Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa
File:                     3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          Lyw4jPDkW0b7GynsyDm5Uzsdl6CY8vSsJuAyE9lsP90=
Subject key identifier:   71:36:85:BB:22:86:7A:44:C6:88:3E:97:7E:1A:37:36:BB:77:1D:F1
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       7AB5658F13BA550729DD095A7CF8A0CB3AB38118
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa
Signing time:             Thu 04 Apr 2024 19:59:31 +0000
ROA not before:           Thu 04 Apr 2024 19:54:31 +0000
ROA not after:            Thu 03 Apr 2025 19:59:31 +0000
asID:                     262420
IP address blocks:        189.113.216.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b5:65:8f:13:ba:55:07:29:dd:09:5a:7c:f8:a0:cb:3a:b3:81:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:31 2024 GMT
            Not After : Apr  3 19:59:31 2025 GMT
        Subject: CN=713685BB22867A44C6883E977E1A3736BB771DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:7e:57:bc:30:78:10:b5:7b:26:fd:13:57:
                    3c:02:98:1a:b8:69:98:90:e5:bf:82:7a:75:0c:b6:
                    f4:39:ba:fa:e9:94:83:ff:90:8d:55:e7:dc:f2:1b:
                    c3:38:1a:03:1b:3e:98:d6:f0:0f:fa:03:72:df:04:
                    7d:c6:7d:9a:12:ff:11:24:1a:e9:92:df:15:4b:2c:
                    7e:8d:8c:27:35:09:fa:d3:d5:06:76:6f:e5:fb:b9:
                    55:2e:15:ad:64:ef:0c:57:e1:10:7d:65:d1:91:de:
                    4a:46:9d:40:bc:c9:ba:6d:84:38:f8:ac:d0:44:be:
                    c0:45:cf:04:fe:05:65:4f:22:82:12:6b:f5:74:ff:
                    10:2c:66:05:d4:fa:92:57:94:2a:c2:df:81:b0:6d:
                    49:9b:f8:c5:fc:f4:b7:3a:98:c1:81:63:82:dd:36:
                    ae:9d:38:d8:f3:ed:6c:34:ef:b1:b7:94:5f:d2:52:
                    60:09:a4:3a:9a:30:b8:9c:72:b1:4e:5d:e8:d5:d0:
                    f4:49:68:3d:a2:ed:bd:da:ba:73:46:c8:f0:bf:7c:
                    0e:55:aa:3c:15:7a:5a:d0:56:b7:51:85:e8:b5:87:
                    f9:47:6d:47:f9:d2:1f:92:f2:c1:e8:d7:db:47:1a:
                    ff:89:6b:5c:64:ee:83:2c:78:64:d4:dc:c2:95:1c:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:36:85:BB:22:86:7A:44:C6:88:3E:97:7E:1A:37:36:BB:77:1D:F1
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:e2:b4:fa:a8:4a:14:43:fe:9c:ea:bd:07:fb:9c:77:1b:ab:
         29:d7:50:78:fe:d6:3e:b6:ff:4b:bf:ec:9e:33:6e:44:d4:41:
         b2:d3:2f:31:18:3d:03:ae:b5:30:21:ec:48:97:2e:1d:78:4e:
         c0:dc:84:29:10:d5:d0:fd:ea:45:a5:99:9c:45:66:0c:b1:c2:
         7e:e6:34:db:de:c7:2d:0e:d4:2a:48:f4:ba:86:c0:4a:ff:2c:
         b0:39:83:6d:cb:3d:b8:52:ac:12:06:38:5e:fe:f5:35:48:2f:
         8c:71:4b:a7:0f:d7:a3:ec:23:d4:28:de:e4:8e:09:e4:00:6b:
         23:2e:7a:33:3b:ef:6d:29:b5:4e:df:26:a0:9c:59:c5:8d:78:
         03:1f:dc:12:cf:a2:92:b1:b7:98:0b:94:7f:9a:7a:c8:b2:52:
         56:31:e9:94:e6:38:6a:6c:21:09:79:44:f5:7f:3c:d5:36:af:
         04:95:70:57:a5:d9:ad:f5:ca:a8:78:b4:19:ba:88:f1:f2:c5:
         b1:85:c6:b8:27:95:76:93:36:f0:6c:ae:fd:a9:5d:a0:93:11:
         cc:30:22:28:04:e5:83:7b:a6:52:43:2d:85:e1:d3:8a:90:60:
         5c:4a:54:db:35:52:8e:c6:66:2c:1b:76:e2:59:1d:37:3f:7d:
         20:b1:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org