Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
File:                     3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          baoA/ZjN10utsO0BkiQ7UIJWXbyxLZZ2dNriK1CHTZc=
Subject key identifier:   EA:CF:3B:62:33:4F:4F:3E:62:A9:28:38:41:50:EE:27:7E:75:AF:B9
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       376F8FD8E6B87848924D28CACF9E437C68495B32
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:29 +0000
ROA not before:           Thu 04 Apr 2024 19:54:29 +0000
ROA not after:            Thu 03 Apr 2025 19:59:29 +0000
asID:                     28349
IP address blocks:        189.126.168.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6f:8f:d8:e6:b8:78:48:92:4d:28:ca:cf:9e:43:7c:68:49:5b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:29 2024 GMT
            Not After : Apr  3 19:59:29 2025 GMT
        Subject: CN=EACF3B62334F4F3E62A928384150EE277E75AFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:94:a9:0d:be:4e:f4:ab:e4:23:a0:04:7d:
                    4a:80:e2:a6:94:33:b2:0d:30:45:f8:21:7e:28:be:
                    76:9f:ea:aa:4c:6c:1b:94:e0:18:34:8e:c6:33:d3:
                    73:a5:56:3a:5f:c7:60:5a:63:09:fa:f5:70:f6:e7:
                    0e:ae:72:5d:a0:16:9a:c8:45:42:31:28:5f:e7:b7:
                    4b:0f:21:7d:73:02:af:0e:2e:49:73:3d:d6:98:89:
                    19:8e:ee:f2:d9:43:7a:a8:a1:88:9f:a2:1e:52:f5:
                    e8:be:2f:6b:3e:fb:02:eb:9e:09:d4:34:da:9d:f6:
                    d4:9f:3f:c6:70:f8:f7:bb:01:d5:1b:4f:fa:99:8f:
                    d4:b7:ae:e0:48:a0:d7:c2:a2:85:8a:a8:0d:b9:47:
                    b5:c0:e1:da:e9:85:89:a4:5f:ce:e6:85:34:1e:9b:
                    c6:61:7a:23:87:cf:34:43:45:de:fa:41:68:b8:a4:
                    c0:b8:a4:00:a0:69:97:78:a0:48:34:b9:6d:e0:02:
                    ff:86:da:d5:87:5a:75:0b:7a:72:87:92:83:d0:36:
                    f0:c1:19:f1:d0:2a:a8:ed:80:9c:c5:21:ca:c4:4d:
                    4c:9f:ef:5e:81:d3:56:ec:d4:46:74:30:5c:c8:d1:
                    e4:9f:3b:c0:3e:c2:f9:7d:91:d5:07:09:2a:a1:09:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:3B:62:33:4F:4F:3E:62:A9:28:38:41:50:EE:27:7E:75:AF:B9
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:98:4a:a2:09:3b:92:ae:e0:46:af:47:89:f0:3d:5a:ca:
         2a:b2:af:d4:5b:01:69:a6:9d:82:b8:20:fb:57:e1:31:ab:96:
         86:6c:86:85:13:3b:54:51:9d:bd:96:d1:8b:5c:e7:ab:17:24:
         41:66:df:26:0a:98:f6:0a:97:0d:6e:b2:1a:d5:57:6d:a2:5d:
         35:98:f5:1f:ec:63:da:5c:16:1c:50:60:3f:e8:b2:3a:0a:ef:
         3f:56:53:74:2b:b5:20:84:f6:16:e8:d3:cb:06:8d:55:72:71:
         99:c3:e6:dd:f1:f0:b8:f7:88:28:83:2a:1d:a8:86:ed:6b:4b:
         8f:71:65:14:c4:8e:e4:8f:a1:f2:0c:9d:12:2a:ca:e1:60:11:
         39:ea:45:01:db:e2:94:35:d3:b8:50:c9:b0:fe:5c:73:41:aa:
         9a:13:48:52:dd:4b:01:c4:fc:a6:95:ff:93:11:5b:86:e2:ca:
         8f:b3:5a:fe:ee:c4:a1:61:14:99:8a:a0:82:4f:28:50:8d:d9:
         ba:f1:2e:13:c6:52:62:68:49:33:0f:19:9d:10:e9:9d:79:86:
         fb:72:05:48:dc:d7:b1:ec:45:22:f6:91:5f:3d:40:a1:80:6f:
         4b:45:38:1a:48:79:b8:34:c7:df:e1:07:83:6e:fb:69:98:77:
         2e:93:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org