Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
File:                     3138372e38352e3230302e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          PYF6OEZkGFxP2H8vvzcNALjYyHhNC8QjvcBQJkdsjow=
Subject key identifier:   0D:D9:C0:54:EE:9F:91:C8:91:75:35:97:35:51:54:74:4E:4B:33:F2
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       2E3F011ED6F6FFE1658BE2AF13D40401797383B1
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:31 +0000
ROA not before:           Thu 04 Apr 2024 19:54:31 +0000
ROA not after:            Thu 03 Apr 2025 19:59:31 +0000
asID:                     28349
IP address blocks:        187.85.200.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3f:01:1e:d6:f6:ff:e1:65:8b:e2:af:13:d4:04:01:79:73:83:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:31 2024 GMT
            Not After : Apr  3 19:59:31 2025 GMT
        Subject: CN=0DD9C054EE9F91C891753597355154744E4B33F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:ac:59:dc:81:27:d1:6a:8d:17:5c:55:4c:
                    8f:26:aa:44:71:f3:e6:71:15:48:82:2b:41:18:7e:
                    61:19:fd:cb:29:65:32:de:56:f6:af:eb:da:4e:7b:
                    be:52:d4:ba:02:87:4f:d8:c8:41:90:98:99:3e:33:
                    d2:e2:43:b1:a9:57:f3:64:c5:4b:ee:f1:a8:86:46:
                    ac:e5:36:8a:b0:f9:2f:ab:14:2f:2d:0b:6d:38:fd:
                    ab:09:aa:77:e6:ea:ef:fe:4f:9d:2c:83:20:2c:82:
                    4b:54:16:07:e7:50:f2:6f:5d:37:ea:d8:ab:7e:3d:
                    cd:fb:13:a7:50:53:d2:e5:e2:5c:87:d9:b3:80:58:
                    4d:d3:a0:79:0f:25:0d:af:5e:0b:bd:b1:2e:16:7e:
                    e8:47:bd:81:af:d8:c0:72:fc:b3:37:a3:a5:a5:bb:
                    e6:13:24:68:43:8b:77:fc:22:1c:62:36:cd:02:53:
                    f3:30:70:f8:0a:ed:7a:c1:b9:ce:b9:42:0a:5f:73:
                    55:77:c0:f5:0b:ee:a5:5b:c6:4c:13:a8:28:d7:55:
                    f3:21:e6:ae:52:2a:7b:27:f3:c7:a5:49:3f:30:7b:
                    8c:d1:08:93:c8:ca:60:be:37:4d:09:2a:d0:18:db:
                    db:41:25:aa:25:62:de:53:47:89:d6:df:45:5b:48:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:C0:54:EE:9F:91:C8:91:75:35:97:35:51:54:74:4E:4B:33:F2
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:a0:3a:bb:ae:6b:26:cd:a9:20:cd:fd:83:f8:5e:21:3e:0e:
         8c:88:d8:2b:71:ca:e8:14:6a:64:80:5f:c1:38:26:a2:ea:61:
         0c:a7:31:df:7b:14:a7:9d:31:84:0a:57:d7:19:7c:07:10:37:
         6e:17:31:ce:11:67:97:9a:d4:16:43:3e:07:29:ef:3e:ce:f2:
         a9:60:f9:d5:02:ce:0e:c5:4f:73:03:7f:29:21:a8:39:05:e7:
         d7:f1:86:92:fe:7a:81:91:6c:2a:bd:16:77:fe:ea:07:b8:f5:
         7c:41:6f:50:30:05:24:74:a9:63:ac:05:a6:8f:20:fb:a8:6e:
         35:40:ea:74:0c:b3:8a:6e:be:4a:99:c5:3d:d8:9e:2e:46:de:
         1a:c2:3e:d7:57:2f:e0:b1:4c:8e:26:3b:1a:30:a7:ca:19:af:
         16:4e:3f:20:72:fe:53:60:87:a9:96:39:2c:9d:c5:00:ab:2a:
         1e:6f:c8:8f:e0:1c:6f:a4:d8:80:f8:e9:41:de:1d:ef:c4:3c:
         93:e6:cc:47:0b:31:3a:0e:3c:2f:98:62:35:34:b9:c9:c9:9b:
         18:74:00:a7:1e:b4:ad:7d:4d:47:92:fb:ce:86:14:bc:9c:66:
         95:33:67:3c:05:0f:f2:9a:26:01:a2:0a:1b:77:31:b5:8b:95:
         0d:67:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org