Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
File:                     3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          GM60oqodruFctCBioaIfF5ICvIueOAXG1iUWJG/lwic=
Subject key identifier:   3D:96:C9:E0:2B:A7:78:BE:D3:E0:5D:AB:31:A5:CC:BD:3E:D6:E4:8C
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       1AFFC38227AC65150BA285590FE352A072917B00
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     28349
IP address blocks:        189.126.176.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ff:c3:82:27:ac:65:15:0b:a2:85:59:0f:e3:52:a0:72:91:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=3D96C9E02BA778BED3E05DAB31A5CCBD3ED6E48C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7e:76:ab:53:5f:e6:c6:69:7f:d6:0d:ab:f1:
                    6c:86:2d:0b:44:47:35:79:49:69:ed:ff:d3:95:4c:
                    58:6b:b8:44:62:d4:e9:8c:1f:d8:4f:fe:28:2f:a3:
                    97:2c:97:64:51:bf:b5:d4:b5:82:28:21:d6:e7:c6:
                    5f:34:b6:51:83:7e:e4:65:02:b7:3e:14:ea:0e:3e:
                    2e:f8:f1:62:6e:d1:33:1a:1d:cd:57:cb:2d:60:a3:
                    0a:c6:e5:35:f4:d5:ac:51:c6:b7:b7:99:76:63:e0:
                    27:f7:d0:e5:9a:a0:81:f2:58:de:04:84:3b:e1:92:
                    b7:20:7a:c7:a9:b0:fa:63:cf:ca:d2:b7:a4:62:72:
                    5d:fd:12:59:c1:73:22:d0:da:e7:0c:75:af:4e:70:
                    a0:ce:57:83:a0:d2:74:d2:1b:b5:c7:59:d8:c5:70:
                    13:5c:d2:3c:d0:fb:de:fe:21:d6:f2:8b:e1:fb:8e:
                    85:ec:73:71:71:c3:81:96:dc:a7:b2:a5:5e:6b:58:
                    47:b1:e6:e9:85:c2:9c:3e:24:a0:11:a2:43:eb:19:
                    78:d9:ec:6d:bb:a4:96:e0:e9:6e:6d:0c:d8:22:f5:
                    1a:2f:5a:a9:db:60:df:b0:84:bf:35:88:17:0a:4c:
                    00:2f:f8:bc:06:a2:1d:4c:25:d8:31:8c:de:12:b3:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:C9:E0:2B:A7:78:BE:D3:E0:5D:AB:31:A5:CC:BD:3E:D6:E4:8C
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:b1:25:68:1d:f4:be:93:87:48:0d:46:bc:1e:d6:2a:c9:
         8a:ce:68:7d:21:cd:34:35:22:f0:b5:96:8e:a7:fb:e0:85:78:
         0b:45:d0:a7:4b:46:2d:38:c2:ff:29:11:ed:14:a3:86:68:d7:
         2b:8b:35:fb:ca:c2:fd:c9:93:af:48:c8:b2:fc:c5:4a:4a:cd:
         21:d3:e3:c4:69:02:06:37:36:33:10:88:e5:7a:6e:41:ca:22:
         a7:6c:28:9a:df:28:84:da:29:98:5a:e2:36:7b:d3:83:33:c9:
         d7:7b:06:9d:cd:42:43:ab:7e:f0:7f:2c:69:66:44:e9:e5:f0:
         26:79:b2:fe:d6:98:f7:52:23:4f:22:4f:45:68:eb:15:65:10:
         bc:d3:1d:43:1d:b4:a5:e0:42:ad:04:03:c5:97:1d:1a:4d:1d:
         ea:03:28:2d:fb:35:e7:54:c3:87:c3:83:72:1c:82:90:4a:65:
         a2:18:e6:7c:a6:28:8c:f4:84:e8:0e:df:88:3b:bc:57:15:0f:
         eb:cb:fd:7f:6b:62:97:d6:5c:04:04:5a:be:b6:66:bb:58:24:
         1f:b1:a8:12:e4:63:2a:d8:30:7b:05:f7:59:4a:27:ab:1c:a5:
         70:2c:45:96:3f:03:4d:21:78:f2:59:64:1e:3d:55:b8:05:69:
         ab:e8:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org