Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138302e302f32322d3234203d3e20323637343834.roa
File:                     3138392e3132362e3138302e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          TiRyEVCu9yEDWfJ2ajIRzJgE7JGo+Qqdk3ysP9KH9Fs=
Subject key identifier:   42:81:E5:49:C0:F4:84:1A:AF:B9:49:DC:1F:A6:97:BF:1E:BE:CF:9F
Certificate issuer:       /CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
Certificate serial:       3C0EAB5C03F4786E51E1B55A5BE1DF77F8AAE819
Authority key identifier: 0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138302e302f32322d3234203d3e20323637343834.roa
Signing time:             Fri 28 Apr 2023 00:12:18 +0000
ROA not before:           Fri 28 Apr 2023 00:07:18 +0000
ROA not after:            Fri 26 Apr 2024 00:12:18 +0000
asID:                     267484
IP address blocks:        189.126.180.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0e:ab:5c:03:f4:78:6e:51:e1:b5:5a:5b:e1:df:77:f8:aa:e8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
        Validity
            Not Before: Apr 28 00:07:18 2023 GMT
            Not After : Apr 26 00:12:18 2024 GMT
        Subject: CN=4281E549C0F4841AAFB949DC1FA697BF1EBECF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:01:c9:29:ec:dc:36:74:34:4c:d7:03:e3:
                    7d:53:4a:fd:8a:8a:4a:98:77:f2:c9:7b:7b:f8:45:
                    57:ce:23:d1:88:be:35:03:3b:be:a6:fe:e5:1e:b4:
                    d9:33:9a:b5:76:11:31:78:6b:28:e9:11:52:b8:d4:
                    47:c2:33:1e:78:26:1d:59:87:4e:db:e1:8a:d8:5e:
                    21:52:83:38:f1:7c:14:be:3e:bf:17:11:64:ae:af:
                    d1:d0:43:8b:53:a3:bc:07:63:92:12:60:d3:e0:5e:
                    b2:e8:e8:8e:f5:f4:15:04:62:de:8f:5f:f9:55:a0:
                    db:46:8a:9e:9b:69:f3:6f:fa:4c:70:08:ac:be:83:
                    c3:67:14:e1:31:92:e5:96:d8:60:5f:e9:a1:80:88:
                    20:87:94:ae:55:fa:1b:a0:49:4b:4b:8c:99:77:5c:
                    fa:81:8b:b1:11:88:9a:77:d8:7a:d8:a9:66:b8:9e:
                    13:f8:75:ff:0b:e6:7a:fb:78:a0:a8:8f:e3:45:a7:
                    ed:f8:9d:02:3b:a9:58:09:aa:7f:fc:5a:0f:42:64:
                    8c:06:6a:88:22:3a:71:bc:1b:6f:8c:65:58:fc:b4:
                    af:89:fd:b6:3b:c3:c7:97:f1:23:97:1a:e5:ed:98:
                    1e:a9:af:7c:b9:2c:81:10:06:14:7d:ea:1e:a7:db:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:81:E5:49:C0:F4:84:1A:AF:B9:49:DC:1F:A6:97:BF:1E:BE:CF:9F
            X509v3 Authority Key Identifier:
                keyid:0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138302e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:f1:2a:7a:8f:d7:e8:55:d8:43:72:2e:36:1d:e5:94:31:d0:
         9b:90:63:b8:83:64:0f:d3:d8:ef:ce:7b:68:8b:63:f4:74:94:
         c3:38:34:20:42:11:ac:a3:00:b9:c0:4f:30:b8:7b:f1:fc:8e:
         f9:68:55:be:50:47:4c:e6:80:07:37:27:70:cc:52:21:19:49:
         c8:f1:ae:e5:3f:63:e7:39:f8:2d:b3:2b:47:76:f9:d7:87:67:
         df:c6:c6:fa:e4:40:a5:ae:f5:6f:2a:c5:10:67:8d:a9:47:a9:
         f1:c3:43:af:eb:4e:88:41:78:f6:7f:c4:25:61:45:b7:c2:5a:
         d2:69:e8:38:55:05:49:1d:3f:96:a0:65:93:0d:98:6f:c2:20:
         f5:2a:dd:8e:4d:07:4f:0c:58:b3:9d:47:ee:db:25:44:db:cf:
         45:49:8a:ec:b8:6e:70:96:7c:4b:49:c0:30:3e:00:39:0d:c1:
         92:1a:d8:df:c6:8c:0a:e8:00:e6:42:c3:33:6f:9e:27:66:69:
         ca:f2:fb:c4:e0:03:7a:4f:2d:55:3f:48:a8:24:02:d8:8c:36:
         0c:ea:ef:17:f9:de:a5:41:be:ac:67:d0:4b:15:d6:9e:20:16:
         55:3f:16:6e:df:67:d5:a5:09:c5:9d:54:76:14:23:34:8d:c5:
         f1:db:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 10:28:32 2024 by rpki-client on console-fra.rpki-client.org