Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa
File:                     3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          2J9l6k6cLm4HAWvn8LjPVQA6elwHR86UDjw2mMJGF70=
Subject key identifier:   5C:7C:1D:58:2A:16:43:99:8F:D9:D9:75:C1:31:D8:48:9B:97:99:62
Certificate issuer:       /CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
Certificate serial:       78DEB215D84AA274C7F1CD4E33CCFE601A756438
Authority key identifier: 0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa
Signing time:             Fri 28 Apr 2023 00:11:35 +0000
ROA not before:           Fri 28 Apr 2023 00:06:35 +0000
ROA not after:            Fri 26 Apr 2024 00:11:35 +0000
asID:                     267484
IP address blocks:        189.51.128.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:de:b2:15:d8:4a:a2:74:c7:f1:cd:4e:33:cc:fe:60:1a:75:64:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
        Validity
            Not Before: Apr 28 00:06:35 2023 GMT
            Not After : Apr 26 00:11:35 2024 GMT
        Subject: CN=5C7C1D582A1643998FD9D975C131D8489B979962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:13:5c:2d:4c:9c:86:0f:f0:c6:04:0e:a0:
                    ca:a6:02:51:23:b3:5a:54:15:1a:85:fc:1c:f9:5d:
                    ac:60:95:74:d9:ed:5b:83:98:b6:6e:c4:61:ad:8b:
                    24:ec:d5:e5:03:2a:df:fe:1b:94:de:1c:c2:0e:cc:
                    64:ac:d9:9a:af:d5:57:cd:74:55:86:25:93:d7:46:
                    34:40:5a:04:3b:2b:f3:17:90:75:4e:bc:a8:92:39:
                    ec:e5:78:a6:fe:4d:ff:ad:a2:f5:47:18:5b:ae:ad:
                    19:c0:a9:13:9d:f5:37:98:39:5f:b7:a5:a6:e5:a4:
                    b5:8e:c1:fd:73:eb:c7:e0:fa:59:91:a7:e9:4d:85:
                    fa:c0:48:6e:65:ea:f3:c7:6d:81:af:3f:19:7f:8e:
                    b9:da:e7:cf:9b:7f:05:b0:12:20:45:89:20:2f:a9:
                    e6:c6:17:44:5a:ea:0b:36:71:2d:0e:a7:f0:b3:3d:
                    47:fa:59:45:11:0b:f8:66:d8:8c:2f:39:31:45:07:
                    14:0c:87:3c:fb:97:82:75:2f:6e:38:14:96:92:e9:
                    d7:a8:ea:12:cf:05:07:65:51:91:20:0f:e1:37:bb:
                    71:0c:4c:05:6d:ab:19:93:75:38:a2:8a:c6:1b:3a:
                    56:a7:4b:33:f1:58:a3:67:1e:04:23:08:d9:98:c0:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7C:1D:58:2A:16:43:99:8F:D9:D9:75:C1:31:D8:48:9B:97:99:62
            X509v3 Authority Key Identifier:
                keyid:0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:8c:aa:5c:92:1d:25:4b:8d:f2:23:ca:d6:33:c8:91:4a:
         a4:f1:89:af:c4:fa:1a:65:8c:67:08:79:84:ef:52:03:9a:59:
         95:be:1b:82:7d:9c:59:f1:73:d6:db:cb:a3:0a:06:73:9d:aa:
         59:44:3f:b5:dc:cb:1b:63:3c:fd:10:2d:89:cc:6f:70:54:2f:
         f4:35:a1:b4:e5:b8:f8:0e:b5:17:2b:36:b7:50:7f:eb:44:7c:
         18:94:7f:70:97:87:64:5d:0f:05:c2:30:fe:75:a7:e2:f0:dd:
         ab:86:61:9a:ee:88:49:7f:45:9d:00:14:fe:67:c0:6f:44:9b:
         c9:9f:e1:90:a4:fe:6b:2d:f6:77:31:55:fe:28:71:c9:39:03:
         4c:30:6c:d3:e5:3e:40:fa:78:10:75:b8:e2:88:ec:e7:df:2f:
         23:f2:34:9b:93:46:c9:49:36:b5:48:7e:df:39:a5:ca:13:f3:
         e0:29:2c:9a:9c:42:ed:bf:ee:8d:cd:a0:aa:66:dd:26:1f:4e:
         e3:bd:f1:49:d3:83:b5:ab:e8:20:1e:9d:f5:6f:45:bc:52:bb:
         83:ba:69:36:42:bc:b5:e0:2f:d0:60:93:b1:5c:8e:14:65:14:
         b4:2a:61:7e:51:e7:24:21:26:2e:11:6a:4e:a9:c6:6e:87:1d:
         1a:d4:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 10:28:32 2024 by rpki-client on console-fra.rpki-client.org