Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/3137392e36332e3137322e302f32322d3232203d3e20323731353636.roa
File:                     3137392e36332e3137322e302f32322d3232203d3e20323731353636.roa (raw, json)
Hash identifier:          eI1mYjfxbuoZv2QG9nQO5eF/hMzrfrIHZlxRNv3AjZk=
Subject key identifier:   B5:AD:A5:B6:9B:41:65:F5:D5:53:23:A4:99:DA:67:02:58:A6:B6:F8
Certificate issuer:       /CN=A4126E577C99853906E6B0B4457F69D365EE7BA3
Certificate serial:       4BCA197A53AEB78A0B64BCFBFBFB9E2ADC1AB86D
Authority key identifier: A4:12:6E:57:7C:99:85:39:06:E6:B0:B4:45:7F:69:D3:65:EE:7B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4126E577C99853906E6B0B4457F69D365EE7BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/3137392e36332e3137322e302f32322d3232203d3e20323731353636.roa
Signing time:             Thu 04 Apr 2024 09:00:42 +0000
ROA not before:           Thu 04 Apr 2024 08:55:42 +0000
ROA not after:            Thu 03 Apr 2025 09:00:42 +0000
asID:                     271566
IP address blocks:        179.63.172.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ca:19:7a:53:ae:b7:8a:0b:64:bc:fb:fb:fb:9e:2a:dc:1a:b8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4126E577C99853906E6B0B4457F69D365EE7BA3
        Validity
            Not Before: Apr  4 08:55:42 2024 GMT
            Not After : Apr  3 09:00:42 2025 GMT
        Subject: CN=B5ADA5B69B4165F5D55323A499DA670258A6B6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:00:66:e8:bb:f9:0a:2f:60:4e:c8:52:79:
                    0e:30:a6:90:a6:aa:2c:c4:f6:3e:3d:7d:3a:d4:1b:
                    d7:2e:15:ba:d2:ef:f4:4a:8f:84:ff:20:43:98:35:
                    d8:58:c3:99:de:5a:fb:fc:7c:fd:2e:e9:30:e0:04:
                    f7:6c:d7:7e:35:09:79:60:75:c7:10:0b:f5:ae:9f:
                    5c:c8:2e:17:9b:dc:f3:43:7b:2c:30:31:d8:2b:a6:
                    ef:6c:81:55:1b:26:b9:c0:47:e9:d1:96:d1:ce:bb:
                    1b:f8:22:cb:49:81:c1:64:6c:65:1f:6a:7f:28:65:
                    01:02:9f:9f:8e:22:ac:01:8c:93:3e:07:ce:21:97:
                    50:70:b3:1c:a8:bb:5f:77:1c:51:6a:59:6d:d7:5e:
                    88:af:77:3a:ad:33:ae:43:bd:4b:3b:64:c8:ec:b2:
                    ce:9f:ab:46:e8:4e:31:e1:31:3f:b5:3b:9c:41:a3:
                    08:bf:8a:fc:7f:82:a5:57:6e:33:9b:4d:b3:84:6e:
                    ed:d8:d7:85:16:8f:7d:47:33:7c:04:e3:06:2d:83:
                    7f:9e:c7:02:6c:ec:20:9f:f4:2b:3c:3f:43:84:ff:
                    90:23:5a:af:9c:d0:a7:b9:7f:19:21:0b:5b:ce:1a:
                    26:52:3c:bd:2a:65:e7:ec:1c:73:1f:e7:9e:81:19:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AD:A5:B6:9B:41:65:F5:D5:53:23:A4:99:DA:67:02:58:A6:B6:F8
            X509v3 Authority Key Identifier:
                keyid:A4:12:6E:57:7C:99:85:39:06:E6:B0:B4:45:7F:69:D3:65:EE:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/A4126E577C99853906E6B0B4457F69D365EE7BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4126E577C99853906E6B0B4457F69D365EE7BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/3137392e36332e3137322e302f32322d3232203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:82:03:01:aa:54:57:58:fc:60:3a:e0:f8:d6:c1:0c:9c:ed:
         9a:f4:f7:54:65:d3:81:1b:d9:15:d6:18:c7:bd:08:ed:c9:3b:
         91:7a:9c:1d:d3:c3:7c:98:86:41:4c:74:b9:aa:df:32:e6:4e:
         8c:18:66:39:d0:2a:9d:ac:e8:9a:5b:e5:e0:f0:41:5a:95:7c:
         2e:08:89:40:97:3d:9f:99:52:43:4b:56:2a:e9:99:57:19:f8:
         84:c1:04:99:5b:0a:b6:89:14:fc:c2:07:40:d5:f7:1b:43:21:
         5b:79:78:d1:3a:0d:1b:2d:8b:c8:52:fd:27:76:b2:37:87:ea:
         9c:32:0c:dc:ad:4b:31:dd:aa:ae:bf:1b:e2:71:cd:a6:21:e8:
         94:f5:db:ff:08:4a:52:d6:ba:9b:66:89:d9:a8:14:29:15:6a:
         a3:9e:73:fb:b7:72:7a:af:5a:99:29:8b:af:75:0e:ac:ab:6f:
         6e:17:b6:87:a1:6a:05:9b:d1:31:2a:ce:7f:80:61:86:69:1b:
         5e:90:44:9a:a3:6b:47:01:1a:23:24:e5:2e:a1:80:0d:23:d2:
         96:65:b8:b8:26:fb:ab:57:76:52:0d:4c:0e:d5:f1:ad:b5:83:
         6d:3a:61:2a:73:0d:0a:ff:44:22:00:39:21:c2:db:9f:fb:3d:
         2e:45:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 06:00:11 2024 by rpki-client on console-fra.rpki-client.org