Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
File:                     3138372e38362e3131322e302f32302d3234203d3e203533303637.roa (raw, json)
Hash identifier:          bDfHi1YHVwIfFOk1O/K5mj+i7FtZss/W+rIKPtMN9zE=
Subject key identifier:   97:3F:AC:27:D2:12:B4:1A:AF:78:50:9E:CB:80:BE:29:54:38:51:05
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       79F45E6FB08500F2ED21128926B82F6788AB6A89
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     53067
IP address blocks:        187.86.112.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f4:5e:6f:b0:85:00:f2:ed:21:12:89:26:b8:2f:67:88:ab:6a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=973FAC27D212B41AAF78509ECB80BE2954385105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:b1:20:f9:67:d7:14:09:19:ab:6f:32:49:
                    56:7c:b8:4b:d1:ba:3f:ba:16:f7:58:43:06:46:af:
                    63:e9:72:ff:83:5a:6e:ed:d8:62:17:bf:30:4e:f8:
                    a1:3c:45:3c:3d:80:33:08:5e:55:9b:31:59:74:70:
                    43:31:c4:33:5d:17:92:af:d3:f5:35:3c:09:83:10:
                    b6:a8:d4:cc:e4:db:96:09:c7:b5:36:02:ec:c0:8e:
                    a5:db:9c:c9:31:82:e8:f3:99:76:f7:5c:19:18:d1:
                    ad:56:f9:f5:51:4d:24:19:80:5d:e6:fc:42:bd:ac:
                    97:d8:a7:80:1e:03:58:68:b1:61:1e:16:34:9a:a9:
                    45:a6:0d:bc:07:04:c4:23:64:60:22:1c:22:7d:70:
                    cd:d9:13:d1:7e:11:40:07:54:63:ab:0a:85:12:7c:
                    17:58:c3:d3:43:a1:aa:8f:24:7c:61:1b:c6:d9:19:
                    7c:b9:85:d1:a5:a2:7c:e6:e8:34:5b:4a:36:ad:84:
                    ac:8c:93:8a:b7:14:77:4c:c2:2e:80:6c:08:0e:a8:
                    95:40:a5:81:1e:14:ec:53:d2:a3:49:0f:02:5f:7c:
                    c1:13:1e:79:34:f2:86:c8:92:24:60:cb:0a:fb:a8:
                    85:70:1c:db:a2:55:09:ed:a1:8d:f9:2d:70:2c:e0:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3F:AC:27:D2:12:B4:1A:AF:78:50:9E:CB:80:BE:29:54:38:51:05
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:00:a2:b1:37:87:63:cb:0c:a9:0a:fd:4a:e0:8a:a1:27:
         57:6f:e6:64:e6:66:25:9e:15:53:81:ad:0e:c0:a3:14:62:ce:
         e2:3d:04:8d:e2:db:e3:4f:33:5c:37:6d:2a:13:dd:cc:69:c2:
         ce:b7:08:26:93:d2:50:20:b8:a8:c6:2d:97:48:6a:d0:67:f0:
         77:34:3a:c7:f8:0f:ce:1c:f9:f6:c2:6d:a2:bd:2c:a7:a4:27:
         be:59:cb:69:e2:a8:fe:72:c6:2f:6d:d7:64:07:39:e3:74:44:
         0d:05:d1:cc:10:60:7a:c2:48:b2:e8:0d:d5:63:6f:d8:a2:c0:
         33:f2:af:bd:35:bd:e9:ad:89:86:22:dd:a7:1b:93:97:df:08:
         89:3f:69:79:0c:26:da:23:9a:e2:d5:a9:b7:05:a3:58:b8:26:
         c3:f6:10:a4:2b:8d:23:bd:a3:0e:d6:a9:92:b2:a2:16:d8:ba:
         dc:6f:67:4e:a1:fc:46:09:a7:d9:08:1c:df:25:ce:c6:eb:f5:
         73:90:2d:b6:89:fa:86:37:79:06:91:5b:3d:53:dc:f0:07:13:
         da:83:46:d5:7c:ee:78:ca:0b:2b:d5:81:01:ae:26:67:25:5d:
         82:d7:78:76:0f:c6:de:a2:e1:43:43:92:1d:b9:04:e8:1d:6b:
         6d:8e:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org