Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
File:                     3138372e38352e3232302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          2aBbVB5xf245KT+RBA9jK9c5VhCQiHLSmS9JkFPCpY8=
Subject key identifier:   DF:B2:30:BD:A9:88:6A:AF:C5:4A:36:8E:60:74:F2:94:52:C9:5F:AA
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       1357E5D88EE877AAD8952BEE4E980DAA75C35078
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:32 +0000
ROA not before:           Thu 04 Apr 2024 19:54:32 +0000
ROA not after:            Thu 03 Apr 2025 19:59:32 +0000
asID:                     28349
IP address blocks:        187.85.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:57:e5:d8:8e:e8:77:aa:d8:95:2b:ee:4e:98:0d:aa:75:c3:50:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:32 2024 GMT
            Not After : Apr  3 19:59:32 2025 GMT
        Subject: CN=DFB230BDA9886AAFC54A368E6074F29452C95FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:76:e8:c0:04:cf:80:1f:c0:9b:fd:73:a9:
                    88:d9:4a:c5:6f:44:d5:89:ac:99:65:78:3f:c9:6c:
                    44:5d:cc:f2:30:b5:65:c5:fa:cb:4c:43:b1:6b:a9:
                    3a:ba:66:16:42:09:ca:46:31:bf:ef:39:83:12:67:
                    fc:7f:25:2c:0f:0f:b9:c8:2d:86:16:d7:7a:33:4d:
                    53:c8:80:ec:e2:46:67:36:13:73:c3:0c:34:68:ac:
                    b9:00:b7:04:7c:cc:46:c0:1b:38:65:ed:0e:38:88:
                    37:83:d8:43:b2:b9:e6:04:2d:ed:1b:53:f2:60:47:
                    00:cc:4b:d6:c9:8c:ba:bf:44:1a:a4:b7:6a:2c:00:
                    d9:be:39:b7:dc:6c:03:2a:5b:be:49:b7:7e:83:96:
                    be:8c:5b:24:05:0b:53:86:4e:40:67:45:01:1c:93:
                    4d:28:12:d5:64:4a:04:bc:84:1e:64:b3:85:4b:31:
                    9a:d7:6d:70:7a:91:e8:d9:57:2b:a3:88:bc:34:1e:
                    08:b8:03:8f:b5:51:40:98:ed:66:14:76:4f:7b:a4:
                    f6:28:26:5e:00:71:f7:76:ad:aa:bf:c9:e8:49:b4:
                    05:b5:2a:d6:f3:06:c0:90:3f:d8:ba:3f:ba:df:e0:
                    38:4d:c6:e7:b9:d4:4f:e9:6f:4d:e9:fd:a0:8c:13:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B2:30:BD:A9:88:6A:AF:C5:4A:36:8E:60:74:F2:94:52:C9:5F:AA
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:76:45:6d:2b:08:04:10:40:97:82:81:44:13:a8:55:07:
         e2:ab:35:16:6f:4f:89:33:61:21:d5:1a:3f:8a:f0:e8:52:5a:
         76:1a:23:5b:ab:cf:cc:77:05:b2:5e:08:5f:94:8b:a3:49:1f:
         56:95:2e:76:6d:1d:1e:9a:0d:52:06:18:82:e3:b9:72:d9:57:
         a7:2c:ee:4b:5f:29:29:05:ca:cb:51:26:62:d8:ff:e6:d7:f0:
         f9:42:90:dd:55:7d:29:d8:19:e7:e6:30:02:2a:01:ec:a1:62:
         2e:f5:3a:c7:83:ce:e1:95:68:28:98:db:9c:0b:44:bb:cc:11:
         50:60:2a:8f:9c:3d:58:2f:7c:e4:c7:6e:7a:ad:c8:22:1e:9b:
         ea:7e:6a:18:71:00:20:29:b4:83:c7:d3:01:f7:dc:2e:97:4c:
         f2:7a:5e:0d:d4:bd:1d:5d:0c:56:4f:bf:78:12:69:e1:f9:5a:
         21:1a:50:3e:01:85:6c:e6:3f:92:64:91:3c:be:0c:b6:3f:8b:
         05:52:76:fd:d5:47:df:d1:20:c4:f6:9b:b9:7d:c3:4e:5e:8c:
         cc:c6:9a:f0:f1:ed:7a:7f:09:b4:6a:69:15:a1:c1:19:7e:7d:
         18:5b:59:c3:2a:4d:c4:67:56:3f:82:f4:e8:12:58:cd:6c:de:
         13:c0:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org