Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
File:                     3137392e34332e342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          6DI6A5f3uyWUjU4Jv4UpLh0haOVso+raMP+SZCOOhEQ=
Subject key identifier:   41:E6:63:6A:45:19:D8:DA:4C:0D:29:8A:0D:D9:B8:23:8F:C5:D7:BF
Certificate issuer:       /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial:       1DD9DF3DE414810B946519D4340AD47573B65A94
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
Signing time:             Thu 04 Apr 2024 23:55:03 +0000
ROA not before:           Thu 04 Apr 2024 23:50:03 +0000
ROA not after:            Thu 03 Apr 2025 23:55:03 +0000
asID:                     262417
IP address blocks:        179.43.4.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d9:df:3d:e4:14:81:0b:94:65:19:d4:34:0a:d4:75:73:b6:5a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
        Validity
            Not Before: Apr  4 23:50:03 2024 GMT
            Not After : Apr  3 23:55:03 2025 GMT
        Subject: CN=41E6636A4519D8DA4C0D298A0DD9B8238FC5D7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:84:52:70:46:62:17:94:62:5c:09:bf:a8:
                    f2:3d:12:c7:fe:42:8e:b9:8e:58:ab:17:59:bc:d2:
                    5f:4c:d2:e4:fe:3f:8d:22:24:6b:fc:3b:51:42:11:
                    0a:da:38:3a:fb:2f:03:ad:92:54:e7:3f:e4:a0:f1:
                    ec:26:ee:7a:23:7d:de:8a:40:74:dc:ad:17:3e:f7:
                    5b:c2:fa:20:40:37:c7:d0:92:e0:f9:23:30:40:79:
                    17:b6:23:7d:d3:21:a6:33:f2:97:ae:68:0f:21:52:
                    77:f5:fe:d8:60:59:19:42:b8:3e:f2:a0:7d:45:01:
                    ca:29:7f:20:8a:bc:16:d4:ec:37:c9:af:b7:e5:2e:
                    3c:da:17:0c:79:02:35:05:a2:76:4c:58:75:37:ec:
                    e9:9e:17:c3:61:9b:4e:61:82:9e:2e:b6:f3:8b:8d:
                    2e:68:ba:17:3a:b3:e3:a0:06:e5:cb:eb:28:37:21:
                    a3:3e:e2:cd:26:4e:25:b4:b1:00:d8:e1:a2:ea:bc:
                    84:21:14:97:25:36:61:fa:43:0b:fe:30:75:4d:90:
                    21:33:84:f6:e4:8c:30:6a:b3:fd:9c:3a:da:bb:61:
                    3a:11:84:70:7a:03:57:f7:b5:22:4c:f0:3f:cf:0d:
                    99:87:7b:18:df:80:58:02:cd:75:22:9a:09:25:d1:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:63:6A:45:19:D8:DA:4C:0D:29:8A:0D:D9:B8:23:8F:C5:D7:BF
            X509v3 Authority Key Identifier:
                keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137392e34332e342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:74:f5:1d:a4:2b:09:97:8e:1d:a6:2b:cd:36:0f:41:56:ba:
         36:83:ef:fd:b1:0c:58:6c:f3:87:b9:5d:1d:d0:6c:f2:31:a0:
         fc:7b:9d:58:b7:5c:b8:d3:bd:a7:7e:ec:b0:60:4d:3c:ca:b4:
         d4:55:90:47:91:33:f4:d0:18:a9:39:6e:3b:0f:ee:d7:81:0f:
         6d:78:d8:bb:fe:1d:1c:50:76:6d:ac:ff:36:06:3f:99:85:fe:
         cc:69:a4:a4:8f:da:40:55:dc:26:43:f6:88:8c:ea:52:bb:b3:
         ca:88:89:52:f7:20:f6:9c:03:bb:69:9b:60:50:3e:83:dd:d0:
         e0:17:a6:fa:6b:0b:5d:2c:42:57:a7:22:b9:b2:54:29:ca:e8:
         73:a4:ee:c1:6b:dd:79:21:df:78:05:f3:ae:45:76:23:3c:73:
         93:65:05:60:56:01:ef:76:fc:6b:e0:ef:ea:dd:7f:2a:bb:51:
         2d:05:21:71:f3:cb:21:13:41:98:17:6b:46:1e:fc:5f:e7:37:
         cc:54:b7:94:df:3b:19:28:3c:3a:10:ea:0e:bd:cb:a0:6d:31:
         98:53:3c:c1:8f:90:04:7d:7a:95:d6:77:d8:7f:f2:c5:37:a1:
         ab:b4:72:4b:78:ba:90:1d:92:ef:1d:5a:4e:1a:96:3d:b0:8e:
         1b:37:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 20:08:09 2024 by rpki-client on console-ams.rpki-client.org