Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
File:                     3133312e302e38342e302f32322d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          s2SgYBPRVdxw/kXmYqwJN1YNQ9JOpBOfpWzoOG7jyic=
Subject key identifier:   7B:C5:09:87:B1:D1:FD:45:8A:7A:51:DE:BC:D5:53:FC:C8:A1:32:8A
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       4725765B257794E55EDE66EB33FFDC5D4F08BA4C
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
Signing time:             Thu 04 Apr 2024 19:59:34 +0000
ROA not before:           Thu 04 Apr 2024 19:54:34 +0000
ROA not after:            Thu 03 Apr 2025 19:59:34 +0000
asID:                     262420
IP address blocks:        131.0.84.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:25:76:5b:25:77:94:e5:5e:de:66:eb:33:ff:dc:5d:4f:08:ba:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:34 2024 GMT
            Not After : Apr  3 19:59:34 2025 GMT
        Subject: CN=7BC50987B1D1FD458A7A51DEBCD553FCC8A1328A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:6e:ca:1a:07:cc:8e:ec:a4:fb:14:b7:e5:
                    17:54:a7:23:66:f4:9b:97:a0:7e:45:1a:d1:14:06:
                    5f:96:6a:19:1e:8e:29:f4:a2:b3:10:e2:1d:57:f8:
                    ba:17:ca:32:60:e4:91:34:ac:8c:ec:26:20:4a:e3:
                    37:a7:3c:2e:d6:62:66:77:15:f1:22:fa:a4:0d:ed:
                    d1:57:0c:bc:11:55:8b:93:09:8c:d1:ef:57:fa:c2:
                    e6:83:a9:6c:00:94:ca:17:5c:27:5b:cb:f0:55:a1:
                    0c:89:11:e8:d6:b8:42:9c:b9:bd:9a:f4:89:36:08:
                    4d:5a:df:0a:9d:d0:09:d4:b1:ba:06:2d:e5:a1:a0:
                    4a:3e:cf:85:da:51:af:ad:ab:1b:22:0e:a7:b1:a3:
                    9d:67:b9:92:0b:60:a9:05:28:8f:8a:21:42:a7:8c:
                    c0:c7:6a:29:8f:fb:a1:2a:c6:56:5e:45:1c:ec:dd:
                    ef:6f:f4:7b:90:26:52:f1:70:c8:ab:56:fc:85:83:
                    a3:81:38:04:ab:88:b0:36:ab:39:0d:f4:90:c9:3f:
                    68:1b:96:d5:3b:39:87:b8:ca:31:1c:24:a0:12:8f:
                    42:0f:66:01:08:9b:72:72:dd:78:84:55:3a:44:fb:
                    70:1d:2b:47:71:d9:aa:95:f7:41:4f:b5:df:2d:5f:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C5:09:87:B1:D1:FD:45:8A:7A:51:DE:BC:D5:53:FC:C8:A1:32:8A
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3133312e302e38342e302f32322d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:56:e2:bd:36:91:5a:98:3d:e8:01:98:04:1d:85:58:09:
         90:0f:19:cf:64:d1:1c:44:3f:c2:0c:e4:10:4c:72:2d:a9:2e:
         b4:e3:66:d6:e7:b5:87:c7:6f:69:57:71:90:a7:d0:98:fb:2f:
         1c:75:0e:8b:ed:e6:7b:63:40:50:ee:cf:5b:b8:af:d9:49:48:
         37:d3:18:e7:52:70:7d:82:66:21:b9:d3:61:bc:54:97:17:a6:
         70:88:ac:b2:fa:22:c2:96:65:e3:c6:8d:02:e5:04:cb:0f:11:
         02:04:f3:f6:80:65:e7:fd:2c:0c:97:61:3a:12:60:88:18:25:
         6d:0c:94:02:58:87:c4:ee:eb:9c:fe:3c:c0:93:30:56:b3:51:
         37:ce:68:ad:65:30:04:d7:76:d1:88:54:a7:05:8c:1f:5c:65:
         c7:f7:97:c3:6d:28:54:c3:44:46:fb:82:84:8a:f8:28:ea:8d:
         8a:68:c7:63:62:f3:a2:c4:4f:c3:eb:2e:ae:cf:29:7d:87:60:
         be:d1:13:6e:0e:cc:c2:27:23:a8:2f:35:7d:7d:d6:8e:60:33:
         23:64:03:35:66:9f:d5:37:5e:fa:7e:32:69:d3:da:9c:6b:93:
         72:6a:86:04:1a:23:31:df:27:65:cd:a9:d8:43:fa:eb:76:88:
         95:10:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 13:11:10 2024 by rpki-client on console-ams.rpki-client.org