Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3131312e302f32342d3234203d3e20323730353533.roa
File:                     3138392e38352e3131312e302f32342d3234203d3e20323730353533.roa (raw, json)
Hash identifier:          3CiIV2GSo+Nj079K4alZTzfE464hD62OJ6g6znQbTAc=
Subject key identifier:   57:3E:BD:6B:8D:4E:AA:EC:23:1A:F3:DF:17:D3:A2:02:99:CB:AB:4E
Certificate issuer:       /CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
Certificate serial:       612122C7FDA191675372E406EF460700AED9BD68
Authority key identifier: 15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3131312e302f32342d3234203d3e20323730353533.roa
Signing time:             Tue 11 Jul 2023 14:54:02 +0000
ROA not before:           Tue 11 Jul 2023 14:49:02 +0000
ROA not after:            Tue 09 Jul 2024 14:54:02 +0000
asID:                     270553
IP address blocks:        189.85.111.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:21:22:c7:fd:a1:91:67:53:72:e4:06:ef:46:07:00:ae:d9:bd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
        Validity
            Not Before: Jul 11 14:49:02 2023 GMT
            Not After : Jul  9 14:54:02 2024 GMT
        Subject: CN=573EBD6B8D4EAAEC231AF3DF17D3A20299CBAB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:b4:7e:c8:9f:df:6b:5a:61:6e:9c:4a:c6:
                    83:66:5f:c2:a2:4e:8a:ae:32:d3:77:6a:5f:86:7a:
                    3f:8f:d4:7f:b1:fa:d1:fc:f9:54:1e:3d:6c:61:4d:
                    6c:7c:e1:48:34:7e:32:a0:8f:8b:9a:2f:0b:b2:ff:
                    ab:c4:3f:bd:03:96:21:ed:de:69:6d:43:8e:30:de:
                    6f:dc:4c:a7:c7:14:fd:1b:09:31:c1:47:16:87:38:
                    b7:90:2e:76:d6:9d:3f:28:04:ff:68:03:ef:8f:e8:
                    19:15:ac:d8:09:1e:35:b0:7f:c9:c7:61:85:b2:ad:
                    89:14:68:c1:bf:8d:52:8f:3c:22:f9:1e:5b:e5:8b:
                    aa:99:35:bc:36:aa:b5:c4:20:4d:e5:3f:f5:69:06:
                    2d:a5:f9:d2:58:c0:30:50:62:62:0c:cd:fc:50:0e:
                    5f:c6:25:45:cf:bb:0f:76:0c:ba:26:7d:0f:23:e7:
                    3a:e7:30:cd:c4:65:b4:f6:f5:4d:53:6b:39:8f:51:
                    53:2f:f4:f9:75:83:7e:3f:73:92:a2:62:c2:12:9a:
                    cd:71:eb:29:5d:4e:7e:f6:54:2a:86:f5:ce:1c:22:
                    f3:dd:27:d5:5e:bc:0e:62:11:8a:f2:31:1b:60:4a:
                    13:2a:4b:43:fb:46:53:e3:b1:2f:b6:6e:d4:b9:ec:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:BD:6B:8D:4E:AA:EC:23:1A:F3:DF:17:D3:A2:02:99:CB:AB:4E
            X509v3 Authority Key Identifier:
                keyid:15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3131312e302f32342d3234203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:06:53:f8:52:a8:72:89:03:5d:40:88:57:d0:61:b4:ef:a1:
         fe:8b:a6:6e:8c:46:ca:84:e7:79:d2:26:56:56:b6:4d:43:c6:
         a6:cb:a1:47:f0:b9:2f:e8:52:aa:90:51:07:9a:a6:b0:91:13:
         0b:ec:3b:0a:9c:ce:d4:02:4f:6a:e3:7e:64:f5:ce:e4:f9:5d:
         af:bf:c6:ce:05:7b:45:23:88:cc:21:42:52:17:67:17:ef:1a:
         45:ac:ca:75:1c:ef:e6:8e:69:6c:5d:e6:74:31:55:e3:eb:5d:
         ba:79:a1:b3:9a:09:bd:63:a7:5a:cc:ae:85:bb:11:bb:8c:27:
         ad:4a:27:32:d6:d3:ba:86:bd:f7:9b:9f:a0:d1:84:73:6a:d8:
         05:01:84:ce:ab:29:bc:cf:2f:e8:ca:10:49:80:e2:c6:b5:8b:
         a4:bf:a5:44:11:19:a1:46:a5:80:25:3b:b7:d6:f1:cc:dd:a3:
         89:19:6b:29:3b:be:8a:57:bb:a6:80:d7:8c:ef:45:06:b3:4c:
         04:0e:69:55:f9:06:0f:e8:74:19:86:3c:1b:27:4a:30:fa:b2:
         61:d4:5c:f1:17:c2:40:b7:b2:8b:59:ea:8b:58:fe:bf:d7:86:
         bf:7f:44:5f:51:ed:c2:4b:48:52:20:a0:00:fa:0b:af:c0:2c:
         0c:d6:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 30 11:30:27 2023 by rpki-client on console-ams.rpki-client.org