Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230382e302f32312d3234203d3e203238333439.roa
File:                     3138372e38352e3230382e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          XRp95YnfElxHtLMkoC4bIXXuBoBiJOVEy36xLgLy38Y=
Subject key identifier:   2F:8B:41:4F:13:27:6F:4A:3A:91:F8:65:E8:5F:C7:69:73:5C:BB:F8
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       72609C9DADC5A24BF6F07E2B89020455A30A96BE
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230382e302f32312d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:30 +0000
ROA not before:           Thu 04 Apr 2024 19:54:30 +0000
ROA not after:            Thu 03 Apr 2025 19:59:30 +0000
asID:                     28349
IP address blocks:        187.85.208.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:60:9c:9d:ad:c5:a2:4b:f6:f0:7e:2b:89:02:04:55:a3:0a:96:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:30 2024 GMT
            Not After : Apr  3 19:59:30 2025 GMT
        Subject: CN=2F8B414F13276F4A3A91F865E85FC769735CBBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:cf:a8:4a:0c:90:46:a8:cc:94:2b:1f:52:
                    15:a9:66:01:d5:0b:13:53:ac:54:bc:84:f0:98:1b:
                    88:50:48:06:12:26:de:13:ca:f2:d2:97:25:b5:ad:
                    27:9e:8b:7b:88:fb:45:2e:38:b7:5e:f1:98:80:fa:
                    af:cb:0d:b2:df:75:b4:d4:61:2d:f3:9d:d5:05:27:
                    8d:fc:f6:77:ed:08:4e:f8:4d:a3:fd:9a:14:7f:9f:
                    7d:72:2f:2e:7a:ef:5b:f0:fe:7e:36:01:b4:b6:d4:
                    96:b8:06:92:cc:22:d1:22:9b:4a:d6:00:dd:63:61:
                    b9:5a:d7:77:72:d3:30:69:6b:0c:4f:9c:18:3c:ee:
                    a9:78:0b:50:b4:bc:ac:3a:55:93:03:2e:93:4d:bf:
                    5c:ce:dd:a3:ab:1c:a9:ac:28:5e:31:7f:7f:7b:31:
                    57:2f:ef:b2:2e:86:b1:ec:75:70:1e:e3:be:41:df:
                    ad:d7:d9:69:31:fd:60:c2:30:32:d5:6d:93:4e:f8:
                    05:2a:b2:b3:c4:75:4c:47:9e:bd:16:91:dc:1d:89:
                    6c:80:da:a2:e7:a6:70:bb:9a:2f:b7:ff:5b:fc:e0:
                    b2:2f:4b:f2:1a:ab:47:0c:53:a4:37:80:af:d3:a5:
                    80:96:66:8b:35:23:7a:96:4c:2e:e3:c9:84:3d:10:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8B:41:4F:13:27:6F:4A:3A:91:F8:65:E8:5F:C7:69:73:5C:BB:F8
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230382e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:94:28:c7:aa:18:cb:1d:cd:eb:5f:44:0e:0a:c8:d0:3e:
         3e:93:ef:98:6e:99:65:e2:0d:a0:97:43:e3:9a:9c:54:8f:54:
         d0:fd:cc:fb:5f:30:9a:d6:cf:08:36:14:ba:b9:87:8f:0d:03:
         98:e2:9c:60:ed:cf:c7:e1:2b:c1:8f:aa:45:d8:b7:4d:4e:5d:
         83:68:4b:44:80:8e:fe:7c:76:e2:6f:fa:50:63:45:0e:92:62:
         9d:2c:5b:4b:90:50:57:ce:52:cb:a1:e2:5d:4e:21:54:f4:5b:
         7f:f2:93:6e:70:4f:fd:36:a8:20:3e:59:2c:2b:d6:6e:07:55:
         f5:e5:30:d9:03:fd:ad:d3:e6:80:58:14:ee:11:ae:aa:d5:ae:
         c6:01:f5:fb:f5:03:25:aa:4f:fc:d7:1b:60:f6:32:64:f9:01:
         b2:b1:39:a1:13:67:8e:5e:5f:c8:37:1f:07:12:5b:e9:98:6f:
         33:fd:8c:3b:4d:0c:ad:ce:0d:88:58:d7:8f:3a:31:15:7f:b6:
         bb:bf:15:ba:4b:c0:52:f6:86:57:e6:78:9b:64:45:31:73:37:
         b1:93:b6:8a:89:60:c1:7a:48:18:35:d0:4e:e6:5c:10:37:03:
         3c:2b:95:cd:84:48:9c:33:16:c4:b4:8c:5e:e9:fe:d1:08:61:
         ff:9b:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org