Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3139322e302f31392d3234203d3e20323637343834.roa
File:                     3138372e38352e3139322e302f31392d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          bLcLSWpJ0B9om1oDqJz5+6lh8Ukkcd41U6tBz1TiBzU=
Subject key identifier:   B2:9B:AE:B9:44:DE:3A:0D:AA:48:A5:9E:4F:27:F3:E9:43:77:1E:24
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       0CA51A96707F4D138945276EA37E013810570A8B
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3139322e302f31392d3234203d3e20323637343834.roa
Signing time:             Thu 04 Apr 2024 19:59:31 +0000
ROA not before:           Thu 04 Apr 2024 19:54:31 +0000
ROA not after:            Thu 03 Apr 2025 19:59:31 +0000
asID:                     267484
IP address blocks:        187.85.192.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a5:1a:96:70:7f:4d:13:89:45:27:6e:a3:7e:01:38:10:57:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:31 2024 GMT
            Not After : Apr  3 19:59:31 2025 GMT
        Subject: CN=B29BAEB944DE3A0DAA48A59E4F27F3E943771E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:96:af:3b:fe:d7:0d:d7:b5:23:12:25:ba:
                    c1:cd:e7:87:cf:ef:89:72:75:1b:3d:b0:fc:d7:9a:
                    28:c1:d3:4d:f5:ff:68:09:cd:db:06:21:34:39:69:
                    5c:d0:6b:db:ff:77:eb:06:0f:99:8f:c1:7c:dd:ca:
                    b6:d5:7a:13:2c:02:8d:cb:84:fd:84:e8:3a:aa:a8:
                    f9:86:b3:84:e6:36:f2:b0:a3:18:e7:92:c7:15:50:
                    76:07:f2:28:1f:0c:5a:61:60:23:ef:7f:a9:48:4a:
                    1c:b9:5b:75:5d:67:14:e6:a8:c7:4f:56:cb:a7:94:
                    ab:d3:90:60:cb:43:6b:e4:d8:fb:7e:d9:f2:ba:1d:
                    6e:66:d7:26:8a:08:aa:74:00:5d:95:f9:ea:ce:0d:
                    f0:12:a0:1e:f9:e6:fe:17:94:27:b5:98:0b:f4:9c:
                    44:f6:80:08:60:d9:f4:88:72:3b:99:d3:5f:d2:96:
                    34:63:07:dc:0d:43:d2:38:f0:47:e2:03:b0:30:1e:
                    47:22:5c:0e:e1:ec:d8:7c:13:36:ae:b0:dd:f3:eb:
                    27:0b:a5:75:7e:14:9c:0c:b4:f0:08:9b:0e:e3:42:
                    1a:73:46:eb:22:7d:9a:fd:52:4b:0b:dc:cb:eb:dc:
                    09:87:b0:6f:dc:c5:a9:22:ef:5c:32:6f:0d:02:ac:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9B:AE:B9:44:DE:3A:0D:AA:48:A5:9E:4F:27:F3:E9:43:77:1E:24
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3139322e302f31392d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:ac:74:25:51:28:0c:f6:6a:74:52:54:81:91:93:67:34:c8:
         d7:c8:0b:bd:ea:8f:22:3c:66:81:40:06:63:ff:75:61:5b:e9:
         e3:f8:53:69:73:df:8b:a2:f7:f5:4f:5b:dc:3f:3a:4d:47:ed:
         d4:ec:ad:42:33:75:60:4a:8a:af:fa:5a:0a:f9:e1:49:d2:43:
         ef:af:a9:15:ae:cb:f8:d3:1a:09:99:df:7b:e4:05:8f:02:4e:
         1b:7c:67:90:ca:77:8b:f9:f0:08:fd:0b:3d:5c:97:ba:f6:86:
         3d:be:3c:a2:35:78:76:a1:8a:1a:d3:8a:1a:aa:3a:60:6b:5f:
         58:1e:9d:9c:50:de:dd:01:aa:80:99:dc:ca:dc:d9:d4:4d:88:
         b4:2a:a4:47:72:1d:38:4a:c1:99:f9:e5:da:fe:0b:f0:ae:4d:
         de:d1:5f:dc:f7:54:00:ad:66:1f:5f:b9:5d:90:18:21:5d:c1:
         e6:25:5c:11:e3:61:0c:92:5d:53:a9:2b:7c:22:42:b5:69:fe:
         22:5f:8e:c4:00:51:b1:f1:b8:29:91:7b:cb:64:20:7d:a1:02:
         12:8d:5d:5e:ca:7b:16:d3:75:28:e8:9c:91:88:ae:11:2f:3a:
         e1:e6:b7:1d:7d:58:9f:93:1a:d2:d9:25:ca:70:74:2b:e4:ce:
         e8:63:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org