Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          Uqv4zBIHP4/72PnE2LFGnus8ifSGjLjJ8ANb6i55WyU=
Subject key identifier:   0B:46:50:B8:E5:D9:27:36:AD:30:B2:FC:A3:9F:EC:B8:27:34:E8:2F
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       79629312325B56B734043F8B85C6241BD5C21150
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:44 +0000
ROA not before:           Sat 06 Apr 2024 03:31:44 +0000
ROA not after:            Sat 05 Apr 2025 03:36:44 +0000
asID:                     28360
IP address blocks:        179.124.239.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:93:12:32:5b:56:b7:34:04:3f:8b:85:c6:24:1b:d5:c2:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:31:44 2024 GMT
            Not After : Apr  5 03:36:44 2025 GMT
        Subject: CN=0B4650B8E5D92736AD30B2FCA39FECB82734E82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:28:96:28:04:f0:e8:cd:7c:d5:72:28:6e:
                    fb:fe:fb:8a:94:b5:d3:a5:96:01:99:ed:11:39:2c:
                    ef:99:14:52:a3:0a:5d:fa:47:f5:76:95:24:a1:92:
                    55:fc:d3:53:46:d6:8b:2e:89:96:94:e8:05:b3:dd:
                    3c:d1:47:a3:5e:98:46:91:f8:c6:16:af:1c:6d:f4:
                    e4:45:42:31:5f:1e:70:ab:d2:34:a0:e8:91:36:61:
                    5a:97:99:55:7b:c1:1c:b4:7d:65:11:96:f1:c5:c0:
                    86:50:ea:31:fb:64:63:aa:90:4a:7a:0b:0b:37:19:
                    f7:cf:c6:2e:b7:df:f6:34:f9:59:26:da:42:15:7d:
                    9c:51:d9:59:e8:1b:d9:02:13:69:62:51:9b:48:e2:
                    48:5a:4d:d8:f1:88:8b:41:fc:7e:29:09:64:2e:d7:
                    9d:30:50:a8:0e:ab:51:fa:76:84:af:68:1a:53:f5:
                    59:53:c7:52:b9:67:e3:aa:c0:88:34:c9:8e:5d:56:
                    05:13:3d:45:21:56:50:d7:6f:c5:dc:e3:46:1f:e1:
                    63:59:84:6e:3d:17:ca:fc:c5:2c:58:17:cd:8f:d4:
                    62:5e:b6:f2:a2:9d:6b:91:39:7a:d1:27:5d:06:61:
                    ef:af:06:52:c3:eb:91:7e:b3:4d:bf:0d:19:ba:bc:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:50:B8:E5:D9:27:36:AD:30:B2:FC:A3:9F:EC:B8:27:34:E8:2F
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:5d:cb:87:fa:d1:e1:e5:bc:ee:37:30:f9:ff:b6:40:a2:
         25:35:2d:b6:be:23:06:4e:f9:61:6e:5c:b7:e0:dd:9c:f5:df:
         7c:e7:68:69:2f:f9:ba:73:d2:3a:ae:0c:e9:7e:c4:ff:b0:ff:
         51:46:3c:1e:43:9c:a3:43:1f:51:e2:60:3f:ad:1e:12:5c:59:
         f3:e9:3b:4c:7d:2c:89:cc:0f:3b:6d:4b:62:8e:6b:a8:5b:a1:
         5c:0a:ca:c0:a8:9f:47:d1:f9:16:6d:53:ee:ad:ba:4d:6f:ec:
         1f:d5:a1:af:1f:2c:98:b3:42:79:9b:74:05:ae:72:e4:1c:03:
         37:1b:d7:2a:f7:cd:57:ef:99:22:a9:0e:8b:dd:1f:c7:9e:15:
         28:ed:72:88:ea:fe:39:75:99:80:95:d7:b8:4d:fc:ce:7a:14:
         89:67:25:12:e0:1e:2c:32:2f:e4:c4:36:51:d3:bc:ee:34:83:
         ed:4d:a6:38:a0:00:25:34:59:8a:65:39:4a:9a:6e:9a:35:c9:
         a5:72:a5:a2:db:ee:c0:83:d6:19:b4:d4:68:54:46:f6:73:ab:
         13:a0:0c:75:39:3c:b8:96:8c:f7:92:df:fc:6d:e5:c9:b2:94:
         aa:1a:94:ac:91:a9:45:ba:5b:64:f8:b5:1c:13:d3:47:0e:bf:
         34:6c:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:07:11 2024 by rpki-client on console-ams.rpki-client.org