Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3136302e302f32302d3234203d3e203533303038.roa
File:                     3137372e3138352e3136302e302f32302d3234203d3e203533303038.roa (raw, json)
Hash identifier:          r9GzNqNwEl6wTDljadHzLmza9Z85F/1ayfTx7ixr5jY=
Subject key identifier:   B6:60:C1:16:AE:32:7D:00:DD:F2:7A:A7:C7:91:38:C3:2B:B7:0D:C7
Certificate issuer:       /CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
Certificate serial:       23ED1AAF57CCE8C271D0FFD75209598BD4C085E1
Authority key identifier: 0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3136302e302f32302d3234203d3e203533303038.roa
Signing time:             Fri 12 May 2023 19:58:17 +0000
ROA not before:           Fri 12 May 2023 19:53:17 +0000
ROA not after:            Fri 10 May 2024 19:58:17 +0000
asID:                     53008
IP address blocks:        177.185.160.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ed:1a:af:57:cc:e8:c2:71:d0:ff:d7:52:09:59:8b:d4:c0:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
        Validity
            Not Before: May 12 19:53:17 2023 GMT
            Not After : May 10 19:58:17 2024 GMT
        Subject: CN=B660C116AE327D00DDF27AA7C79138C32BB70DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:d3:5a:40:db:fa:6a:27:e8:81:0e:da:5f:
                    f7:9e:65:20:79:67:e6:b2:36:77:d2:8c:ac:eb:26:
                    94:a5:2e:35:60:36:03:23:11:07:82:37:bc:45:e8:
                    67:c1:c2:9e:65:41:ea:bd:24:a7:37:b7:75:0d:4a:
                    5d:8f:37:f2:97:1e:75:52:39:86:71:1d:f7:98:41:
                    8d:56:c0:9d:09:0e:c9:c8:ed:bf:c7:4e:34:6b:38:
                    38:6e:ed:c5:f9:c5:99:f7:54:4f:f6:81:ea:c6:c8:
                    19:e5:cc:19:4f:39:21:7b:fe:2f:fc:ab:14:82:16:
                    7e:b3:74:8e:1a:e0:0d:3e:fd:0f:3d:81:72:41:20:
                    86:c2:fd:2b:4a:b7:ab:bc:20:4b:39:33:11:b5:7a:
                    5d:71:99:c7:33:6b:96:ce:0c:8e:7b:7a:7f:c3:e2:
                    d5:39:fe:10:14:12:c4:52:4f:e4:29:01:0d:5d:62:
                    c8:1c:c7:2f:4c:51:14:e3:9e:10:6d:5f:65:ec:34:
                    c7:c0:05:6c:79:be:66:42:90:0b:05:54:46:4e:68:
                    97:1a:03:c6:90:4d:07:b3:8a:36:76:93:0d:14:cd:
                    34:ba:4f:36:0d:58:01:90:92:2f:ff:3b:28:c1:19:
                    9d:32:d4:0b:bd:bc:a7:cc:62:06:f9:6a:59:77:0d:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:60:C1:16:AE:32:7D:00:DD:F2:7A:A7:C7:91:38:C3:2B:B7:0D:C7
            X509v3 Authority Key Identifier:
                keyid:0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3136302e302f32302d3234203d3e203533303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:cb:bd:79:b9:13:4b:21:5b:b2:d5:19:e5:e0:13:4f:86:
         0c:ee:63:26:c7:82:ed:b3:2d:ae:2c:52:4f:51:27:22:ef:20:
         d3:f1:d1:2f:f3:89:fb:88:b9:e4:97:7c:0c:be:f5:53:94:04:
         c1:b8:e6:92:b9:c6:85:1b:df:16:72:95:8c:14:99:5d:19:be:
         dc:cb:c2:bf:61:32:a1:d6:e9:0c:0b:6d:d4:0d:7c:b4:5d:de:
         5f:34:bd:01:91:85:1a:46:cd:53:ea:41:f6:e2:79:e0:57:f1:
         ab:2b:62:e1:58:da:d9:43:3c:fb:d8:e8:23:57:52:de:32:d4:
         02:da:55:3f:2c:31:ee:86:70:14:f5:ac:cc:fa:01:64:bb:b4:
         db:b3:e6:54:0b:24:7a:f9:3b:d1:83:7d:23:c6:49:d9:cb:d3:
         a8:3b:6e:aa:47:ea:6d:f8:cf:6b:d4:28:3c:f7:13:ee:51:35:
         34:35:aa:69:b5:b2:4a:4c:d2:01:c6:ad:b9:77:db:9f:ea:4f:
         95:58:08:c7:e0:5d:23:92:62:5e:d6:d5:23:ca:f2:cd:f2:4e:
         39:9b:b6:ed:3c:a6:e8:1c:53:1e:6a:b3:40:77:30:52:8c:ff:
         4d:e0:b3:5e:b3:fc:ac:32:78:ac:47:54:a7:b1:a9:c0:c0:7b:
         c7:3f:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 09:51:49 2024 by rpki-client on console-ams.rpki-client.org