Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
File:                     3137302e302e3136302e302f32322d3234203d3e20323635303231.roa (raw, json)
Hash identifier:          CQyr38T/pPYylEGbgcIT5gzvlE6v/96i99At6+3Siw4=
Subject key identifier:   14:D9:7E:17:37:7E:C7:D1:8D:9D:AB:54:BC:DD:EB:1F:D9:E8:8F:02
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       189EB375B9F4010521E9A28840EB4A65DB93E9F9
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     265021
IP address blocks:        170.0.160.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9e:b3:75:b9:f4:01:05:21:e9:a2:88:40:eb:4a:65:db:93:e9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=14D97E17377EC7D18D9DAB54BCDDEB1FD9E88F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:32:52:89:50:b9:a4:30:8d:57:2e:c2:6b:
                    a2:97:70:d3:2b:c4:61:e5:59:46:d0:95:a0:df:e7:
                    32:f9:bf:ef:cf:9d:8f:0e:bd:36:5c:a5:62:19:1d:
                    04:85:e3:77:04:de:68:16:49:8f:91:31:d5:24:76:
                    b7:ac:18:f8:a8:47:b4:bd:0c:70:f1:5a:a4:6f:7a:
                    c3:71:db:78:04:db:17:54:80:a4:e3:2c:4a:b9:6f:
                    23:68:98:ff:3b:3c:77:6e:e8:cd:5d:9f:07:d4:23:
                    db:86:0d:58:1c:13:51:eb:5f:55:1e:32:52:6a:21:
                    94:e0:c1:13:18:ca:06:3d:7f:d9:5c:46:98:c7:15:
                    b8:55:fc:34:00:57:39:02:14:50:97:ec:0d:8f:08:
                    7a:50:1b:18:d3:27:a4:4a:08:2a:57:6c:b9:55:b7:
                    2c:f9:87:c0:a4:2b:1a:b8:cf:19:34:af:45:e3:f9:
                    12:6c:62:86:73:f6:b3:db:cf:37:73:0f:2a:a2:d5:
                    ee:d4:fc:bb:44:79:36:0d:70:96:36:af:5d:e0:ac:
                    ad:2d:9a:05:1f:44:77:1a:cf:b1:7e:d7:4f:14:e1:
                    f3:9f:fc:9f:c2:2d:f3:77:28:bd:5f:09:b1:38:1d:
                    f9:f1:e4:2a:a6:61:19:8a:de:c9:b3:84:7c:9e:51:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D9:7E:17:37:7E:C7:D1:8D:9D:AB:54:BC:DD:EB:1F:D9:E8:8F:02
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:7b:a6:a3:80:c7:00:d2:36:ab:c9:85:04:bf:6b:ee:a6:
         e6:1c:ef:76:c3:a2:62:cd:a1:6d:b4:17:19:8e:80:2b:d6:2e:
         d2:00:87:95:ba:c0:27:c2:af:6c:cf:cc:4f:da:18:ed:b7:92:
         b8:04:7d:80:7f:6b:38:2d:a3:aa:47:19:f0:ca:08:56:44:38:
         57:b4:13:b2:b5:99:c3:77:24:63:3b:18:59:83:27:fd:b8:14:
         07:05:1b:7f:15:50:b3:66:42:9d:28:29:81:44:92:4e:8a:fd:
         12:be:ad:b3:7e:a6:23:e7:8f:cc:2f:2f:77:ab:e6:90:9e:2e:
         86:91:7b:43:82:da:17:fc:4b:21:ec:33:76:f8:0b:a9:a6:d3:
         dd:37:39:7f:14:e2:3b:ae:ae:a9:20:98:8f:c3:60:46:40:88:
         a7:7e:c6:87:0c:27:3b:8f:b2:ee:d9:5a:76:c2:44:48:03:20:
         97:f8:e1:fd:f7:0d:c7:bb:54:3f:b1:21:a4:51:ff:a3:a1:33:
         4d:a7:38:f4:b4:85:f9:09:09:55:13:0a:34:6e:b7:ab:69:9b:
         3a:6e:be:f3:1c:f2:36:d1:d5:cf:28:44:76:0e:3c:5c:65:40:
         9e:b4:c5:8e:d3:cf:79:7e:90:6b:d0:30:55:ea:e1:7e:f1:47:
         b1:82:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org