Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
File:                     3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          PGVe0VD9U+OWEgGOHA4s9NzMNV2sawE4ZUZ2fVk+XRw=
Subject key identifier:   6E:DB:99:82:44:A2:C9:E6:BD:42:56:04:63:54:4E:3A:A8:F3:AC:4F
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       082F24ADD737AFCD6F44A4898941AB1C77CDF83F
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
Signing time:             Thu 04 Apr 2024 19:59:33 +0000
ROA not before:           Thu 04 Apr 2024 19:54:33 +0000
ROA not after:            Thu 03 Apr 2025 19:59:33 +0000
asID:                     267452
IP address blocks:        181.191.76.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2f:24:ad:d7:37:af:cd:6f:44:a4:89:89:41:ab:1c:77:cd:f8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:33 2024 GMT
            Not After : Apr  3 19:59:33 2025 GMT
        Subject: CN=6EDB998244A2C9E6BD42560463544E3AA8F3AC4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:23:eb:1b:83:a5:2c:41:fb:b1:85:d8:4c:
                    27:92:26:c4:ef:59:f8:3b:3a:ad:c2:a3:42:41:c5:
                    40:21:bb:41:0c:67:e3:a9:d6:e6:ac:0e:e1:85:9f:
                    42:22:bb:58:ba:d5:4d:ff:2d:dc:41:44:8f:1e:0f:
                    c6:89:11:88:81:ae:c8:8d:71:d6:27:d4:bd:10:a3:
                    4b:12:82:b7:93:64:8d:71:ea:da:8b:aa:c1:66:46:
                    2b:83:b8:fe:c2:98:63:79:c0:bf:ef:45:3c:d9:75:
                    f3:63:d4:4d:db:3a:c9:37:32:15:74:e0:be:3c:ef:
                    76:01:a4:ee:fb:d9:cc:c7:ef:fd:4f:c5:90:dc:2e:
                    f3:37:d6:16:23:18:82:45:0d:e7:10:4e:98:f6:2a:
                    03:07:81:d2:25:9e:75:55:5a:ec:c9:fe:76:81:2b:
                    59:7d:69:45:4c:5f:a1:35:c6:d3:c0:0d:84:35:5e:
                    3e:5c:77:bb:09:51:13:b5:22:85:43:9a:05:1c:26:
                    60:c6:ed:00:6a:e4:c5:2e:e4:b1:2f:32:1f:a0:03:
                    0d:11:cf:c4:35:85:87:8c:2f:2d:ae:c1:08:6c:f1:
                    63:46:6f:70:7e:47:6b:db:61:ef:5b:59:14:aa:4d:
                    1b:7c:01:ba:06:e1:fb:2d:be:2f:87:12:7e:cc:ac:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DB:99:82:44:A2:C9:E6:BD:42:56:04:63:54:4E:3A:A8:F3:AC:4F
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:72:2e:d4:36:b8:57:16:69:52:7d:f4:6c:bf:7e:46:f3:05:
         00:ab:e7:8d:f9:99:34:f3:f5:49:6a:96:13:51:04:ac:81:a4:
         4b:0d:c4:bf:4f:c7:d5:75:13:a9:ea:c7:72:50:87:13:b6:13:
         bb:77:ec:e1:58:14:74:5f:f3:b2:2f:cb:eb:17:49:26:49:fb:
         b5:e6:82:58:62:8d:2b:16:2f:56:ed:9d:d0:c1:48:45:93:17:
         5e:66:29:15:38:69:7a:6a:b8:f4:ed:97:34:7f:c8:e0:d7:fd:
         21:1f:1a:62:1f:ed:df:aa:72:86:f7:e3:b5:7b:45:9a:40:fc:
         dd:3d:2e:4a:42:61:5b:aa:76:3f:bc:39:53:a2:d3:8d:e1:7a:
         d7:20:77:26:14:3e:6d:3a:cb:d6:74:b8:b6:68:7b:9c:6c:23:
         f5:65:10:7b:9f:a9:3e:43:ed:cb:7d:bb:44:9b:05:ac:e3:aa:
         a2:b9:83:64:b8:1d:0b:19:c7:c1:7f:1f:dc:ed:bb:85:e9:7e:
         64:3a:28:b6:24:17:36:70:fb:17:8d:89:f8:5a:5a:9b:53:05:
         87:ae:ec:eb:36:0e:ef:be:5f:e7:1d:c4:4c:8a:15:45:73:cf:
         e5:64:f3:4c:6e:48:ec:5f:05:33:39:7f:56:73:03:51:be:bd:
         0b:ca:bf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org