Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          V8LLcMgUo8rC1OrICSW0ScKkIE8bBqnpFqwT+XJUTlw=
Subject key identifier:   0F:02:4E:A6:43:7E:32:02:E2:EF:E4:F4:07:66:F7:23:70:C0:43:FF
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       7E97CD7E3C4BF3C9627CEFFD24B7E38AA063259A
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:50 +0000
ROA not before:           Sat 06 Apr 2024 03:31:50 +0000
ROA not after:            Sat 05 Apr 2025 03:36:50 +0000
asID:                     28360
IP address blocks:        179.124.238.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:97:cd:7e:3c:4b:f3:c9:62:7c:ef:fd:24:b7:e3:8a:a0:63:25:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:31:50 2024 GMT
            Not After : Apr  5 03:36:50 2025 GMT
        Subject: CN=0F024EA6437E3202E2EFE4F40766F72370C043FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:94:8d:3e:b2:e3:7b:ec:60:39:bd:c8:5e:95:
                    86:31:1b:8d:75:94:4f:0d:e7:57:29:a3:bd:6d:a3:
                    07:16:d7:b0:5b:ad:f6:ff:8e:c3:56:40:26:7f:86:
                    9e:b1:01:55:b4:f4:a0:27:0b:48:21:e9:90:6a:de:
                    7d:16:78:52:ab:01:f8:67:41:7f:f4:c7:8a:32:86:
                    75:81:df:d5:f3:f8:2f:a9:2e:eb:14:10:3e:34:95:
                    5d:8d:1b:6e:b7:27:e2:45:70:d8:7b:69:65:ab:36:
                    5c:c0:f3:6f:2e:d7:49:6b:9c:6b:98:54:d3:34:15:
                    61:03:65:15:e4:1a:aa:53:7e:6e:63:ea:66:8c:6a:
                    80:17:d4:48:29:f1:98:3c:e3:87:17:bf:a9:24:5f:
                    24:1f:1c:91:62:7d:69:2b:ab:b7:02:89:c3:4d:22:
                    e5:7f:c4:6f:a5:b0:bd:5d:80:6f:1d:6c:5a:87:81:
                    66:03:aa:84:5c:01:31:22:6a:75:6f:79:4d:f7:b8:
                    8a:d4:14:18:ca:be:a6:c9:3d:3f:41:61:e4:3c:c3:
                    ce:bb:41:74:23:c7:80:83:0c:8c:f9:df:13:63:00:
                    bc:f6:c9:d7:0e:46:37:52:6e:9b:12:da:bf:d8:68:
                    33:e8:25:55:42:21:67:d5:f4:0f:bd:f6:d7:c3:87:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:4E:A6:43:7E:32:02:E2:EF:E4:F4:07:66:F7:23:70:C0:43:FF
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e0:01:2f:58:c0:40:0d:ae:0c:f3:41:c9:45:bd:ed:a9:e6:
         27:6e:35:89:a8:f1:a8:66:97:4b:f8:07:30:55:53:00:80:68:
         df:8c:90:f4:4a:b1:e5:ac:ba:58:24:a8:3a:ef:fd:fd:1e:40:
         29:d7:f2:58:a4:9b:8c:9a:ec:81:e0:ef:f7:0a:8f:dd:29:4c:
         93:1d:23:81:c0:7a:85:03:d5:f5:3d:47:9b:8b:14:80:e3:54:
         1b:a0:f1:58:46:e6:dd:98:4b:4f:5b:ab:1d:29:ee:a1:d0:c9:
         1e:d5:2a:67:b3:f0:61:84:51:21:5b:cc:d1:95:45:55:12:de:
         48:09:a5:20:d0:26:ef:7c:9d:dd:c4:5d:fe:6c:fd:e6:cc:2d:
         1e:1c:9a:7b:4a:1d:4a:fc:4c:10:bf:18:80:de:49:43:21:6d:
         f6:7f:95:3b:8d:e2:a3:15:85:43:06:89:82:8b:5b:eb:0a:e4:
         22:53:57:cf:58:5b:c9:77:eb:8a:c6:de:f4:0e:0f:a6:90:6f:
         c5:38:aa:8b:a0:95:1b:f0:dc:ad:70:5e:3b:d9:77:c7:27:b7:
         e5:ee:57:bc:f4:d1:6b:bd:a8:cf:a0:a8:a9:c7:d4:71:d5:d1:
         ad:59:cf:46:fa:e3:b1:fe:36:7c:93:a8:a7:2a:d6:c9:26:b8:
         e8:30:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 15:30:52 2024 by rpki-client on console-fra.rpki-client.org