Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32342e302f32312d3231203d3e20323633363131.roa
File:                     3137392e3132342e32342e302f32312d3231203d3e20323633363131.roa (raw, json)
Hash identifier:          cjSJM3UJgSrHg9vot7hDAmcBbqQER8aN1NXDYVbor4U=
Subject key identifier:   D9:CC:45:BE:72:1A:FC:90:F5:4D:DD:80:FB:5F:50:02:B0:49:EC:80
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       6778391C7BA516E798AC9061E74AA507D90CD921
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32342e302f32312d3231203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:16 +0000
ROA not before:           Thu 04 Apr 2024 10:55:16 +0000
ROA not after:            Thu 03 Apr 2025 11:00:16 +0000
asID:                     263611
IP address blocks:        179.124.24.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:78:39:1c:7b:a5:16:e7:98:ac:90:61:e7:4a:a5:07:d9:0c:d9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:16 2024 GMT
            Not After : Apr  3 11:00:16 2025 GMT
        Subject: CN=D9CC45BE721AFC90F54DDD80FB5F5002B049EC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:ec:00:36:4a:d5:63:e9:4c:17:91:dc:1c:
                    dc:83:20:5b:2b:b1:6e:39:ad:47:48:57:f8:7c:2b:
                    d1:7e:2a:2c:79:eb:ab:b7:16:72:c6:16:5e:2b:4a:
                    0d:1c:86:00:19:14:b3:fb:e3:6c:3b:a3:27:8a:da:
                    a5:5f:a7:22:63:43:8e:46:97:78:07:2e:2c:e1:c7:
                    f2:b7:96:5b:f7:85:54:d0:3f:17:4d:0c:1d:9d:03:
                    33:a8:09:a9:7f:f7:a5:39:01:d0:d9:d9:3d:fd:23:
                    58:90:60:a0:5c:8f:ca:ca:dc:18:11:c5:2a:7f:f9:
                    f1:e0:fe:4e:87:8c:f7:a0:26:ad:dc:c5:75:5b:be:
                    42:19:cc:c0:4b:43:e6:38:a4:c9:a7:51:a2:bf:34:
                    63:5e:cf:d1:41:73:80:99:45:e6:70:60:b6:7c:2f:
                    c4:54:dd:e2:7f:bd:0b:ed:60:8e:0b:86:32:00:62:
                    25:81:ea:aa:75:91:6a:71:e8:47:bf:2b:f6:19:b8:
                    42:54:f0:74:bb:9d:7f:0f:61:fe:65:58:4b:8d:25:
                    04:38:d7:95:f0:0e:4d:56:87:e6:d2:b3:65:ab:c2:
                    6a:8e:fc:6d:50:9b:ca:b4:67:4c:4b:14:72:88:f6:
                    93:8e:2e:0d:03:f4:f2:4d:b1:9c:ee:93:82:ff:c3:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:45:BE:72:1A:FC:90:F5:4D:DD:80:FB:5F:50:02:B0:49:EC:80
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32342e302f32312d3231203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:36:89:df:8e:8c:5f:cf:61:0e:6c:05:c5:60:c7:d2:43:8c:
         ff:d5:32:d9:0e:c7:41:c2:f2:a7:b5:7e:ca:ea:d0:26:b2:8d:
         26:66:6e:6f:83:4d:b3:55:d6:a7:84:de:19:c1:34:48:c6:3c:
         63:2c:89:cb:14:b6:86:cc:12:27:b4:38:b3:a7:26:24:18:62:
         94:57:e7:f3:e4:6a:72:7d:bc:ff:c8:0a:ea:6d:62:30:69:f5:
         f0:f9:dc:99:19:d9:be:c2:5e:fb:0d:ae:08:81:01:19:60:8f:
         a8:4a:06:5b:16:0a:28:31:94:5c:66:81:bb:f4:08:78:67:a4:
         51:6d:44:fc:d0:85:e9:bc:83:1b:51:47:42:98:ff:65:60:91:
         6d:62:ed:a0:39:16:22:5a:3e:cd:f9:09:ac:c2:20:9a:ae:ee:
         71:59:2d:2d:29:34:60:94:6f:3d:66:58:56:75:14:8e:db:a9:
         ee:d5:bf:95:2c:0a:4b:76:18:f4:5b:7b:84:63:fd:f3:48:0d:
         2d:84:75:1c:43:1a:cc:08:a6:cd:b1:56:47:fa:4b:a3:cf:3a:
         69:d8:2d:ac:9a:a8:a6:c5:50:c2:a7:3e:6d:02:fa:70:a2:b7:
         1a:5e:69:61:57:4a:79:64:3b:d7:f2:7b:65:de:20:70:87:23:
         3d:49:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 20:58:35 2024 by rpki-client on console-fra.rpki-client.org