Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa
File:                     3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa (raw, json)
Hash identifier:          H0bkU5GLJ10nJQd7E47ZSzls+8li9c/vHI8VHTuueJA=
Subject key identifier:   70:BF:30:07:1D:F8:32:C6:E2:5C:A9:28:5C:E5:0A:DA:0D:17:C0:60
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       6B3D62DF870B49B9618DFDFD1C5359B32A45457A
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:30 +0000
ROA not before:           Thu 04 Apr 2024 19:54:30 +0000
ROA not after:            Thu 03 Apr 2025 19:59:30 +0000
asID:                     28349
IP address blocks:        189.126.188.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3d:62:df:87:0b:49:b9:61:8d:fd:fd:1c:53:59:b3:2a:45:45:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:30 2024 GMT
            Not After : Apr  3 19:59:30 2025 GMT
        Subject: CN=70BF30071DF832C6E25CA9285CE50ADA0D17C060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:72:de:73:d5:2c:89:ba:78:ac:3a:16:d2:cd:
                    6a:98:fb:28:39:70:da:ce:b2:c0:4f:6a:8c:81:30:
                    3b:6c:66:a2:b4:e7:96:05:5d:5a:93:7e:64:1f:bf:
                    55:bf:45:57:90:d0:9e:ff:9c:f5:5a:14:fa:2a:00:
                    c4:2c:d6:8f:30:d0:ef:f2:f8:dd:32:71:c5:28:19:
                    68:56:ad:9e:01:35:ab:fa:f9:37:69:35:4a:b4:cf:
                    e2:f4:03:7e:c2:0b:20:d5:cc:81:9a:43:13:60:a0:
                    8e:4d:b4:3e:89:9b:3c:03:71:e6:63:52:4f:06:ac:
                    a8:54:b4:1c:4a:97:70:17:6a:96:9a:d9:80:08:5a:
                    6b:46:a5:67:33:b0:17:76:51:b0:15:e6:8c:f0:cb:
                    36:99:fe:c8:25:1a:73:19:bd:dc:47:e1:83:97:36:
                    38:57:29:de:dd:13:31:9b:43:3c:85:3f:4f:bc:b8:
                    fa:21:c3:a1:d1:25:f8:9a:63:54:e8:71:76:5f:68:
                    bc:78:ab:5d:de:ac:8b:3f:52:7c:fb:e1:aa:72:dc:
                    22:9b:74:4c:1f:07:cf:f1:41:5a:d3:e6:74:04:15:
                    95:94:e4:38:d2:75:3d:0f:c7:32:95:48:34:ef:ce:
                    18:ff:6e:7a:0a:2a:fd:b5:96:89:56:3a:cb:51:2b:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:30:07:1D:F8:32:C6:E2:5C:A9:28:5C:E5:0A:DA:0D:17:C0:60
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:10:f1:40:6d:28:2b:90:91:64:96:83:f6:19:a3:6e:b5:
         3b:9f:81:12:31:70:c2:6e:21:d3:1f:fd:39:b7:2a:2c:4d:e0:
         50:78:08:60:ea:5a:ef:c0:94:15:72:cd:e9:ad:45:27:28:26:
         97:4d:75:a4:dc:9c:a1:48:0f:f7:08:24:f5:54:57:62:bd:05:
         7d:d2:f4:e9:45:18:22:a8:79:0c:f9:d1:95:3a:11:6e:96:59:
         d5:74:f5:6f:58:43:52:28:f2:1d:93:df:01:4c:fa:54:6b:95:
         a4:a8:0e:aa:89:56:30:38:83:34:c7:48:63:2c:62:86:ed:b8:
         be:cd:7f:40:23:82:b2:d6:d0:43:5a:1e:d2:7e:94:42:f4:e6:
         2c:28:67:43:4a:dd:bb:e4:d3:40:37:fc:2e:05:5b:77:5a:ee:
         26:89:40:ca:0c:60:8c:44:e1:42:e5:21:6b:8e:22:67:80:80:
         74:4a:38:32:f4:66:1e:f9:43:9a:25:fb:e6:9f:2b:8d:fe:d1:
         01:20:32:40:70:f3:f6:ff:7f:e9:62:45:b1:41:6d:06:81:47:
         c4:82:5c:74:22:3d:b8:98:cb:62:bc:4f:4c:dd:c9:0a:52:bc:
         20:85:35:82:2e:7b:17:d0:96:01:04:f1:40:1f:b6:3f:71:7d:
         45:29:ec:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaz1i34cLSblhjf39HFNZsypFRXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MzBaFw0yNTA0MDMxOTU5MzBaMDMxMTAvBgNV
BAMTKDcwQkYzMDA3MURGODMyQzZFMjVDQTkyODVDRTUwQURBMEQxN0MwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoct5z1SyJunisOhbSzWqY+yg5
cNrOssBPaoyBMDtsZqK055YFXVqTfmQfv1W/RVeQ0J7/nPVaFPoqAMQs1o8w0O/y
+N0yccUoGWhWrZ4BNav6+TdpNUq0z+L0A37CCyDVzIGaQxNgoI5NtD6JmzwDceZj
Uk8GrKhUtBxKl3AXapaa2YAIWmtGpWczsBd2UbAV5ozwyzaZ/sglGnMZvdxH4YOX
NjhXKd7dEzGbQzyFP0+8uPohw6HRJfiaY1TocXZfaLx4q13erIs/Unz74apy3CKb
dEwfB8/xQVrT5nQEFZWU5DjSdT0PxzKVSDTvzhj/bnoKKv21lolWOstRK9SBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcL8wBx34MsbiXKkoXOUK2g0XwGAwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzEzODM5MmUzMTMyMzYyZTMxMzgzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzgzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG9frwwDQYJKoZIhvcNAQELBQADggEBAHgvEPFA
bSgrkJFkloP2GaNutTufgRIxcMJuIdMf/Tm3KixN4FB4CGDqWu/AlBVyzemtRSco
JpdNdaTcnKFID/cIJPVUV2K9BX3S9OlFGCKoeQz50ZU6EW6WWdV09W9YQ1Io8h2T
3wFM+lRrlaSoDqqJVjA4gzTHSGMsYobtuL7Nf0AjgrLW0ENaHtJ+lEL05iwoZ0NK
3bvk00A3/C4FW3da7iaJQMoMYIxE4ULlIWuOImeAgHRKODL0Zh75Q5ol++afK43+
0QEgMkBw8/b/f+liRbFBbQaBR8SCXHQiPbiYy2K8T0zdyQpSvCCFNYIuexfQlgEE
8UAftj9xfUUp7AU=
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org