Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32382e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32382e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          fX1KrIsxaLDBgaimUBqnmrj1rEGaQwH0cDOHstzRbo4=
Subject key identifier:   0F:15:B4:61:81:AA:DE:C6:66:42:28:5B:15:E1:94:31:2C:3E:89:B2
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       6DCD991F4CB7E8733B9A06A9D6BFD2DFBADD4643
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32382e302f32342d3234203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:15 +0000
ROA not before:           Thu 04 Apr 2024 10:55:15 +0000
ROA not after:            Thu 03 Apr 2025 11:00:15 +0000
asID:                     263611
IP address blocks:        179.124.28.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cd:99:1f:4c:b7:e8:73:3b:9a:06:a9:d6:bf:d2:df:ba:dd:46:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:15 2024 GMT
            Not After : Apr  3 11:00:15 2025 GMT
        Subject: CN=0F15B46181AADEC66642285B15E194312C3E89B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:b6:61:37:d7:d0:56:00:86:cd:f6:f4:7f:
                    68:68:19:cb:03:02:22:2e:f3:9c:0e:af:02:3b:8a:
                    07:34:0f:55:7d:3a:db:68:f7:52:d4:58:34:a7:a2:
                    56:b2:19:b6:63:20:9d:ac:43:38:aa:d4:ac:72:0a:
                    41:3a:15:8d:2b:6a:28:6f:5c:61:79:68:43:23:c9:
                    54:14:f3:47:6b:b9:5e:79:f0:89:a1:72:d1:0b:5f:
                    83:bd:a9:bf:eb:b6:e8:e1:6f:ed:79:de:32:f0:32:
                    33:0f:e9:27:60:97:a2:18:92:64:14:cf:da:2a:c2:
                    95:e5:bb:b9:af:41:6c:4b:39:49:59:71:65:2f:e7:
                    14:9d:de:f9:4b:6c:17:7d:f1:88:b5:3f:57:9b:1b:
                    2b:4e:f2:7b:46:e5:3b:8e:7c:ce:26:a2:a0:97:7f:
                    75:43:f0:f2:93:10:a8:c1:d3:ca:2a:d1:ab:98:0b:
                    5f:3b:7f:29:8f:b1:c1:b3:bf:06:1e:05:80:ff:bc:
                    ca:03:88:97:d3:21:13:52:aa:f2:72:6a:ea:50:ee:
                    76:78:e2:15:59:c6:41:d1:5f:86:2f:81:f5:38:78:
                    29:38:25:da:37:4f:c4:bf:05:02:f2:0b:43:44:cc:
                    9a:96:14:f3:b3:ab:5a:0d:88:25:c6:41:e8:a9:eb:
                    a8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:15:B4:61:81:AA:DE:C6:66:42:28:5B:15:E1:94:31:2C:3E:89:B2
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32382e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:1b:a9:5a:d3:c7:65:a2:94:13:15:65:9a:bc:d5:c0:44:
         6e:7b:b9:04:b0:89:75:a9:0c:c8:a9:e9:db:47:c2:4e:4e:ab:
         ba:ca:53:6a:12:66:9c:01:57:4e:70:66:a8:ef:a3:3b:22:77:
         3d:86:f0:1a:18:06:be:05:cd:6a:8f:75:0c:14:d1:0b:aa:44:
         6e:e4:ba:fb:51:6f:99:1a:e3:95:14:d2:d3:8d:b1:87:8f:d8:
         b1:6b:87:3e:ba:75:73:25:6a:65:c7:a8:bc:bf:3c:10:e8:b8:
         f9:df:c3:d2:3f:a9:03:be:b7:e5:66:34:56:6a:9a:f1:2c:f0:
         16:84:2d:a5:28:59:3d:a6:7a:fe:52:6c:b9:84:0b:d1:95:13:
         43:5a:8b:05:97:8c:38:6a:b7:b4:62:ca:eb:f2:6c:5f:89:ab:
         a3:70:35:a9:56:b3:de:50:98:50:24:3a:78:80:17:1e:b1:31:
         6e:d2:5d:77:45:da:60:7c:6e:31:5e:54:cc:cb:3c:92:c9:1e:
         46:b0:0c:54:b5:52:ce:24:d1:f8:57:41:f2:29:b7:fe:08:8f:
         63:75:eb:ce:f8:f0:6f:14:db:4b:a7:3e:d6:b6:26:19:16:69:
         21:e6:26:0e:96:72:82:79:4b:e6:5f:51:3c:71:c4:8c:bc:75:
         48:6e:75:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbc2ZH0y36HM7mgap1r/S37rdRkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFGOTNEMDZERTg2MDI3MDhGQzkxRTQ0NDI0M0U1QUND
NDQ3OEYwMjAeFw0yNDA0MDQxMDU1MTVaFw0yNTA0MDMxMTAwMTVaMDMxMTAvBgNV
BAMTKDBGMTVCNDYxODFBQURFQzY2NjQyMjg1QjE1RTE5NDMxMkMzRTg5QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvbZhN9fQVgCGzfb0f2hoGcsD
AiIu85wOrwI7igc0D1V9Otto91LUWDSnolayGbZjIJ2sQziq1KxyCkE6FY0raihv
XGF5aEMjyVQU80druV558ImhctELX4O9qb/rtujhb+153jLwMjMP6Sdgl6IYkmQU
z9oqwpXlu7mvQWxLOUlZcWUv5xSd3vlLbBd98Yi1P1ebGytO8ntG5TuOfM4moqCX
f3VD8PKTEKjB08oq0auYC187fymPscGzvwYeBYD/vMoDiJfTIRNSqvJyaupQ7nZ4
4hVZxkHRX4YvgfU4eCk4Jdo3T8S/BQLyC0NEzJqWFPOzq1oNiCXGQeip66hdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDxW0YYGq3sZmQihbFeGUMSw+ibIwHwYDVR0j
BBgwFoAUavk9Bt6GAnCPyR5EQkPlrMRHjwIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUoyYjFWbTc0dUFNWmdSSGlMd0VDM0dTcjhnZGl3bVo0SmNYeDl0VFNQ
QWkvMS82QUY5M0QwNkRFODYwMjcwOEZDOTFFNDQ0MjQzRTVBQ0M0NDc4RjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBRjkzRDA2REU4NjAyNzA4
RkM5MUU0NDQyNDNFNUFDQzQ0NzhGMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVKMmIxVm03NHVBTVpnUkhpTHdFQzNHU3I4Z2Rpd21aNEpjWHg5dFRTUEFpLzEv
MzEzNzM5MmUzMTMyMzQyZTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfBwwDQYJKoZIhvcNAQELBQADggEBAIA9G6la
08dlopQTFWWavNXARG57uQSwiXWpDMip6dtHwk5Oq7rKU2oSZpwBV05wZqjvozsi
dz2G8BoYBr4FzWqPdQwU0QuqRG7kuvtRb5ka45UU0tONsYeP2LFrhz66dXMlamXH
qLy/PBDouPnfw9I/qQO+t+VmNFZqmvEs8BaELaUoWT2mev5SbLmEC9GVE0NaiwWX
jDhqt7RiyuvybF+Jq6NwNalWs95QmFAkOniAFx6xMW7SXXdF2mB8bjFeVMzLPJLJ
HkawDFS1Us4k0fhXQfIpt/4Ij2N168748G8U20unPta2JhkWaSHmJg6WcoJ5S+Zf
UTxxxIy8dUhudUw=
-----END CERTIFICATE-----
Generated at Mon Nov 11 20:58:35 2024 by rpki-client on console-fra.rpki-client.org