Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38372e37322e302f32312d3234203d3e20323632343230.roa
File:                     3138372e38372e37322e302f32312d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          fXI05b50U5bAITjtSPH9oQBYbPfv2pYGfkXp+TOeocs=
Subject key identifier:   17:E4:13:AC:BD:31:53:42:12:CF:35:5C:49:EA:7B:4F:06:AC:22:C1
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       35C05F75C6276290B374D14E16087AA258BAB7CE
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38372e37322e302f32312d3234203d3e20323632343230.roa
Signing time:             Thu 04 Apr 2024 19:59:31 +0000
ROA not before:           Thu 04 Apr 2024 19:54:31 +0000
ROA not after:            Thu 03 Apr 2025 19:59:31 +0000
asID:                     262420
IP address blocks:        187.87.72.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c0:5f:75:c6:27:62:90:b3:74:d1:4e:16:08:7a:a2:58:ba:b7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:31 2024 GMT
            Not After : Apr  3 19:59:31 2025 GMT
        Subject: CN=17E413ACBD31534212CF355C49EA7B4F06AC22C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:a7:2d:0a:3c:00:89:f1:4a:6d:7b:c1:83:
                    a6:54:ca:5f:af:a2:1f:19:4e:b7:1d:e5:46:14:ea:
                    32:9d:5a:5d:2a:f7:a5:53:fb:1c:b1:db:de:77:bd:
                    81:51:03:31:04:5c:e6:d3:4f:5f:9d:3b:94:6c:fb:
                    97:81:f8:9f:fa:39:f8:64:63:7d:7b:2c:16:ad:f3:
                    81:3c:96:24:78:84:d7:4c:27:ab:67:2e:30:1b:c8:
                    82:78:be:54:68:93:ca:2e:48:65:d4:4a:80:5c:1f:
                    a5:a7:0c:e0:1c:10:db:30:55:ae:c3:0b:b2:cc:42:
                    be:71:5a:51:e5:fd:b2:f4:4c:e3:f0:be:eb:b3:91:
                    08:21:79:bc:a3:b6:ea:c0:39:72:30:78:96:88:56:
                    a6:2e:3a:c2:3d:36:4f:80:4e:29:92:a4:d6:5f:99:
                    b9:c4:dd:cf:80:0f:c8:1c:42:39:f2:a6:1f:b8:49:
                    1b:cd:4a:1a:d6:a9:7d:d3:01:ea:cb:cc:74:b2:62:
                    d7:95:f3:99:3f:ad:77:59:c7:03:a0:52:0f:73:0c:
                    8a:39:13:4f:6d:9d:c5:a2:11:ae:32:ea:2a:5b:56:
                    0c:67:f0:29:23:36:2b:e1:77:1f:58:55:e5:92:b6:
                    77:48:44:dc:55:6f:b9:38:c3:87:7c:fc:06:1a:ec:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E4:13:AC:BD:31:53:42:12:CF:35:5C:49:EA:7B:4F:06:AC:22:C1
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38372e37322e302f32312d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:3a:bc:f8:36:4b:9f:01:3f:fc:ce:10:63:2b:14:ab:3b:6c:
         ee:46:1a:53:c5:f6:36:40:d9:83:61:1a:9b:08:7c:4b:28:d3:
         7a:3e:c4:3c:c5:b7:c6:ac:7d:81:d0:e8:1e:28:03:e1:97:f7:
         b8:5b:5b:5e:18:9f:30:85:36:19:56:a7:e4:c5:77:28:9e:e6:
         1d:3f:0d:d8:44:72:d3:1f:da:a3:68:bc:15:e8:d1:52:a7:d4:
         be:80:e6:84:67:b8:dd:2b:45:3c:cd:10:ee:29:51:e4:d2:a9:
         4f:98:1c:43:0b:3b:3d:82:70:95:41:a2:30:7b:c3:5d:63:09:
         9b:85:af:d7:b0:b4:07:a7:79:b2:0c:fc:c6:ce:b9:e5:27:81:
         f5:f8:fa:9a:be:34:ac:ea:26:d6:b2:ab:cd:a7:82:fe:dd:3b:
         8b:9e:9e:9c:9a:a7:93:d4:64:97:6f:b1:b2:f5:0b:63:cb:dc:
         19:03:df:80:4b:48:4d:f7:f6:c5:d0:7b:b9:75:ed:bd:89:7d:
         39:4a:fe:9f:9d:ab:b6:cf:8d:60:ce:69:fa:39:45:d2:94:8a:
         e8:39:59:71:eb:ff:b7:54:f1:10:75:cc:9b:81:8d:d9:76:95:
         fd:f5:b8:36:b0:45:e5:cc:cc:cc:53:11:67:fe:f5:20:ca:1b:
         57:35:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org