Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          DyjJxHVs7DdrgcojpCpDHiYP/3ZnxpVtPKGrGQ77tms=
Subject key identifier:   F5:E5:87:AE:C8:E1:52:18:AC:B0:69:5D:85:A0:04:35:62:0A:91:74
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       201ADB606BC634D84144AAC13C58F15362915BC2
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:31 +0000
ROA not before:           Sat 06 Apr 2024 03:31:31 +0000
ROA not after:            Sat 05 Apr 2025 03:36:31 +0000
asID:                     28360
IP address blocks:        179.124.234.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:db:60:6b:c6:34:d8:41:44:aa:c1:3c:58:f1:53:62:91:5b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:31:31 2024 GMT
            Not After : Apr  5 03:36:31 2025 GMT
        Subject: CN=F5E587AEC8E15218ACB0695D85A00435620A9174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:2d:3c:b6:cd:d1:bb:98:46:97:65:46:06:
                    15:e7:b0:99:8d:3a:09:88:8b:4b:d5:9e:57:83:3c:
                    df:3a:35:bf:93:2c:01:7e:36:2a:bc:69:91:0a:db:
                    e8:a4:a4:1d:86:1c:fe:ed:64:4d:de:32:01:ef:e9:
                    60:09:6b:b1:ed:f8:4d:af:88:00:fb:8b:51:94:94:
                    4b:7e:72:8c:6f:fc:dc:4e:58:94:eb:ca:9f:12:c5:
                    5d:80:a5:e6:8a:f8:36:cf:f5:7b:a0:f9:98:25:c8:
                    de:ba:d5:ab:70:39:b3:0f:79:28:ee:d7:c2:61:17:
                    15:71:32:d7:6e:40:8e:43:f9:be:33:51:5e:8e:d1:
                    4e:f9:28:16:71:8b:56:66:1d:82:0a:ee:f3:4f:13:
                    95:01:94:c7:17:af:f9:40:74:56:6b:ed:d4:d3:11:
                    55:76:b9:c4:a1:98:97:c0:7b:38:f0:3c:09:dd:7f:
                    0e:93:d9:7d:8c:df:3f:79:37:ac:e1:65:8d:3b:aa:
                    26:5c:8e:23:d2:42:53:54:78:8a:be:18:68:26:63:
                    80:48:ba:03:c8:f2:48:4d:3d:a1:8c:8c:59:36:2c:
                    29:a3:35:fe:91:86:f7:22:9d:31:f0:c5:90:98:27:
                    71:a7:db:f6:5d:4a:29:ae:50:07:b9:dc:bf:02:e5:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E5:87:AE:C8:E1:52:18:AC:B0:69:5D:85:A0:04:35:62:0A:91:74
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:ea:83:fe:7b:ee:dc:14:f6:cd:44:fd:53:8d:7b:9e:a8:
         b3:76:49:ba:34:90:e5:38:c6:6a:5e:af:ac:40:28:ca:67:be:
         ff:12:6e:28:10:75:7d:23:50:ef:de:41:a0:1f:84:bf:5c:9b:
         f8:55:00:bd:aa:0e:c3:91:ca:79:a6:eb:c4:e3:c4:22:97:cf:
         08:d6:94:3a:18:05:b8:89:5c:7b:0d:fc:6e:f6:05:1b:1e:30:
         df:c0:38:62:d8:c6:7e:f7:4e:1e:46:02:20:0b:17:0e:cc:ed:
         00:1b:75:fc:dd:81:1f:cd:06:51:27:a0:7a:9b:71:b0:14:26:
         18:51:6f:9f:ad:25:d1:a0:c6:b8:06:0c:2c:1d:dd:df:45:db:
         51:05:b0:66:f5:7e:63:f3:f9:dc:ed:df:cd:0a:69:c6:1c:6d:
         80:f1:7d:b7:41:11:bc:b9:a1:e7:4d:60:a7:d3:bd:6a:bc:56:
         8e:18:4c:9c:b3:b8:c2:49:f1:da:28:6a:09:4e:57:fc:66:df:
         66:26:d3:55:e9:7b:91:f8:08:0e:22:47:bb:22:dd:2d:82:62:
         4b:33:bc:ad:f0:de:23:ad:13:1f:9c:ca:cb:0c:81:16:ce:54:
         37:16:9b:47:0f:c0:eb:54:b8:c4:eb:b0:bd:b5:5e:6a:61:be:
         9f:4e:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 15:30:52 2024 by rpki-client on console-fra.rpki-client.org