Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/3137392e302e3132332e302f32342d3234203d3e20323731343738.roa
File:                     3137392e302e3132332e302f32342d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          t5KWI/1A9eOA4UYYPNCJByWWBh1UzzvWJ3vixtizTJI=
Subject key identifier:   8C:7C:EC:C7:A7:E7:61:4E:04:EA:3E:1E:DF:C2:ED:05:35:BC:89:EA
Certificate issuer:       /CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Certificate serial:       52E1CB1EDF2E47199647A10D54AF17760CEF5B8D
Authority key identifier: 2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/3137392e302e3132332e302f32342d3234203d3e20323731343738.roa
Signing time:             Thu 04 Apr 2024 17:02:48 +0000
ROA not before:           Thu 04 Apr 2024 16:57:48 +0000
ROA not after:            Thu 03 Apr 2025 17:02:48 +0000
asID:                     271478
IP address blocks:        179.0.123.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e1:cb:1e:df:2e:47:19:96:47:a1:0d:54:af:17:76:0c:ef:5b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
        Validity
            Not Before: Apr  4 16:57:48 2024 GMT
            Not After : Apr  3 17:02:48 2025 GMT
        Subject: CN=8C7CECC7A7E7614E04EA3E1EDFC2ED0535BC89EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:82:e8:02:53:61:ab:bf:a1:a9:9a:b9:c4:
                    9a:8d:f6:9d:50:7e:ef:e7:23:0d:74:37:6c:11:db:
                    ec:c2:3e:fa:7e:11:6e:00:d2:70:58:06:06:f1:93:
                    30:82:3a:01:ef:8e:53:ab:ba:b8:e8:1b:50:a7:86:
                    a1:d8:7a:b4:84:8d:bc:61:2c:b7:b4:ee:8e:94:e2:
                    69:51:b0:00:8f:64:25:b9:19:4f:a0:ab:85:e9:74:
                    c2:46:a1:d9:8a:01:45:d4:28:d8:b8:00:4e:9b:57:
                    6f:1a:c1:d7:da:04:b7:54:f1:72:16:c0:35:f0:5b:
                    a2:35:cb:3b:57:53:93:b2:23:04:d9:5f:7b:40:6c:
                    dc:1c:70:3f:4d:7c:4f:e4:d6:ad:e8:c3:ec:1e:6a:
                    72:7f:cd:56:fc:13:38:f8:8b:9f:97:a2:08:05:11:
                    e5:5c:d1:0b:33:76:cc:ab:3b:82:4a:3f:50:74:64:
                    de:d9:55:9e:e8:38:28:80:d2:77:5d:73:72:44:ff:
                    14:01:26:7f:3c:ed:9b:fa:5c:8f:54:8f:cb:b9:54:
                    71:12:c2:10:87:05:2b:ca:8f:f9:db:32:68:41:32:
                    f0:56:a7:5a:ce:b0:5b:7e:2b:03:32:16:f1:7b:16:
                    3e:3d:b3:2a:4e:69:90:d8:d7:9a:04:b3:30:3e:09:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7C:EC:C7:A7:E7:61:4E:04:EA:3E:1E:DF:C2:ED:05:35:BC:89:EA
            X509v3 Authority Key Identifier:
                keyid:2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/3137392e302e3132332e302f32342d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:56:6b:bd:ec:dc:c5:90:b6:c4:25:29:4e:4c:21:13:d8:20:
         29:29:2c:9a:2d:79:ad:74:ba:1e:98:83:74:cc:88:6b:01:ea:
         9a:27:9b:05:2b:be:88:68:de:ff:05:76:b0:c1:c3:8d:87:53:
         01:09:a2:58:fd:d3:5d:81:42:91:a0:5e:43:a9:55:9d:c5:18:
         56:16:bd:cf:63:f0:90:88:af:75:d3:13:50:d3:81:26:9a:b8:
         b2:e1:91:45:ef:65:2d:bf:31:fd:dc:70:73:4d:4f:6a:73:b7:
         5e:04:58:01:a6:75:cc:cb:3e:02:da:35:77:b3:bc:5e:8c:62:
         56:06:14:18:77:aa:99:8b:4e:fb:63:7f:1c:0a:33:66:61:34:
         4f:05:c9:67:ed:4e:13:ae:3d:c0:61:89:47:d5:cd:8b:be:63:
         f4:c0:c3:4a:72:78:bd:66:d9:5f:e3:b5:29:31:e6:d0:33:8d:
         05:08:02:05:48:05:e7:e9:32:f7:ab:02:75:d0:9e:2d:af:86:
         fb:2b:07:55:9d:e3:20:bc:00:22:7b:af:0e:74:fd:18:2c:73:
         f3:61:54:78:c4:1f:8e:ca:b1:c7:6f:9a:4d:48:bb:12:f7:44:
         c6:88:ab:e8:99:d8:f4:bb:cf:58:fa:e3:89:92:c6:00:0d:fd:
         9f:8a:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 09:39:47 2024 by rpki-client on console-ams.rpki-client.org