Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
File:                     3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa (raw, json)
Hash identifier:          Gh8+uxnR6rPTKXoeZ/4fM1kUwSa5KQaxVNA7/9kTXGo=
Subject key identifier:   FF:73:0A:E1:04:02:FC:93:82:58:8D:94:D5:F6:1F:95:7D:21:11:6A
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       25EF775077196DD4A31DED519E43EE391FA1D6C5
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
Signing time:             Thu 04 Apr 2024 19:59:30 +0000
ROA not before:           Thu 04 Apr 2024 19:54:30 +0000
ROA not after:            Thu 03 Apr 2025 19:59:30 +0000
asID:                     53143
IP address blocks:        168.195.236.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ef:77:50:77:19:6d:d4:a3:1d:ed:51:9e:43:ee:39:1f:a1:d6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:30 2024 GMT
            Not After : Apr  3 19:59:30 2025 GMT
        Subject: CN=FF730AE10402FC9382588D94D5F61F957D21116A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:f1:6a:2d:a5:0f:a4:e4:85:d0:cd:eb:83:
                    08:5b:30:b2:69:0b:56:da:82:cd:73:e9:65:3a:9b:
                    26:6c:84:49:b2:8d:33:32:f9:24:76:79:09:af:b4:
                    80:4b:1c:bf:c2:a5:16:85:ef:e5:44:85:92:44:2a:
                    54:53:95:14:68:c5:5b:fd:cf:be:bb:ae:e2:7f:c7:
                    8f:e8:58:e9:f0:12:de:da:22:8f:f4:17:8b:21:33:
                    78:c3:bf:9e:db:99:70:fa:7c:23:ef:33:12:1a:1e:
                    89:93:d4:8a:30:74:11:9f:54:a1:49:90:a4:ef:20:
                    b9:59:d7:48:60:d3:2a:30:53:1e:c7:12:9e:aa:8a:
                    76:7a:0c:ce:f1:0f:ab:56:4f:5f:56:c5:9d:db:21:
                    4a:e6:ab:44:1e:51:f7:2c:75:c7:b6:1b:41:84:d3:
                    97:55:dd:e1:d2:89:85:df:a6:c2:48:11:50:27:ea:
                    73:10:91:21:ec:72:d1:39:92:20:c5:d2:a1:f6:2b:
                    99:84:cd:ef:e6:37:a3:80:43:cd:42:7e:39:88:4f:
                    de:11:08:40:fc:b4:a5:cb:fd:57:49:10:ac:f4:a7:
                    91:33:dc:71:ca:bc:6a:71:95:66:7c:cc:35:a4:10:
                    cc:f2:1b:96:d2:6b:31:ba:cd:82:30:7c:fa:57:bc:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:0A:E1:04:02:FC:93:82:58:8D:94:D5:F6:1F:95:7D:21:11:6A
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:fe:20:a1:ff:df:75:57:a1:a4:89:e7:b9:43:f9:46:22:90:
         cf:e9:c1:aa:63:23:ee:a1:4e:67:e6:f8:33:0f:5b:24:80:c4:
         6f:54:dc:ad:40:d5:b6:00:c6:ac:1d:b0:67:8c:cc:6e:37:7a:
         ef:83:6a:55:22:7c:da:5a:fd:62:01:55:a7:5e:01:e2:fe:a5:
         fa:27:c6:02:21:c6:32:ec:14:f0:ba:0c:08:06:b0:06:b7:65:
         02:25:96:05:94:a8:19:79:5a:c0:be:7f:6f:f0:e3:1f:84:74:
         f8:c5:d7:11:ff:5c:60:75:61:03:16:dc:b1:dd:9b:46:81:cc:
         c4:6b:6d:d1:22:50:56:ad:2e:2b:52:b4:f7:ac:3f:4b:5d:20:
         c8:11:4b:e2:a7:ec:54:9a:01:ff:60:c9:dc:e4:e5:06:1c:c8:
         e5:49:f6:fe:42:bc:88:da:57:67:90:10:25:52:b7:6f:1b:8f:
         21:df:35:0a:ad:3c:4e:1f:09:16:5e:42:2d:c6:dd:23:ba:f0:
         28:2c:c7:c4:b2:78:61:47:32:43:69:40:2f:ad:48:46:58:03:
         0d:62:8a:d3:27:63:d7:0b:cd:a0:46:3c:d6:3f:bf:d9:8c:b7:
         91:04:06:f3:8d:52:af:a3:af:66:ab:83:4a:af:e0:6b:76:cf:
         da:f4:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org