Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa
File:                     3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          TPHo6PoCQERdBH1qYjID47Iz5kAWBcB47qPfAY1KXKU=
Subject key identifier:   6D:87:E3:AF:FB:74:C1:FD:DB:0A:18:9F:E4:14:79:F6:B3:0B:A3:E1
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       16E9EE88E6BE52531F3A60A5C82178EED874961F
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa
Signing time:             Thu 04 Apr 2024 19:59:29 +0000
ROA not before:           Thu 04 Apr 2024 19:54:29 +0000
ROA not after:            Thu 03 Apr 2025 19:59:29 +0000
asID:                     267484
IP address blocks:        189.51.128.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:ee:88:e6:be:52:53:1f:3a:60:a5:c8:21:78:ee:d8:74:96:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:29 2024 GMT
            Not After : Apr  3 19:59:29 2025 GMT
        Subject: CN=6D87E3AFFB74C1FDDB0A189FE41479F6B30BA3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:84:08:f9:5f:69:5a:7a:10:3d:ef:83:40:
                    82:08:52:d9:b0:3d:87:c5:54:75:bd:b8:b2:39:84:
                    46:19:49:12:ee:fe:50:62:ca:66:cf:94:21:b8:5a:
                    eb:a7:60:ca:a6:7e:04:11:06:f0:14:3a:40:b2:9f:
                    2a:8b:7e:99:dd:65:61:7b:43:9e:4c:40:3c:1c:23:
                    d9:cb:00:70:b3:32:d6:ff:02:ee:ce:e7:e1:bc:43:
                    dc:57:2a:b0:ad:f8:8f:66:2d:f8:9e:07:e2:b9:fc:
                    ee:eb:32:2b:d8:0f:05:18:d2:88:61:df:9f:01:a0:
                    11:3b:81:37:8c:be:88:a5:e1:5c:29:32:67:a0:b5:
                    aa:8e:ad:f6:84:93:1d:a8:26:9d:42:ff:83:c8:71:
                    95:fe:f8:fc:90:1b:77:4e:fe:4a:d8:b2:07:6f:e9:
                    55:33:15:7f:42:72:48:f0:13:5f:7a:3d:ac:6e:66:
                    73:a5:b3:2e:b5:c6:85:e0:71:34:88:78:a5:c0:a0:
                    37:a3:a3:5d:75:e8:b7:a2:9e:78:97:ba:46:f3:59:
                    b6:b5:99:ee:44:c9:75:38:8e:7f:70:1f:a5:57:0c:
                    f6:5b:93:85:9a:3a:01:b0:0a:93:9e:fe:4a:27:98:
                    e0:b8:69:c1:d4:06:70:7f:52:9b:8f:25:dd:8a:b0:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:87:E3:AF:FB:74:C1:FD:DB:0A:18:9F:E4:14:79:F6:B3:0B:A3:E1
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:22:b3:17:3a:16:f3:b6:79:41:cb:dc:a8:5f:e3:6c:20:74:
         2f:85:6b:ad:31:2e:fc:23:d6:af:2f:f2:11:2b:0c:82:f4:f1:
         8a:ea:c0:7b:18:4c:2f:6b:54:df:82:02:63:45:7c:cb:d1:e1:
         47:fd:75:e5:92:25:75:e1:5d:b4:79:99:12:85:23:ad:d4:d5:
         10:f6:19:d3:71:48:1c:b0:cf:2e:29:c6:39:8e:4d:2e:58:e4:
         80:b6:8a:c8:13:dc:5a:13:32:9a:f2:da:fd:14:c3:7f:91:a0:
         42:1e:c6:f9:27:ed:ef:04:30:d3:90:92:53:b9:04:51:39:49:
         59:49:8f:ae:0b:a0:57:52:37:a7:d3:12:52:72:6c:54:bb:70:
         eb:a6:03:ce:ae:66:61:24:4f:87:97:05:1c:55:40:8a:89:d4:
         28:91:36:e6:6b:27:6e:1a:c5:49:3e:50:47:b3:c8:c3:9c:4a:
         09:a6:d8:10:37:2d:38:a4:25:ba:5a:c3:6c:c2:3f:6d:a3:14:
         e8:17:4e:7d:24:6e:4b:87:d2:c8:92:e4:d5:af:59:c0:e5:f4:
         31:78:ca:b1:a5:d4:26:c4:a4:9d:e0:49:75:eb:f8:c8:a9:54:
         c5:d6:39:ff:4b:b2:5d:bc:da:50:ea:0a:6c:70:b9:b6:0e:4e:
         84:28:57:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFunuiOa+UlMfOmClyCF47th0lh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MjlaFw0yNTA0MDMxOTU5MjlaMDMxMTAvBgNV
BAMTKDZEODdFM0FGRkI3NEMxRkREQjBBMTg5RkU0MTQ3OUY2QjMwQkEzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCIQI+V9pWnoQPe+DQIIIUtmw
PYfFVHW9uLI5hEYZSRLu/lBiymbPlCG4WuunYMqmfgQRBvAUOkCynyqLfpndZWF7
Q55MQDwcI9nLAHCzMtb/Au7O5+G8Q9xXKrCt+I9mLfieB+K5/O7rMivYDwUY0ohh
358BoBE7gTeMvoil4VwpMmegtaqOrfaEkx2oJp1C/4PIcZX++PyQG3dO/krYsgdv
6VUzFX9CckjwE196PaxuZnOlsy61xoXgcTSIeKXAoDejo1116LeinniXukbzWba1
me5EyXU4jn9wH6VXDPZbk4WaOgGwCpOe/konmOC4acHUBnB/UpuPJd2KsLWjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbYfjr/t0wf3bChif5BR59rMLo+EwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzEzODM5MmUzNTMxMmUzMTMyMzgyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW9M4AwDQYJKoZIhvcNAQELBQADggEBAJwisxc6
FvO2eUHL3Khf42wgdC+Fa60xLvwj1q8v8hErDIL08YrqwHsYTC9rVN+CAmNFfMvR
4Uf9deWSJXXhXbR5mRKFI63U1RD2GdNxSBywzy4pxjmOTS5Y5IC2isgT3FoTMpry
2v0Uw3+RoEIexvkn7e8EMNOQklO5BFE5SVlJj64LoFdSN6fTElJybFS7cOumA86u
ZmEkT4eXBRxVQIqJ1CiRNuZrJ24axUk+UEezyMOcSgmm2BA3LTikJbpaw2zCP22j
FOgXTn0kbkuH0siS5NWvWcDl9DF4yrGl1CbEpJ3gSXXr+MipVMXWOf9Lsl282lDq
CmxwubYOToQoV78=
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org