Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
File:                     3137372e3135342e37322e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          NMn6En19lJN2qXSkxvRtvU7LEKf8tNAP0nNfHyh3E6Y=
Subject key identifier:   C1:67:FD:77:2D:10:67:D3:48:8A:29:76:F9:40:3A:74:AE:28:8B:C5
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       3429EBD8B957B91132AEF07B343048A62C855C8E
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:30 +0000
ROA not before:           Thu 04 Apr 2024 19:54:30 +0000
ROA not after:            Thu 03 Apr 2025 19:59:30 +0000
asID:                     28349
IP address blocks:        177.154.72.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:29:eb:d8:b9:57:b9:11:32:ae:f0:7b:34:30:48:a6:2c:85:5c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:30 2024 GMT
            Not After : Apr  3 19:59:30 2025 GMT
        Subject: CN=C167FD772D1067D3488A2976F9403A74AE288BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:39:da:bc:c9:97:7e:64:ce:40:7b:f0:e5:
                    02:2a:a2:cf:36:46:9a:89:d3:17:7e:b0:6b:a6:b1:
                    6b:35:b5:30:08:02:bd:4a:7f:42:37:22:b1:b7:f6:
                    77:7f:72:c9:c9:36:73:09:8f:99:db:8f:e8:ec:54:
                    7c:ec:2f:90:f3:c2:9d:1a:e4:55:64:35:8b:b3:9d:
                    2a:2b:61:67:fb:f9:39:01:8e:b6:8f:0f:44:9b:70:
                    e2:c6:ba:e0:45:c8:7a:38:e2:d6:fe:6c:ab:d6:7f:
                    60:5d:55:51:e1:ea:75:88:d4:01:8a:05:bf:4b:5d:
                    ba:f9:cc:9b:2e:92:3a:e2:bc:50:98:73:95:07:d9:
                    5a:67:af:16:53:b2:5e:ce:e9:f2:1c:b8:55:b1:d5:
                    76:e6:a8:fc:dd:1e:0a:e1:c7:08:11:a3:54:df:24:
                    7a:12:e7:e3:0d:4e:2e:ea:0f:4a:b4:a2:c2:13:53:
                    93:bc:a0:cd:ac:5b:1f:0c:9c:e3:f8:94:78:79:b7:
                    d4:e1:de:39:a9:b7:45:ff:16:52:7c:33:14:f8:50:
                    b7:f8:89:df:57:d1:15:53:1e:56:b7:aa:66:d7:42:
                    d7:1e:40:1c:a7:e9:d2:e9:1c:a1:ab:71:bc:a4:26:
                    79:37:55:71:9b:84:8d:8e:6b:84:5d:f5:07:33:cb:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:FD:77:2D:10:67:D3:48:8A:29:76:F9:40:3A:74:AE:28:8B:C5
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:b6:25:38:a7:86:1b:e7:84:cf:81:3b:d9:3e:2d:7e:5f:f8:
         e5:f9:6d:35:47:17:b3:68:df:45:c0:f3:ff:20:40:f5:b8:7b:
         7e:c3:aa:a9:b0:10:31:5a:3c:05:9e:a0:1c:2e:35:ec:ca:94:
         89:44:8f:85:81:28:fe:5d:ce:cd:bb:9b:a6:b3:08:b8:8f:8e:
         76:9a:7f:85:3d:be:80:7b:08:27:38:82:38:1c:b0:d0:f5:03:
         39:17:50:4c:b9:83:b3:93:73:01:8c:72:ee:8a:b3:80:9b:0d:
         9d:8c:a9:c6:d6:b5:5e:51:de:5b:b6:d6:df:46:d3:a5:f6:03:
         82:14:45:65:0c:b9:ef:99:21:82:f1:fb:fc:f7:b2:c6:d3:13:
         1b:ff:16:b9:76:81:a3:9e:0e:51:06:eb:cc:82:8d:65:a1:c4:
         fa:ab:13:bc:2a:d5:a6:ee:49:ea:8e:2e:a2:0f:09:c7:7d:2a:
         bf:c0:19:c5:c0:70:47:05:2e:b0:69:74:ce:b9:d9:c7:d4:ec:
         44:74:9b:03:ae:07:7e:7c:4b:ed:9c:0b:86:55:43:9e:f3:09:
         bd:f1:c4:4b:92:49:55:c4:22:9b:bb:23:a6:40:1f:19:cf:33:
         44:60:02:12:ff:d2:11:92:49:ef:c5:56:c4:4c:2b:b3:3d:e5:
         d8:ae:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org