Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32302d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131322e302f32302d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          tZVyw/fZVHPUc0C/kgkq99EGvVqtCO1lwSlt56+Du80=
Subject key identifier:   A6:D5:44:DA:FD:61:51:7F:E8:A9:47:21:AA:1D:C8:A9:E1:16:DD:82
Certificate issuer:       /CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Certificate serial:       0DD9B4DFAABBEE4603EFE15C9304F35379B781E9
Authority key identifier: 4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32302d3234203d3e20323633363132.roa
Signing time:             Mon 19 Feb 2024 09:14:42 +0000
ROA not before:           Mon 19 Feb 2024 09:09:42 +0000
ROA not after:            Mon 17 Feb 2025 09:14:42 +0000
asID:                     263612
IP address blocks:        179.189.112.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d9:b4:df:aa:bb:ee:46:03:ef:e1:5c:93:04:f3:53:79:b7:81:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
        Validity
            Not Before: Feb 19 09:09:42 2024 GMT
            Not After : Feb 17 09:14:42 2025 GMT
        Subject: CN=A6D544DAFD61517FE8A94721AA1DC8A9E116DD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:66:2b:2e:fa:10:28:8c:8d:9a:3c:da:82:
                    32:c3:2b:da:b9:6f:de:1c:ff:a9:18:01:2d:13:03:
                    90:eb:61:82:5e:76:d6:c6:77:7e:88:c9:80:8c:8d:
                    8a:44:7d:08:59:d9:a5:dc:22:bf:62:8d:17:4d:14:
                    25:ce:38:ad:18:db:16:e9:79:b6:01:ac:bc:22:f1:
                    49:7b:df:21:4e:5f:ff:8e:a8:0b:7e:3f:7c:1c:de:
                    10:2e:58:b9:09:1a:a9:10:70:d2:93:96:fb:b2:3c:
                    26:8d:5e:2d:11:ea:c8:c9:2d:ae:eb:8c:6d:5b:ee:
                    c4:30:e7:7a:4e:cf:91:35:bb:dc:24:2b:17:4c:02:
                    bc:e5:d7:a5:f4:a4:3e:18:86:e3:ad:01:71:2c:e7:
                    70:8b:ff:da:ba:26:ff:74:f7:a9:ee:98:bc:bb:70:
                    bf:24:fa:0c:2d:9f:18:fc:b4:33:25:58:c8:3b:ed:
                    44:55:2f:ca:db:94:eb:b5:de:1c:ea:5b:7b:fb:a4:
                    65:61:0f:8f:f7:25:b4:a5:a7:d0:dd:8c:2f:20:02:
                    97:d1:77:a9:4f:c4:9b:79:6c:77:02:15:16:4c:fd:
                    3a:57:5b:b0:dc:d6:78:70:2a:de:59:df:94:c4:8c:
                    39:c1:54:92:56:7c:fb:91:8f:d5:7e:62:46:22:c3:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D5:44:DA:FD:61:51:7F:E8:A9:47:21:AA:1D:C8:A9:E1:16:DD:82
            X509v3 Authority Key Identifier:
                keyid:4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32302d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:50:8c:02:d8:63:47:06:02:01:26:f3:97:74:2a:f3:8d:b1:
         43:6b:63:7f:fe:98:c1:42:46:95:b8:8d:0e:ce:d5:1f:10:2f:
         e1:70:eb:81:32:a6:ff:d9:c9:10:9e:ee:87:11:22:d6:40:07:
         ba:4d:f4:59:f0:74:6d:79:1d:62:88:88:67:d5:82:1b:c9:84:
         30:69:af:10:92:82:55:5f:ce:a5:7d:f0:b9:89:04:b1:6e:61:
         bc:d9:dd:a5:c2:ed:67:39:80:4f:6a:5a:b3:1a:9b:ee:c2:14:
         f2:29:05:05:cc:e2:2a:0b:1a:32:ab:69:01:56:d9:47:0b:dd:
         96:73:2d:a0:ca:2c:1b:cd:40:53:2a:d7:0d:91:65:8f:5b:29:
         7b:74:0c:a3:81:5b:b3:ce:b6:16:cc:27:20:2e:f3:b0:fa:fd:
         68:14:bc:a4:57:57:77:0b:9f:a3:bf:9b:f8:e3:ab:d6:10:d2:
         1f:29:5d:2a:19:d0:63:15:2e:eb:6a:24:ff:32:a3:8c:32:7a:
         e2:62:51:3f:b9:80:ee:2b:12:02:79:7f:52:21:cb:61:05:e4:
         aa:82:3f:1e:28:55:6d:27:3c:96:5d:0b:bb:d9:c2:49:c2:37:
         ea:12:26:f6:b6:47:4d:e9:f6:ca:5b:4d:03:51:66:1f:80:c9:
         f5:24:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:10:06 2024 by rpki-client on console-ams.rpki-client.org