Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3134302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          ppWv2/9wucYneVLok+ag3BwKtTkzZc2t9hEzPr4wUi0=
Subject key identifier:   5B:B1:C1:5F:9F:AA:9D:15:BA:3D:A3:E2:76:0A:5D:7E:5D:A0:A7:52
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       B60425C9C038DA0173765EEE24D26FE131CE62
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:30 +0000
ROA not before:           Thu 04 Apr 2024 19:54:30 +0000
ROA not after:            Thu 03 Apr 2025 19:59:30 +0000
asID:                     28349
IP address blocks:        189.51.140.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b6:04:25:c9:c0:38:da:01:73:76:5e:ee:24:d2:6f:e1:31:ce:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:30 2024 GMT
            Not After : Apr  3 19:59:30 2025 GMT
        Subject: CN=5BB1C15F9FAA9D15BA3DA3E2760A5D7E5DA0A752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:c9:77:bc:4c:b9:ed:45:1d:68:dc:c4:5c:
                    0a:b5:b6:22:01:bd:f9:0e:9a:9f:cf:9c:0f:09:e3:
                    32:ed:93:b8:e4:ed:8c:f9:1d:f4:e2:87:2d:0e:73:
                    95:73:0c:d4:3a:35:a4:1f:d2:7e:1e:eb:99:55:44:
                    91:1c:57:05:c5:12:bd:f6:89:44:d5:29:6b:1b:7b:
                    b2:fb:3b:99:1c:38:f6:c6:4b:cf:3a:33:c5:ef:a4:
                    ad:e2:3c:0c:6b:10:82:99:aa:cb:e8:c5:96:62:89:
                    89:b1:96:a1:d4:6b:e9:30:da:58:88:3c:28:0b:8e:
                    c7:78:b9:f1:6f:c1:fe:77:22:b9:5b:f0:d4:31:d3:
                    98:7d:8d:a0:1d:67:99:cf:da:5b:a9:59:7e:15:11:
                    21:4c:63:06:29:af:da:d9:4b:58:98:fb:e4:41:eb:
                    11:6e:07:a5:47:45:7a:03:86:4c:d9:9c:b3:ec:58:
                    18:d2:bc:63:de:6b:7b:4f:38:69:89:3b:ea:13:28:
                    0b:37:f4:6f:e1:47:50:4a:b6:2a:64:e4:de:d3:f0:
                    6c:ec:a8:0f:29:da:ea:c4:60:4b:7a:7a:28:35:93:
                    60:77:a1:45:78:bb:21:62:1f:30:7a:8b:44:92:c6:
                    0f:dd:26:b1:47:17:ed:11:03:01:bb:8f:71:8f:18:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B1:C1:5F:9F:AA:9D:15:BA:3D:A3:E2:76:0A:5D:7E:5D:A0:A7:52
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:59:96:f9:96:a2:ff:75:93:72:11:6e:46:62:46:53:df:4e:
         43:f8:ce:31:a3:91:51:7f:1e:83:10:ec:c6:0b:bd:2f:c1:33:
         72:5b:11:9a:68:44:fd:bc:b7:96:0d:40:53:38:2e:7e:5b:cb:
         9a:d3:06:45:96:c0:f4:98:e3:9a:48:17:61:8f:25:da:f9:fa:
         5e:b6:e0:c4:4e:ef:74:59:24:40:f3:e4:ef:de:22:5c:24:7e:
         e4:da:2d:70:4e:69:4a:fc:6e:87:eb:6d:a5:73:94:27:33:6a:
         00:06:28:c3:e9:ae:dc:37:91:12:6b:04:81:26:d9:6c:dd:f8:
         63:ad:2e:19:ca:19:53:71:72:2d:23:14:7a:63:0f:b2:cd:98:
         88:5b:5a:ef:54:b8:ca:b2:d1:7e:60:3a:fb:29:72:bb:23:6c:
         9e:b8:60:0c:49:3b:3d:25:65:87:4f:63:d8:49:da:b8:3e:da:
         e8:c5:22:77:d5:cd:1c:18:dc:4f:17:42:0c:62:46:a1:c6:1b:
         96:b1:5e:25:28:40:3e:b5:4c:71:e8:11:41:24:e0:e4:33:91:
         f4:84:1d:cd:4c:07:dc:ca:d1:21:e4:48:51:58:45:1a:2e:6c:
         02:dc:d0:f6:8b:e7:87:fd:18:f2:86:90:3f:e1:da:9d:fe:c1:
         5d:5d:07:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUALYEJcnAONoBc3Ze7iTSb+ExzmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MzBaFw0yNTA0MDMxOTU5MzBaMDMxMTAvBgNV
BAMTKDVCQjFDMTVGOUZBQTlEMTVCQTNEQTNFMjc2MEE1RDdFNURBMEE3NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekcl3vEy57UUdaNzEXAq1tiIB
vfkOmp/PnA8J4zLtk7jk7Yz5HfTihy0Oc5VzDNQ6NaQf0n4e65lVRJEcVwXFEr32
iUTVKWsbe7L7O5kcOPbGS886M8XvpK3iPAxrEIKZqsvoxZZiiYmxlqHUa+kw2liI
PCgLjsd4ufFvwf53Irlb8NQx05h9jaAdZ5nP2lupWX4VESFMYwYpr9rZS1iY++RB
6xFuB6VHRXoDhkzZnLPsWBjSvGPea3tPOGmJO+oTKAs39G/hR1BKtipk5N7T8Gzs
qA8p2urEYEt6eig1k2B3oUV4uyFiHzB6i0SSxg/dJrFHF+0RAwG7j3GPGHkNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUW7HBX5+qnRW6PaPidgpdfl2gp1IwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzEzODM5MmUzNTMxMmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTOMMA0GCSqGSIb3DQEBCwUAA4IBAQCqWZb5lqL/
dZNyEW5GYkZT305D+M4xo5FRfx6DEOzGC70vwTNyWxGaaET9vLeWDUBTOC5+W8ua
0wZFlsD0mOOaSBdhjyXa+fpetuDETu90WSRA8+Tv3iJcJH7k2i1wTmlK/G6H622l
c5QnM2oABijD6a7cN5ESawSBJtls3fhjrS4ZyhlTcXItIxR6Yw+yzZiIW1rvVLjK
stF+YDr7KXK7I2yeuGAMSTs9JWWHT2PYSdq4PtroxSJ31c0cGNxPF0IMYkahxhuW
sV4lKEA+tUxx6BFBJODkM5H0hB3NTAfcytEh5EhRWEUaLmwC3ND2i+eH/RjyhpA/
4dqd/sFdXQd7
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org