Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137392e3130372e302e302f32312d3234203d3e203533313433.roa
File:                     3137392e3130372e302e302f32312d3234203d3e203533313433.roa (raw, json)
Hash identifier:          I0f13APF/yrRnKvw17ZRRn9biV7qdv7XYW+GgBFTo5A=
Subject key identifier:   42:16:C4:5D:6D:CC:63:93:E0:A5:FA:E3:A7:4B:0D:D6:60:23:9D:67
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       1065C2A8D429E1095D66A6B0D79CFA3B423CE93B
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137392e3130372e302e302f32312d3234203d3e203533313433.roa
Signing time:             Thu 04 Apr 2024 19:59:29 +0000
ROA not before:           Thu 04 Apr 2024 19:54:29 +0000
ROA not after:            Thu 03 Apr 2025 19:59:29 +0000
asID:                     53143
IP address blocks:        179.107.0.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:65:c2:a8:d4:29:e1:09:5d:66:a6:b0:d7:9c:fa:3b:42:3c:e9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:29 2024 GMT
            Not After : Apr  3 19:59:29 2025 GMT
        Subject: CN=4216C45D6DCC6393E0A5FAE3A74B0DD660239D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:07:1c:49:46:e4:58:00:87:bf:e1:ac:67:
                    c7:2b:48:88:31:6f:ea:32:c2:60:45:c9:e7:ac:e0:
                    d1:82:e6:2b:2a:60:92:e8:10:4f:02:1a:95:09:07:
                    57:fc:91:9c:ed:f8:e5:6b:6d:8c:93:c0:02:d3:b8:
                    aa:18:3e:dd:f7:d4:16:1f:5a:21:71:b3:c8:9a:83:
                    ca:b6:fd:09:da:d1:f6:e7:9e:b3:f7:48:f4:46:ea:
                    57:68:9f:80:ae:70:a7:f5:ac:b8:da:ef:4d:d8:17:
                    fe:51:33:ee:06:12:ee:a6:e2:3a:3a:17:8d:de:af:
                    8a:ea:6c:fb:78:ed:b9:6c:40:d7:90:70:57:00:0e:
                    42:9e:66:89:a4:7f:f0:92:57:3f:64:84:02:9e:e6:
                    89:d0:5c:c9:b1:78:86:12:72:7a:c3:51:9f:dd:99:
                    8b:ee:da:59:7f:70:28:b0:82:03:c8:43:10:f2:e0:
                    85:81:f6:d6:38:2b:2d:06:6e:e4:e3:bb:cf:b5:26:
                    ec:21:cd:60:99:f7:0b:cc:db:31:a4:ee:e6:4d:7f:
                    dd:a1:fa:3e:6d:44:99:e6:78:77:ad:45:73:21:93:
                    d5:d1:44:61:64:d4:22:a5:b5:c8:f8:5b:01:08:1f:
                    a4:29:ab:b2:c9:ff:1f:ef:80:64:18:21:07:75:10:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:16:C4:5D:6D:CC:63:93:E0:A5:FA:E3:A7:4B:0D:D6:60:23:9D:67
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137392e3130372e302e302f32312d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:93:82:79:c5:e5:c3:fa:bf:b1:68:a1:92:97:15:72:11:
         09:c3:42:35:65:33:b8:7e:16:8d:6e:b6:3b:3b:f5:40:49:c4:
         4a:c3:cb:68:f3:bb:fe:f6:0b:8a:35:41:43:06:af:5d:a5:39:
         36:c6:22:fb:71:6e:c1:64:d3:c0:c3:73:2b:41:7e:ed:75:e1:
         25:ef:09:ec:2b:0f:f2:df:c6:ee:4b:e7:ee:41:a2:dc:93:13:
         b3:52:c0:77:6f:ef:c8:5e:08:b5:ed:6e:05:67:97:48:3a:8d:
         df:1c:16:61:97:c2:34:fd:ed:30:7b:e2:f9:43:21:48:91:3f:
         6c:f6:7e:28:ee:ba:e1:50:aa:66:74:94:96:48:e7:c9:84:06:
         e0:9c:1f:a8:9e:5e:35:fc:57:7c:cb:df:68:02:f6:1c:67:94:
         0d:e0:90:8a:c3:7c:72:ae:0d:d2:5d:81:4a:73:32:36:3c:59:
         90:09:8d:f0:53:50:3b:5a:11:2d:95:40:df:8e:f3:fc:37:de:
         17:33:e2:5c:d5:2f:90:84:7e:cf:f4:d7:36:93:6c:87:21:80:
         87:2f:89:89:f4:67:24:8c:b3:5f:f6:8e:ec:26:ef:21:3b:30:
         ad:f8:f8:a8:24:f9:dc:b7:53:37:69:7a:18:96:cd:64:f7:05:
         9c:f1:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org