Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa
File:                     3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          XsSqU/xMij7lQf4F7qpale/vVBAhmxpy1XUFAVTvReA=
Subject key identifier:   3C:3E:CF:35:6E:4B:8B:DB:D3:C3:20:0A:BC:ED:C0:67:09:0B:B7:C3
Certificate issuer:       /CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
Certificate serial:       77B91526EC1BC58FF5AEA749D59D49C4D3F859A9
Authority key identifier: 0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa
Signing time:             Fri 28 Apr 2023 00:10:14 +0000
ROA not before:           Fri 28 Apr 2023 00:05:14 +0000
ROA not after:            Fri 26 Apr 2024 00:10:14 +0000
asID:                     267484
IP address blocks:        189.126.190.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b9:15:26:ec:1b:c5:8f:f5:ae:a7:49:d5:9d:49:c4:d3:f8:59:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
        Validity
            Not Before: Apr 28 00:05:14 2023 GMT
            Not After : Apr 26 00:10:14 2024 GMT
        Subject: CN=3C3ECF356E4B8BDBD3C3200ABCEDC067090BB7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:81:6a:cb:90:19:f9:47:93:62:08:55:bb:
                    c2:73:f1:61:26:2f:f3:f1:bf:07:7a:6b:45:14:9b:
                    4a:4a:50:cd:ba:20:e7:9b:72:27:c1:47:52:24:4e:
                    1a:84:eb:31:9b:8e:07:92:a8:01:b1:d5:03:2c:3f:
                    24:94:54:ab:b7:b9:db:3d:e3:9e:4a:ad:d5:c6:4f:
                    7e:3e:f0:45:87:89:5d:ca:42:df:3f:33:ae:86:4a:
                    d9:33:1d:58:68:09:6b:0f:a8:ed:eb:ab:48:50:db:
                    02:a2:ff:a8:9e:9d:25:b3:58:c9:f5:b6:d0:74:08:
                    b4:52:2b:49:f5:a7:d6:f7:a8:34:9c:af:13:86:d1:
                    63:73:4e:f7:05:df:e6:60:65:d4:41:98:d1:02:f5:
                    b8:58:86:53:b7:ef:8b:53:d3:35:54:63:a4:84:53:
                    be:2d:91:54:38:55:85:9e:a2:8d:76:f0:1e:75:b4:
                    0b:b9:3f:d2:d2:2f:19:b6:67:2a:cb:87:bc:e4:ba:
                    54:49:39:ce:6e:d5:db:24:f7:95:94:9e:c0:2d:7f:
                    18:07:e6:89:b7:92:de:83:8e:68:33:16:fe:e9:d1:
                    cc:54:ac:47:52:eb:31:eb:04:99:d0:7d:ad:9a:ca:
                    36:09:75:bc:4e:2a:4c:e9:3b:0b:d2:68:35:dd:d1:
                    75:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:CF:35:6E:4B:8B:DB:D3:C3:20:0A:BC:ED:C0:67:09:0B:B7:C3
            X509v3 Authority Key Identifier:
                keyid:0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:7e:91:45:43:85:08:fc:78:aa:1f:8e:7e:95:6f:12:ae:
         74:7f:d1:9e:56:e0:fd:1d:98:ae:78:b8:d9:1c:bc:86:9b:09:
         31:4e:d0:9d:49:81:de:99:71:09:9a:c3:0d:07:90:20:c3:98:
         a9:e9:62:21:a1:b6:54:f7:2a:a2:ac:e1:9e:9c:35:c9:92:3a:
         fd:0f:49:35:77:20:41:b0:ca:4e:7c:96:7a:f3:f4:40:bc:12:
         32:50:ab:ad:0d:c4:b1:40:7d:56:51:99:11:99:ae:90:ce:8d:
         41:de:6e:61:cb:ae:f5:0d:f2:d5:a8:2b:1f:b8:a2:7b:18:2e:
         2d:af:0c:1a:c5:24:30:e5:28:3b:41:f7:38:cf:b5:f6:54:31:
         e9:97:7a:c4:f9:d7:57:94:80:26:e9:d1:b0:7d:84:bf:6c:93:
         c4:cc:de:2e:a3:d2:88:19:3b:7c:8e:f1:ef:d5:fc:74:60:24:
         61:41:89:98:fb:d8:ca:b6:e3:91:58:96:7d:c6:c5:f1:ee:fa:
         f7:dc:07:ea:51:09:4e:d7:dd:5c:64:16:87:40:1d:f4:cd:72:
         72:67:9d:c3:14:13:8e:a0:a2:1d:01:92:6c:ff:3d:86:6d:68:
         9e:05:af:70:0f:96:05:89:4e:a2:9a:98:ed:1d:e5:d3:f4:d7:
         6e:c7:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 09:51:49 2024 by rpki-client on console-ams.rpki-client.org