Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa
File:                     3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (raw, json)
Hash identifier:          n1eVokxU5Ib9lrYNWQwEOUQ2OvOpfGHM3jkQ4tj3FgA=
Subject key identifier:   D4:B2:3E:81:A8:C8:92:49:88:92:E0:26:37:40:8A:24:EB:68:A4:CD
Certificate issuer:       /CN=0D6BEEB64B235D973334233AF4B2ADBF258D7DA1
Certificate serial:       099D3CDFBE5A14FC4A4A5DEB2B647E88C388AEA2
Authority key identifier: 0D:6B:EE:B6:4B:23:5D:97:33:34:23:3A:F4:B2:AD:BF:25:8D:7D:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa
Signing time:             Wed 31 Jul 2024 00:09:54 +0000
ROA not before:           Wed 31 Jul 2024 00:04:54 +0000
ROA not after:            Wed 30 Jul 2025 00:09:54 +0000
asID:                     263624
IP address blocks:        179.124.216.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9d:3c:df:be:5a:14:fc:4a:4a:5d:eb:2b:64:7e:88:c3:88:ae:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BEEB64B235D973334233AF4B2ADBF258D7DA1
        Validity
            Not Before: Jul 31 00:04:54 2024 GMT
            Not After : Jul 30 00:09:54 2025 GMT
        Subject: CN=D4B23E81A8C892498892E02637408A24EB68A4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:ca:74:36:af:4b:3d:66:82:74:31:01:b4:
                    4f:34:8c:b1:74:39:44:c3:47:d0:f8:bc:81:89:a8:
                    ad:92:8e:aa:0c:f6:ca:5c:be:cc:8d:28:0d:a6:37:
                    38:31:c4:0f:dd:13:cc:d5:62:57:3d:cf:09:53:95:
                    81:5c:55:79:1b:62:1b:d8:90:30:3e:6a:ca:0c:19:
                    7a:f1:f9:52:7e:d3:2b:b5:c1:fd:e4:8b:e9:4b:c6:
                    86:59:68:be:34:5e:c1:b6:fd:d7:62:29:c1:f4:ae:
                    f9:65:fd:f8:be:a4:76:85:ea:ce:ce:76:b6:c0:20:
                    5b:c7:cb:89:b4:58:1a:74:ee:27:ef:19:33:e0:7d:
                    8a:49:48:90:7e:06:dd:aa:98:29:ea:0b:19:11:4e:
                    a4:5a:39:68:f7:07:8e:fb:7c:d3:5b:a3:9b:a6:35:
                    03:8b:94:7f:a3:5a:60:ad:79:97:43:b0:e0:8c:46:
                    17:31:69:a7:40:c4:ed:3a:6a:9d:b0:47:4b:84:4d:
                    51:98:70:49:cd:16:fb:a7:7f:b4:5d:3a:81:49:f2:
                    cc:1e:07:23:fb:3d:6e:c5:8a:6a:86:ca:21:4e:51:
                    c8:e7:e3:46:a3:44:ba:a5:0b:eb:1a:a9:3d:95:51:
                    73:f7:60:94:64:a5:d2:b8:d7:8f:f3:07:b3:c1:1c:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B2:3E:81:A8:C8:92:49:88:92:E0:26:37:40:8A:24:EB:68:A4:CD
            X509v3 Authority Key Identifier:
                keyid:0D:6B:EE:B6:4B:23:5D:97:33:34:23:3A:F4:B2:AD:BF:25:8D:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:62:dd:e4:54:d8:aa:32:ef:89:c1:b7:04:df:da:76:a0:da:
         00:92:2e:16:5b:8e:ef:78:a4:86:e2:2f:02:f4:2d:7c:3b:ad:
         af:0c:86:c3:03:8e:4c:21:d3:2c:82:d9:30:47:66:26:bd:b3:
         b5:46:5e:b9:00:ba:53:62:22:ae:43:95:b9:bc:a9:2b:d0:c3:
         af:24:30:9e:6c:31:b1:e8:3d:b9:ff:58:3e:af:11:63:97:55:
         51:82:1b:5c:12:43:62:07:dc:85:0b:42:66:3b:a4:43:08:10:
         24:c2:73:d4:45:4a:7b:49:0b:20:7c:9d:e9:7d:4a:e2:d8:93:
         ab:9d:d5:21:af:29:fe:83:ac:da:28:c5:f0:2c:4f:9e:3b:90:
         b2:06:ab:b2:b8:65:e7:98:68:5e:62:ac:42:1d:f0:dc:a4:e3:
         75:6c:2f:24:cd:b0:5b:fe:ab:d3:3f:05:cf:69:aa:2f:41:18:
         e0:fe:13:2f:e4:ea:96:5d:7c:ca:e5:5f:a5:00:10:1e:ef:6a:
         57:aa:97:f3:cc:f0:5a:0c:ae:2c:a2:b9:0b:10:4b:5b:ce:ae:
         95:64:ab:c6:5f:3c:05:0c:11:0d:fb:d6:8e:a4:30:e4:b5:a1:
         2c:61:26:0d:c1:0e:37:36:ca:61:6c:d4:c9:1d:f0:ae:f7:8a:
         2c:0b:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 16:32:36 2024 by rpki-client on console-fra.rpki-client.org