Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          B/NrGRyTx0FGiZ+jIz/9gdWo53FbgeOowdPp6BXJioE=
Subject key identifier:   7A:6E:34:51:AD:DB:9D:02:68:6D:4B:96:68:17:26:41:3B:24:15:71
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       7C256403D9F77D7777016B63981FC69BBF7572D1
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:38 +0000
ROA not before:           Sat 06 Apr 2024 03:31:38 +0000
ROA not after:            Sat 05 Apr 2025 03:36:38 +0000
asID:                     28360
IP address blocks:        179.124.235.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:25:64:03:d9:f7:7d:77:77:01:6b:63:98:1f:c6:9b:bf:75:72:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:31:38 2024 GMT
            Not After : Apr  5 03:36:38 2025 GMT
        Subject: CN=7A6E3451ADDB9D02686D4B96681726413B241571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:99:5e:88:51:8f:59:9b:91:bf:bd:d0:dd:
                    e0:52:3d:0e:03:9f:58:6d:01:b1:24:72:de:3e:b4:
                    1c:ab:b5:94:10:42:6a:89:97:5d:a3:c7:56:e3:d1:
                    b8:64:6c:52:04:bb:b1:9b:e5:55:f7:f7:21:ea:60:
                    63:79:54:08:5e:65:9e:25:6e:9e:de:19:bd:ca:bf:
                    21:c8:53:cd:c2:2f:2c:9a:67:c4:23:28:3d:e8:2c:
                    40:5c:17:c8:ce:0a:84:f9:f2:9f:8c:f4:6f:92:91:
                    3e:2c:d1:97:6e:06:ff:4a:bc:68:fe:e0:56:96:eb:
                    c4:27:8e:c4:ed:dc:71:e8:74:da:1e:a4:6d:50:05:
                    d5:a1:23:ca:70:51:b4:1f:f2:80:a2:64:f3:61:6a:
                    d1:02:4d:45:cd:eb:63:52:a1:3b:83:2d:6d:30:bf:
                    62:69:6f:1e:10:54:b2:c5:7c:82:d4:58:25:d1:5e:
                    1c:93:39:40:63:97:21:11:fc:26:2d:99:ff:9b:69:
                    c5:4e:62:e3:30:6b:e4:f4:97:2d:94:b5:01:36:c9:
                    5e:9f:d0:fa:da:ca:30:76:35:df:4a:d1:40:25:ce:
                    48:e9:6c:5c:d8:eb:8b:d0:f9:b1:f0:26:f0:7b:58:
                    b5:54:3a:c6:d4:82:a4:66:c6:fe:94:48:b2:26:ab:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6E:34:51:AD:DB:9D:02:68:6D:4B:96:68:17:26:41:3B:24:15:71
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:90:1f:15:03:fb:fc:6f:5e:f6:51:c1:50:e5:15:ac:ea:0c:
         b1:b0:0e:00:72:52:7a:9d:14:de:94:b3:f1:4e:dd:68:17:dc:
         f5:98:0a:6f:f3:01:33:f7:e3:92:d2:fc:16:87:d4:b8:a4:a0:
         b8:5a:f4:63:92:24:7e:ec:be:1b:e3:19:4d:96:4d:0f:19:db:
         ff:ba:86:ce:4c:fa:73:26:2f:2c:1e:05:89:78:71:dc:67:c2:
         ce:fe:72:23:3b:da:46:c0:ef:8b:ca:33:86:0b:29:27:f2:ce:
         26:aa:23:53:f1:f6:56:17:a2:da:ac:ec:86:c1:ee:6c:8c:60:
         ad:5c:08:78:29:32:e9:93:6c:7b:23:da:1d:01:d9:89:07:ba:
         8d:c3:49:20:c0:90:b3:16:18:52:ce:b1:ed:91:87:81:66:2e:
         5e:e5:69:09:b6:51:1f:76:d2:9c:d0:cd:09:52:76:ac:b1:b9:
         46:1b:dd:8f:bc:98:00:83:65:2d:58:c9:99:33:6c:89:f7:46:
         b3:9e:1d:98:1f:0a:59:9c:6c:62:5c:0b:cc:36:29:07:5e:f7:
         41:57:b4:96:c7:0c:c6:a0:a0:06:53:46:fb:db:7c:46:cd:5c:
         db:20:af:bc:58:49:d2:40:9a:bd:3a:6f:74:cb:41:80:09:70:
         69:10:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 15:30:52 2024 by rpki-client on console-fra.rpki-client.org