Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135322e302f32312d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135322e302f32312d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          PF3mXiz0QYiHRM5OGec8m37Rc4FvOFsES9wDt/CTz9g=
Subject key identifier:   5F:8A:E6:CC:A7:93:2D:7E:A0:D1:65:D5:3A:94:16:E7:AD:8B:CD:2A
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       16E02FEDF9ECB9265B9000D5D778E40E6BD3AF8D
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135322e302f32312d3234203d3e20323633363431.roa
Signing time:             Thu 04 Apr 2024 10:06:36 +0000
ROA not before:           Thu 04 Apr 2024 10:01:36 +0000
ROA not after:            Thu 03 Apr 2025 10:06:36 +0000
asID:                     263641
IP address blocks:        179.127.152.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e0:2f:ed:f9:ec:b9:26:5b:90:00:d5:d7:78:e4:0e:6b:d3:af:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Apr  4 10:01:36 2024 GMT
            Not After : Apr  3 10:06:36 2025 GMT
        Subject: CN=5F8AE6CCA7932D7EA0D165D53A9416E7AD8BCD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:4b:c6:8b:79:19:8e:af:01:89:f9:d6:c3:
                    a5:03:df:af:84:09:ce:7f:29:3f:2c:03:75:33:db:
                    c7:11:83:2b:89:96:6b:57:b7:e6:b8:d9:61:3c:72:
                    6b:ed:27:f2:2c:92:2e:62:95:2d:f0:4a:44:f4:5b:
                    64:a6:79:36:1d:3f:d9:ca:3e:5f:7d:6f:e3:e0:7d:
                    ce:ec:b0:28:a3:cc:09:f0:f1:7a:a2:80:56:21:19:
                    72:e4:97:fc:6d:41:90:dc:12:7e:3f:82:fc:56:a8:
                    3a:83:01:b0:2c:47:7a:5c:6f:05:d9:53:14:81:cd:
                    88:e1:ac:bd:ff:14:79:2a:8e:67:64:f4:00:ff:48:
                    eb:ef:1a:1b:37:6b:17:4d:09:94:c0:fd:b4:7c:6b:
                    86:cc:4d:72:c3:83:ed:78:6b:68:5c:5f:ec:31:e0:
                    63:ec:12:87:30:70:bd:af:b4:d4:94:50:68:d4:82:
                    35:27:57:02:b2:8d:99:3f:f5:5d:c0:dd:41:67:64:
                    bb:b5:e7:3a:32:6b:9f:89:33:b2:9b:03:6e:b3:2c:
                    4e:6c:9d:b1:ad:09:0b:59:84:d2:bb:2a:a4:dd:81:
                    ca:84:e7:7f:eb:09:2a:3c:d7:bd:bc:e9:cc:fd:4f:
                    28:12:77:38:db:aa:f4:21:c8:0b:3a:83:d7:9e:38:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:E6:CC:A7:93:2D:7E:A0:D1:65:D5:3A:94:16:E7:AD:8B:CD:2A
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135322e302f32312d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:48:82:f9:8e:13:b5:8e:ff:d3:08:2e:da:60:28:01:84:
         0b:e5:2b:83:f5:97:45:4f:73:4d:e1:ac:0a:25:35:1d:77:a9:
         83:e4:b6:35:0e:9c:18:58:8f:2f:23:f6:cd:36:fc:87:50:99:
         e2:ac:1f:19:67:1c:24:04:4a:14:cf:e7:9d:96:30:06:e2:af:
         06:fc:96:36:34:e5:d0:d5:f2:f4:71:68:3d:f8:72:89:8f:6c:
         74:fb:e0:43:47:ca:00:b8:0e:7e:0c:06:22:52:fd:d5:03:86:
         93:66:8c:ac:fd:1e:20:85:10:4c:84:1d:3c:2b:d4:48:d2:82:
         a3:1a:d7:22:a9:2d:62:a7:0b:3b:5a:e4:21:e7:52:ce:62:df:
         c7:e6:b0:67:17:48:da:8f:5e:b7:46:4b:2f:b8:82:79:47:80:
         95:9c:6b:be:a9:8d:b2:33:53:ac:a5:9c:d9:8a:dc:be:21:0c:
         06:b5:ae:cb:d5:37:c8:03:42:4b:6e:0d:b6:2c:db:6f:b7:be:
         2b:2d:c1:92:e0:ed:96:29:00:f4:3d:e8:26:34:c3:5a:f8:19:
         13:a8:bf:f7:43:75:82:6a:f5:ab:67:a9:39:a4:94:f3:3d:d0:
         fa:2b:60:46:1d:a9:3c:a8:6d:e1:7f:34:a5:7d:b0:a2:f6:40:
         5d:99:d3:6b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFuAv7fnsuSZbkADV13jkDmvTr40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkxMjRERDAxQUY1RkIxNDI2OTU5NDQ3Nzg2MzZDNzVE
MjI3NjI4QjAeFw0yNDA0MDQxMDAxMzZaFw0yNTA0MDMxMDA2MzZaMDMxMTAvBgNV
BAMTKDVGOEFFNkNDQTc5MzJEN0VBMEQxNjVENTNBOTQxNkU3QUQ4QkNEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUUvGi3kZjq8BifnWw6UD36+E
Cc5/KT8sA3Uz28cRgyuJlmtXt+a42WE8cmvtJ/Iski5ilS3wSkT0W2SmeTYdP9nK
Pl99b+Pgfc7ssCijzAnw8XqigFYhGXLkl/xtQZDcEn4/gvxWqDqDAbAsR3pcbwXZ
UxSBzYjhrL3/FHkqjmdk9AD/SOvvGhs3axdNCZTA/bR8a4bMTXLDg+14a2hcX+wx
4GPsEocwcL2vtNSUUGjUgjUnVwKyjZk/9V3A3UFnZLu15zoya5+JM7KbA26zLE5s
nbGtCQtZhNK7KqTdgcqE53/rCSo817286cz9TygSdzjbqvQhyAs6g9eeOBWrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUX4rmzKeTLX6g0WXVOpQW562LzSowHwYDVR0j
BBgwFoAUeRJN0Br1+xQmlZRHeGNsddInYoswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMS83OTEyNEREMDFBRjVGQjE0MjY5NTk0NDc3ODYzNkM3NUQyMjc2MjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MTI0REQwMUFGNUZCMTQy
Njk1OTQ0Nzc4NjM2Qzc1RDIyNzYyOEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzEv
MzEzNzM5MmUzMTMyMzcyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7N/mDANBgkqhkiG9w0BAQsFAAOCAQEAI6BI
gvmOE7WO/9MILtpgKAGEC+Urg/WXRU9zTeGsCiU1HXepg+S2NQ6cGFiPLyP2zTb8
h1CZ4qwfGWccJARKFM/nnZYwBuKvBvyWNjTl0NXy9HFoPfhyiY9sdPvgQ0fKALgO
fgwGIlL91QOGk2aMrP0eIIUQTIQdPCvUSNKCoxrXIqktYqcLO1rkIedSzmLfx+aw
ZxdI2o9et0ZLL7iCeUeAlZxrvqmNsjNTrKWc2YrcviEMBrWuy9U3yANCS24Ntizb
b7e+Ky3BkuDtlikA9D3oJjTDWvgZE6i/90N1gmr1q2epOaSU8z3Q+itgRh2pPKht
4X80pX2wovZAXZnTaw==
-----END CERTIFICATE-----
Generated at Wed Aug 7 18:15:43 2024 by rpki-client on console-fra.rpki-client.org