Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa
File:                     3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          LFinKfNmV0hu99YDaFxaGac/oDJYp+xmsEUYt0vk078=
Subject key identifier:   9D:3C:AE:C9:63:1C:3A:E9:53:54:26:F1:1B:9F:9E:23:43:B8:75:45
Certificate issuer:       /CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Certificate serial:       407C823F6B8E8B0964EC10567CA2B20A193ACA3B
Authority key identifier: 4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa
Signing time:             Mon 19 Feb 2024 09:14:42 +0000
ROA not before:           Mon 19 Feb 2024 09:09:42 +0000
ROA not after:            Mon 17 Feb 2025 09:14:42 +0000
asID:                     263612
IP address blocks:        179.124.128.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7c:82:3f:6b:8e:8b:09:64:ec:10:56:7c:a2:b2:0a:19:3a:ca:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
        Validity
            Not Before: Feb 19 09:09:42 2024 GMT
            Not After : Feb 17 09:14:42 2025 GMT
        Subject: CN=9D3CAEC9631C3AE9535426F11B9F9E2343B87545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:97:06:a6:22:4a:ea:8d:ec:b2:9e:24:0a:
                    a4:5a:9a:f0:59:3e:7e:7b:ac:ad:27:cc:4c:f2:da:
                    ab:42:12:7f:b8:da:7f:4a:98:50:4c:38:d1:22:08:
                    80:97:89:2f:f4:5d:00:e0:9a:26:05:14:f8:92:ad:
                    72:c9:06:a2:d5:59:23:f7:07:7f:a4:5c:3c:74:ed:
                    14:d9:22:c4:c6:34:8e:93:84:52:c9:12:c8:03:23:
                    4a:d7:2e:4c:d2:d1:2d:20:95:88:91:ae:08:37:5b:
                    4c:68:28:32:8d:f9:b6:76:be:5d:df:eb:5b:e0:3b:
                    90:4e:fc:63:c0:b4:3a:d5:c4:77:12:3c:d4:73:4d:
                    e9:74:dd:34:5e:09:02:9f:1f:f5:4d:d7:13:59:6f:
                    65:a2:26:28:60:87:98:47:65:62:88:74:3d:53:c3:
                    00:d2:06:6c:73:1e:0f:2b:bd:00:84:72:37:47:57:
                    17:b3:bd:0d:cb:66:00:27:55:d5:ce:cd:ba:51:d2:
                    84:6e:3c:66:5c:b3:2e:51:81:c5:d6:dc:2f:48:a5:
                    2a:23:6f:ed:9c:bc:01:fd:a4:8c:fc:09:a4:e8:66:
                    80:f1:47:f3:75:5f:35:ae:ef:e9:37:90:6c:f8:ad:
                    36:2b:d7:d4:8b:70:73:61:39:5b:2e:0d:53:60:ca:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3C:AE:C9:63:1C:3A:E9:53:54:26:F1:1B:9F:9E:23:43:B8:75:45
            X509v3 Authority Key Identifier:
                keyid:4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:bf:bc:b6:01:be:b3:e9:77:65:b6:70:83:80:5a:72:c6:
         b6:c1:fc:39:70:cb:ff:2a:bc:f9:af:2f:5b:17:d0:f9:20:7d:
         c2:1d:82:02:a5:ee:08:ab:fd:b7:14:99:15:34:3f:d1:4f:b2:
         23:05:b9:94:0f:84:17:dd:d2:d7:36:7b:8f:15:0a:fc:67:ce:
         21:db:69:f2:75:44:f7:0c:5b:34:69:02:84:01:3b:1e:81:d7:
         ce:53:a1:0c:82:ad:f1:be:bc:28:e4:b6:99:61:56:a4:49:c7:
         e9:e8:ec:23:31:ba:af:07:ae:03:3c:e2:a3:77:ab:f2:4a:8d:
         90:54:05:19:2e:8b:f7:71:d8:2c:52:67:f8:ae:f5:4a:15:7d:
         8e:9f:a9:33:59:c2:01:56:be:74:af:fa:1b:17:f0:b9:1c:38:
         a0:3f:04:2b:78:06:45:35:40:a5:8b:d6:fe:5d:a8:c9:ab:58:
         cd:fd:17:de:0a:2c:f3:da:34:5d:67:ed:85:da:5e:68:eb:e6:
         bf:a0:15:ef:1c:df:42:fe:41:4f:58:ea:b3:da:2f:29:6b:c2:
         77:88:c5:b5:0c:31:38:6b:ba:b0:85:8c:c5:da:52:a9:31:fb:
         b5:18:38:75:d8:91:50:f0:dd:51:57:8c:64:59:a0:5d:41:51:
         0a:66:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:00:50 2024 by rpki-client on console-fra.rpki-client.org