Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          4rqOB0x2tS7yIznaSWgmy3P+b3O6jMK2xOTgDuNU9N8=
Subject key identifier:   23:17:BE:45:E5:1D:10:C5:D7:31:C8:6D:B0:89:16:AA:C5:4D:A8:09
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       396ED6C199240C3FA0D5CF9751DF89ACC83DCFC3
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:25 +0000
ROA not before:           Sat 06 Apr 2024 03:31:25 +0000
ROA not after:            Sat 05 Apr 2025 03:36:25 +0000
asID:                     28360
IP address blocks:        179.124.233.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6e:d6:c1:99:24:0c:3f:a0:d5:cf:97:51:df:89:ac:c8:3d:cf:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:31:25 2024 GMT
            Not After : Apr  5 03:36:25 2025 GMT
        Subject: CN=2317BE45E51D10C5D731C86DB08916AAC54DA809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:cf:e5:ee:15:d0:bc:b2:9c:2e:d3:6c:d4:
                    b6:28:f3:2f:52:7d:f1:29:a1:98:ce:94:1b:66:85:
                    04:af:a6:5b:dd:25:c3:ca:37:59:f3:66:17:7f:5e:
                    14:a3:80:ba:25:a6:50:3a:e9:19:5c:03:4e:d2:64:
                    99:9a:9f:22:7e:eb:43:44:b0:51:f7:88:ab:32:a8:
                    0b:59:b7:70:2a:15:c0:4d:84:ba:e7:61:e0:e9:b4:
                    f4:cb:ea:91:7f:29:85:d4:5f:c8:50:c9:58:58:a6:
                    a7:0e:1e:22:f0:b7:c4:ee:c5:4f:a6:59:9f:55:8c:
                    10:3f:5c:be:3b:6b:44:6f:99:6a:15:33:d5:f8:d2:
                    6c:42:1a:85:11:16:39:46:33:a7:59:56:c0:5c:13:
                    fb:13:17:bd:34:d3:16:84:c9:8e:a6:11:4d:8e:2a:
                    14:ac:a5:89:ee:d1:fa:32:fe:79:fa:de:c0:cf:3d:
                    58:38:b0:ce:ab:96:54:ba:41:74:83:4c:36:71:44:
                    48:36:26:e5:6b:99:18:e1:33:48:f2:b9:ab:65:8f:
                    53:b5:5c:1a:ad:70:16:00:fd:5d:41:91:57:10:e4:
                    49:1c:f3:48:e6:71:b8:81:c2:07:5e:23:d3:fc:4f:
                    44:03:45:ea:3f:fb:35:cd:6f:cb:c6:2b:e6:97:f0:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:17:BE:45:E5:1D:10:C5:D7:31:C8:6D:B0:89:16:AA:C5:4D:A8:09
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233332e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b8:00:6c:15:80:43:dd:c4:30:89:af:90:3c:1e:5e:f1:a0:
         cc:7a:67:b7:28:85:88:29:62:81:8f:90:4e:32:c3:93:2a:c4:
         69:46:2e:6f:29:a5:6e:53:7a:53:00:fc:95:ad:5a:f3:f2:74:
         d4:ba:8c:16:67:9e:aa:a3:0b:c9:9e:0b:5c:b3:69:42:61:5e:
         cf:a5:1a:9c:cd:da:ca:c5:b7:61:69:4c:6e:58:bd:ee:50:c0:
         0e:27:88:85:c6:74:39:1c:3d:e8:92:12:0e:cb:ad:63:5a:96:
         cc:1e:49:b0:65:f7:2e:15:e2:ef:b6:5e:56:67:40:3d:74:80:
         1e:42:5a:51:84:d2:0c:61:db:9d:7d:bd:36:83:e3:99:fd:34:
         01:f6:6c:98:6f:2e:f5:fb:43:69:49:86:b7:3f:6b:e5:37:23:
         14:8f:24:15:65:65:7c:2f:23:cf:64:74:6a:f0:32:c0:e8:93:
         33:3a:c8:5e:a9:cd:dd:42:00:37:ff:54:ef:2f:eb:f8:a1:60:
         8c:03:39:58:28:8c:7e:1e:51:4b:b6:48:c1:bf:25:a7:af:c8:
         ff:c1:0a:a5:26:22:c8:95:ce:32:41:e7:69:ab:f2:41:78:10:
         a8:2f:f0:4c:0b:44:fb:17:96:cc:c0:56:03:e6:06:3b:df:d6:
         27:05:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 15:30:52 2024 by rpki-client on console-fra.rpki-client.org