Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38372e36342e302f32302d3234203d3e203533313433.roa
File:                     3138372e38372e36342e302f32302d3234203d3e203533313433.roa (raw, json)
Hash identifier:          OUbz6se0tSwUlfsixrU39DJuulL2Cw03x3o7GwZF1iQ=
Subject key identifier:   4C:15:13:4E:D9:F8:80:AA:A8:0F:E7:E4:CD:C1:70:38:3F:7F:38:58
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       393A183112D879F7FB6E372C41A84105F9825449
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38372e36342e302f32302d3234203d3e203533313433.roa
Signing time:             Thu 04 Apr 2024 19:59:29 +0000
ROA not before:           Thu 04 Apr 2024 19:54:29 +0000
ROA not after:            Thu 03 Apr 2025 19:59:29 +0000
asID:                     53143
IP address blocks:        187.87.64.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3a:18:31:12:d8:79:f7:fb:6e:37:2c:41:a8:41:05:f9:82:54:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:29 2024 GMT
            Not After : Apr  3 19:59:29 2025 GMT
        Subject: CN=4C15134ED9F880AAA80FE7E4CDC170383F7F3858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:5c:93:de:96:50:f7:a4:e2:96:91:90:57:
                    8a:63:1e:e7:15:b5:5a:63:38:cf:de:30:d6:02:11:
                    62:c3:18:10:00:d2:c8:9f:10:a1:a5:8f:3e:ca:a8:
                    34:47:04:32:5e:eb:2c:3b:1e:43:d6:ce:2a:28:97:
                    a3:40:31:c4:12:c9:35:c7:cf:23:27:8a:93:6f:4a:
                    0a:7f:96:cc:3a:8e:b9:10:fd:82:8a:e2:bb:85:e3:
                    db:7e:c4:ae:5b:22:f2:cb:c1:3d:9a:2a:38:6d:58:
                    09:a2:2a:88:b8:b8:da:1b:47:2b:92:a5:89:da:6e:
                    bd:93:88:88:4c:eb:1e:18:c4:6f:52:12:76:ce:71:
                    4e:16:25:20:6c:f4:b8:ed:60:45:55:ed:27:4d:f2:
                    3f:b9:59:e9:fc:86:0c:f7:b5:0a:13:ed:00:f3:34:
                    43:e1:55:15:f5:49:5f:59:85:be:f7:0b:54:d6:ac:
                    b1:69:fe:31:12:42:ef:e0:58:84:9b:fd:2e:52:08:
                    37:bd:c1:10:ae:6d:33:92:45:54:e7:87:93:ef:79:
                    ac:5f:be:74:6a:89:37:17:e1:16:a3:05:c4:25:e9:
                    80:52:0b:25:ae:57:27:82:db:29:43:42:cf:02:28:
                    68:40:29:eb:80:fd:e5:3a:de:c8:fb:f5:2b:e5:90:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:13:4E:D9:F8:80:AA:A8:0F:E7:E4:CD:C1:70:38:3F:7F:38:58
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38372e36342e302f32302d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:3a:bf:84:eb:f5:eb:9a:18:92:e8:94:56:db:fb:8a:84:5e:
         59:b0:83:a4:b8:17:5c:89:cc:2d:16:bf:48:e5:e1:e3:e6:12:
         32:c6:d7:16:66:a0:45:55:25:8a:02:73:8c:8d:38:20:7a:7c:
         a4:12:34:d5:de:b2:10:23:3e:58:a5:04:12:f5:7b:e7:dc:09:
         7d:f6:37:de:3a:90:c2:31:ae:8b:23:47:63:6b:d9:ac:63:8e:
         f7:38:2d:5d:b8:6d:8e:8f:ce:90:0f:53:3a:e6:cf:d0:19:5c:
         c6:f9:1d:8a:34:df:22:5d:c3:c8:23:38:c7:13:5e:3c:ab:2e:
         29:2e:fe:da:25:64:1f:0e:a6:4c:bd:89:78:7d:48:20:62:39:
         d4:78:3c:c7:2c:68:22:3e:a5:cb:fa:2e:93:79:ee:54:94:c9:
         e7:d3:86:0d:13:23:5a:15:d9:85:1a:dd:78:12:1e:0e:04:39:
         2c:16:3d:2d:01:64:33:e4:81:e8:b0:56:77:1b:08:7f:42:4b:
         7b:e7:17:75:28:81:bf:7f:11:5e:86:49:38:93:b8:c5:f6:f9:
         16:2d:5d:98:6d:7e:fd:66:a7:75:00:39:19:e7:99:f2:e3:d8:
         de:80:22:9e:4a:33:59:07:93:fa:0a:e8:2c:a0:f6:05:77:7c:
         c8:88:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org