Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
File:                     3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          Apijay9fib6OUdo0unhdUohw1nilvM39Y+6NHmD6lZw=
Subject key identifier:   DB:BA:C7:1A:E8:B9:62:D8:B6:80:81:D2:C9:FD:50:23:8B:AD:F7:8E
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       09BB0A947AC5CBD71B2A45BD9813A5442744603E
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
Signing time:             Thu 04 Apr 2024 19:59:29 +0000
ROA not before:           Thu 04 Apr 2024 19:54:29 +0000
ROA not after:            Thu 03 Apr 2025 19:59:29 +0000
asID:                     267452
IP address blocks:        177.185.176.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bb:0a:94:7a:c5:cb:d7:1b:2a:45:bd:98:13:a5:44:27:44:60:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:29 2024 GMT
            Not After : Apr  3 19:59:29 2025 GMT
        Subject: CN=DBBAC71AE8B962D8B68081D2C9FD50238BADF78E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:5a:1e:ee:36:51:31:38:7e:8e:1b:65:d7:
                    d9:33:f3:10:2d:f3:a4:9c:6f:03:ee:a8:9c:fe:19:
                    45:e9:c7:2f:29:70:6e:f9:6a:fe:0b:03:a2:90:c8:
                    39:09:a6:5b:1b:39:87:c9:e2:0a:eb:98:c0:9f:b3:
                    28:82:02:30:85:ec:e3:bf:7d:73:d7:67:87:cd:96:
                    bb:c0:06:d1:32:8a:49:c4:b9:b4:61:a1:16:2a:67:
                    2c:b7:0d:b5:fa:ab:2a:d0:fa:35:41:f2:7c:5d:c6:
                    b4:ef:a2:73:9c:86:c8:1c:63:26:47:e6:ab:60:df:
                    82:c0:b1:c2:d5:15:c6:30:34:9d:81:33:d5:09:fd:
                    67:78:2a:f9:b0:d1:a2:8b:8a:84:2a:f7:fd:e4:15:
                    e6:4c:dd:3a:1f:1d:75:a0:61:a7:ca:6a:c1:9e:9e:
                    8e:f9:dc:a6:7c:d3:fc:29:b7:2e:bb:f0:78:04:bf:
                    c2:f6:0d:94:6b:49:7c:94:9b:5b:be:c9:a8:ef:58:
                    18:61:e4:33:71:5c:3a:45:e3:a0:99:29:37:22:f5:
                    ff:fe:d9:81:3b:f4:78:af:34:53:c2:d5:d7:ec:8b:
                    15:79:98:93:88:0e:59:b1:06:99:1d:0d:a5:1a:09:
                    81:ac:0f:4d:9d:b0:83:09:aa:18:44:e7:08:15:b7:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BA:C7:1A:E8:B9:62:D8:B6:80:81:D2:C9:FD:50:23:8B:AD:F7:8E
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:89:d9:d8:6e:a9:1d:f0:19:c9:3d:12:cc:2e:41:da:96:
         f6:ae:9e:d1:58:e9:31:d4:06:78:5d:82:4a:82:3a:74:2a:56:
         fb:2e:35:09:d5:dd:8e:d1:99:df:a6:b8:07:74:4e:75:9a:62:
         7e:a4:35:1b:80:c5:b8:69:d0:18:49:97:b2:d1:b0:0d:94:68:
         1a:90:c9:21:cd:18:39:0e:9a:e8:68:d9:fe:b9:be:fc:08:57:
         b7:03:fb:f1:91:83:7a:7b:fc:fd:47:46:4b:c4:09:e7:d5:16:
         f5:25:ed:eb:10:13:f2:90:ec:d5:ef:1e:88:15:e9:cf:48:be:
         e7:d9:24:5f:6b:36:d3:b1:09:bf:ca:6c:57:69:97:27:50:01:
         74:48:a8:11:21:4c:5f:75:d0:ef:65:42:8c:f2:27:b7:fb:57:
         bb:6f:9f:d9:22:e0:05:22:b6:24:8d:d7:4c:22:31:30:9e:df:
         13:3c:06:9e:e7:a7:c4:bb:34:7f:f6:69:13:03:5b:8d:80:68:
         32:28:5f:f4:d8:2c:16:0d:86:73:2a:1e:74:24:ea:05:f1:d9:
         d4:ac:61:89:a1:e3:6d:c5:4c:9b:77:95:83:4b:c7:57:3e:60:
         c5:3f:4c:db:64:32:97:05:1b:fd:35:8e:c8:25:d7:a8:c1:21:
         b4:99:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 13:11:10 2024 by rpki-client on console-ams.rpki-client.org