8WPARLYcyestkAaiSz
0ghIAlake7DmSPhklzAMbXQpYmx4IhrMtmqZJoPJ3s9xAOXEl17qWWxUE3dk5Vwu
hJBCrZWX7JnYd3w=
-----END CERTIFICATE-----
Generated at Sun Aug 4 16:07:11 2024 by rpki-client on console-ams.rpki-client.org