Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa
File:                     3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          MQwF2y7Bt9b6WhJCmJcS3vzFssAU3u79wXUzDF7/msg=
Subject key identifier:   8F:A8:80:69:CF:EB:83:84:39:79:A3:3A:10:16:03:49:4A:1E:64:4F
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       5A29C55CF64C6790975BDEC45F71A6A022F88728
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa
Signing time:             Thu 04 Apr 2024 19:59:32 +0000
ROA not before:           Thu 04 Apr 2024 19:54:32 +0000
ROA not after:            Thu 03 Apr 2025 19:59:32 +0000
asID:                     262420
IP address blocks:        186.219.96.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:c5:5c:f6:4c:67:90:97:5b:de:c4:5f:71:a6:a0:22:f8:87:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:32 2024 GMT
            Not After : Apr  3 19:59:32 2025 GMT
        Subject: CN=8FA88069CFEB83843979A33A101603494A1E644F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:85:e8:c6:45:29:4b:c0:09:2a:9d:67:6b:
                    dc:dd:2a:15:57:c7:20:66:73:ad:0c:8d:e3:f7:83:
                    87:79:6c:b9:4b:6c:4b:58:be:ed:36:a7:c8:50:e2:
                    f0:d9:e0:3b:92:d0:9c:cc:80:95:9d:e4:9c:7d:38:
                    04:bb:b0:21:23:d2:ac:04:31:fc:9d:00:b9:23:5e:
                    ed:8b:d8:77:e7:6f:4e:d0:13:f1:4c:f7:a5:6d:0b:
                    0f:f5:e2:d1:a3:a3:be:66:82:f5:70:07:d8:c7:6c:
                    c5:84:7e:d1:eb:fc:4d:a8:6f:9a:0c:e2:07:ae:cd:
                    be:77:a0:85:e2:36:d1:39:dd:62:24:7c:07:f2:aa:
                    5d:8d:ae:72:81:47:e1:89:78:97:4a:07:a5:50:c5:
                    55:39:92:76:17:24:6c:cf:11:c1:0b:18:d5:5b:23:
                    c4:ca:10:cc:4a:10:35:11:6d:92:a8:60:70:67:c5:
                    8b:00:8e:b6:ec:5e:42:79:c9:cc:73:35:be:0f:29:
                    33:3b:73:d2:ef:d0:de:6f:07:c9:44:7a:35:73:4d:
                    b4:2d:59:73:c5:43:2a:9c:73:c7:0c:60:46:7d:63:
                    e9:b1:7d:8f:b5:d5:69:4e:51:54:25:db:a7:33:1f:
                    32:2d:4a:e0:c6:6a:3c:5d:cc:7a:6f:2a:0c:04:03:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A8:80:69:CF:EB:83:84:39:79:A3:3A:10:16:03:49:4A:1E:64:4F
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:86:95:9f:d4:58:a3:dc:d8:16:fc:06:3e:cb:3e:49:9a:
         e9:1b:b7:b7:ba:e1:fb:c4:e8:8e:a5:4d:ab:6e:6b:4b:b0:ac:
         93:b2:2a:b0:2f:12:ee:6a:06:5c:bd:94:0c:93:1e:be:af:50:
         b8:f0:aa:92:f5:3f:19:7e:c8:53:bc:2b:ed:04:99:df:f5:40:
         e1:4e:89:d1:d2:8c:32:a2:38:3a:d4:7b:59:16:ad:b4:77:9e:
         44:13:7d:9a:b9:f7:c8:a5:33:59:83:12:cd:32:61:3b:eb:b0:
         b5:db:88:84:e3:2a:7c:ed:f0:7c:f9:fe:c6:f3:62:3d:b3:fd:
         05:f8:a8:86:60:96:9e:b2:c6:ae:97:0e:61:2f:eb:5a:8e:4a:
         d1:3e:a9:99:3f:34:b5:ea:94:43:74:90:cf:f7:4c:d7:63:fc:
         e8:f0:99:4b:96:5a:10:4d:cf:27:7d:48:0e:9b:30:95:4a:2d:
         4b:d0:15:6f:70:60:15:47:77:7c:6f:b4:a1:1c:43:f0:92:b0:
         e7:af:87:5b:cf:e4:31:52:b5:9a:0e:88:40:d5:af:77:97:e9:
         e2:b2:5d:4b:cd:c1:0c:a4:61:00:34:9f:2b:da:64:d0:7e:24:
         42:df:e7:62:a4:e8:1d:e9:68:89:97:9e:38:d7:b1:ec:6a:cc:
         77:f2:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 13:11:10 2024 by rpki-client on console-ams.rpki-client.org