Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa
File:                     3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa (raw, json)
Hash identifier:          on0Y8FicpIUDCtYMbcjgEnthvxGAAkxB1nGGqjn7kkE=
Subject key identifier:   B0:A9:DA:28:5E:82:40:87:80:1D:36:A8:7D:DB:0A:09:4B:DD:0E:AB
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       3CA04A43E6EB6035735D4924CA8DAAC77C18DD8F
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa
Signing time:             Thu 04 Apr 2024 19:59:34 +0000
ROA not before:           Thu 04 Apr 2024 19:54:34 +0000
ROA not after:            Thu 03 Apr 2025 19:59:34 +0000
asID:                     53143
IP address blocks:        186.194.224.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:4a:43:e6:eb:60:35:73:5d:49:24:ca:8d:aa:c7:7c:18:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:34 2024 GMT
            Not After : Apr  3 19:59:34 2025 GMT
        Subject: CN=B0A9DA285E824087801D36A87DDB0A094BDD0EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:c9:3f:d7:05:a5:e0:22:ce:ce:06:dd:a7:
                    e2:fa:1b:ed:0d:62:47:0d:84:2b:c3:4e:36:dc:b8:
                    09:7b:ba:ff:5a:62:eb:03:84:a9:1d:ff:af:55:08:
                    d0:66:f7:03:f8:22:85:be:04:ba:43:38:3e:4d:4a:
                    79:ca:41:8e:25:a4:cc:83:c4:ca:01:83:ed:68:52:
                    f6:cb:17:f4:d7:27:6f:2f:3f:32:e4:7d:69:1f:aa:
                    7b:d1:77:78:e2:54:dd:36:8f:e8:22:e0:0f:59:07:
                    cb:a4:c0:18:3d:2b:65:ca:22:92:90:04:6a:6b:6a:
                    68:87:99:c2:6b:37:e8:10:48:5c:ea:64:76:10:3f:
                    59:98:54:26:39:33:31:11:66:07:0a:93:37:4e:3d:
                    a7:0f:18:9d:eb:29:db:af:85:85:90:35:f6:07:06:
                    28:c9:65:02:d4:2d:fa:ec:7b:02:f3:7c:73:db:f9:
                    f6:4c:94:de:ad:70:81:35:fc:40:b2:56:36:dd:56:
                    49:6f:f6:77:77:9f:0f:e8:4c:7d:3b:a4:ef:37:ae:
                    be:8b:4a:8f:1e:14:38:79:7c:d9:f0:b1:4b:89:1c:
                    d6:02:47:19:2e:9d:d2:59:c4:ef:9d:9c:ae:a4:9c:
                    db:09:55:49:17:ca:6a:00:51:60:69:ae:7e:93:ab:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:DA:28:5E:82:40:87:80:1D:36:A8:7D:DB:0A:09:4B:DD:0E:AB
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:26:fa:5b:98:b8:19:7c:7a:f7:8a:64:13:88:58:db:9c:
         e7:37:3a:48:aa:e7:cd:28:2d:d9:9f:c5:4d:ae:d4:ce:10:9e:
         35:3a:6e:45:a4:50:d7:a5:bc:69:3e:cc:24:2c:fe:e7:63:63:
         d3:fc:ea:af:9f:9b:48:f2:f0:4b:71:99:6c:cb:0c:33:ef:66:
         80:7b:68:45:38:1f:11:5c:fd:ac:3e:3e:67:bc:71:82:cc:23:
         cd:bc:bf:97:8d:05:b2:07:38:e9:21:4a:32:a0:c2:7a:1b:28:
         4d:24:b7:d7:8f:b6:64:b8:b9:b1:25:e5:96:32:6b:51:b5:43:
         ea:46:b4:fa:ea:e0:3d:11:7c:ac:86:d0:79:23:32:73:c5:7a:
         11:a9:46:00:6c:85:40:92:5d:f1:24:be:9d:94:53:c9:8e:52:
         07:3e:4e:28:c4:6a:8b:1a:c4:ed:83:6a:b2:63:d5:24:08:54:
         1c:fc:c9:33:62:58:e6:8c:fa:97:a7:a9:c0:88:f4:5e:20:2c:
         7a:c5:69:c7:32:00:e9:47:98:50:87:85:d1:1c:75:73:3e:bd:
         a5:35:5a:1f:49:77:3a:9d:f5:b5:6a:24:f3:a8:fd:ee:cc:f4:
         2f:07:02:e5:1b:ad:82:08:81:4e:46:ff:4f:91:d4:04:0f:bf:
         3a:24:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org