Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          THvaU8zL8onVBbN6npXXZWudxHlwyIYqvZ41S1P1YgM=
Subject key identifier:   F5:CD:DE:48:82:FB:89:8D:9A:CD:4F:8D:B5:64:91:97:48:83:4D:AF
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       29B551882AFE701A5BEFE0623A8051A0C04DFFED
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:55 +0000
ROA not before:           Sat 06 Apr 2024 03:31:55 +0000
ROA not after:            Sat 05 Apr 2025 03:36:55 +0000
asID:                     28360
IP address blocks:        179.124.237.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b5:51:88:2a:fe:70:1a:5b:ef:e0:62:3a:80:51:a0:c0:4d:ff:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:31:55 2024 GMT
            Not After : Apr  5 03:36:55 2025 GMT
        Subject: CN=F5CDDE4882FB898D9ACD4F8DB564919748834DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:b9:30:ef:10:20:94:da:f4:28:2e:e9:cb:
                    5a:6a:1c:1e:c8:ef:2c:80:71:cc:3d:3c:29:12:37:
                    45:59:71:84:25:87:0d:46:58:0d:7e:f2:23:ae:8c:
                    5c:41:3e:bc:b4:67:b6:02:9d:47:8a:55:05:76:74:
                    77:5e:63:c8:53:fc:28:23:93:17:b7:e5:44:40:14:
                    e1:21:c4:79:9e:df:24:72:3c:5e:2f:6c:d6:8e:da:
                    a5:e7:1f:2f:09:b7:d8:33:bc:55:4e:1c:39:34:8b:
                    6f:52:ef:54:f6:e5:2a:70:eb:87:35:51:fb:c9:5b:
                    31:a7:8f:cc:95:28:b9:69:69:a5:7e:18:5c:cd:73:
                    59:5e:ee:b5:4f:33:3d:6a:3f:1b:44:47:2e:4a:7b:
                    db:8c:f6:f9:65:03:c9:52:e9:d6:e1:77:6b:a8:75:
                    fc:13:9a:56:4b:eb:31:23:e3:8d:eb:ef:66:fb:ba:
                    2b:8d:22:a8:15:f5:3f:97:36:3a:23:5e:c6:e7:1c:
                    63:e8:c2:f9:02:b1:0a:d2:2c:ff:c5:d0:ee:89:99:
                    36:43:9f:7d:8c:e1:2a:99:28:8d:7c:11:57:10:c0:
                    19:22:33:e8:59:a2:5c:f9:cc:9f:d9:7f:5b:07:f1:
                    95:e0:d7:c1:df:0f:bf:b1:13:60:36:2e:8a:fa:08:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:DE:48:82:FB:89:8D:9A:CD:4F:8D:B5:64:91:97:48:83:4D:AF
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:97:a3:32:3d:c6:d1:eb:98:9e:d0:13:33:fc:18:af:c8:6d:
         65:05:df:30:53:ab:7c:60:17:6e:b8:fc:8c:88:0b:ec:89:b3:
         bf:a3:79:1e:bc:b6:91:6e:c7:e7:f7:1c:a4:2f:a8:b2:d6:39:
         46:31:9b:e9:d7:44:76:34:48:0d:b1:4f:e6:c7:c7:64:14:ee:
         1e:d2:a3:a6:62:03:03:3c:99:f7:ec:9d:2d:c6:1d:54:fc:b0:
         e3:a2:cf:a3:7e:a4:49:9e:59:5b:06:01:44:dd:31:ff:9a:82:
         d2:85:d5:35:61:0f:fd:50:a2:42:5a:04:8b:0c:da:3a:d8:bd:
         20:42:5d:1e:ed:78:4c:2e:f1:b1:69:fb:20:31:61:61:85:b6:
         43:0f:59:08:3b:1a:64:03:8f:2c:88:57:f3:6d:73:1a:23:e2:
         31:30:5e:62:23:c1:a0:d2:00:cf:da:73:f0:5e:85:70:fe:98:
         0f:8a:5d:ec:d4:7e:a4:ca:c9:c1:57:8a:08:b6:24:4b:df:c7:
         fa:d1:70:e1:05:59:74:37:1a:86:e7:5f:96:bd:3e:75:a5:b6:
         b9:5d:f9:05:48:c5:0f:c8:ed:0b:30:ba:f5:f2:0c:2b:ad:8e:
         e1:d6:11:d5:92:cf:89:8f:d8:20:d3:48:67:41:c9:df:2d:f0:
         3e:e5:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 15:30:52 2024 by rpki-client on console-fra.rpki-client.org