Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa
File:                     3138392e35312e3134342e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          kcjvyjmvgP9x7zglKlc22HqCql0y2AO8U5fu/xV11zs=
Subject key identifier:   BA:AA:A2:37:11:EE:7C:F4:E3:41:4E:4A:39:09:4D:F5:A0:86:86:F7
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       36C8B05DCD70A250DCE189F10AC1D85B517D504C
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:30 +0000
ROA not before:           Thu 04 Apr 2024 19:54:30 +0000
ROA not after:            Thu 03 Apr 2025 19:59:30 +0000
asID:                     28349
IP address blocks:        189.51.144.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:b0:5d:cd:70:a2:50:dc:e1:89:f1:0a:c1:d8:5b:51:7d:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:30 2024 GMT
            Not After : Apr  3 19:59:30 2025 GMT
        Subject: CN=BAAAA23711EE7CF4E3414E4A39094DF5A08686F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:6d:3d:bf:43:3d:60:20:07:25:33:f2:6a:
                    e1:3c:25:57:c5:1d:86:3b:ff:ba:57:91:28:07:9e:
                    23:34:4a:aa:49:80:26:db:17:ef:e9:22:14:f3:bf:
                    bf:3e:71:97:38:27:a5:27:54:8b:94:ff:53:1d:1b:
                    8a:ce:20:6b:9b:ea:84:1d:22:a4:14:b9:fd:10:5a:
                    44:0f:8f:81:2a:b7:a9:78:5f:a1:3f:ba:9d:78:6b:
                    69:38:0f:8b:bc:19:7b:12:9f:a5:1c:d9:45:fc:59:
                    21:9f:06:0c:8f:f3:33:dc:fb:51:b6:ca:7d:88:46:
                    f4:3f:d6:4d:1f:c7:bc:5f:4f:ba:95:f7:6c:b4:23:
                    ac:c2:72:0f:69:4f:cc:74:ee:90:b5:c5:d9:f0:47:
                    3c:b9:c1:ac:f1:cd:18:50:ce:8d:f6:49:cd:3b:6b:
                    d0:5c:d0:51:28:db:8d:a4:de:68:ad:03:d7:55:e2:
                    b2:17:f3:41:bb:8b:37:39:73:5e:18:a6:01:1f:23:
                    7d:4a:ae:bf:60:38:01:8a:24:f7:e3:e0:e7:0e:9c:
                    77:66:c5:f3:48:17:4a:ba:ca:6a:ab:24:47:5e:db:
                    9c:20:74:1d:60:41:8f:d3:88:5c:86:88:8f:41:b3:
                    75:b2:2a:2c:66:7f:cd:e2:99:b0:0a:1e:40:00:44:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:A2:37:11:EE:7C:F4:E3:41:4E:4A:39:09:4D:F5:A0:86:86:F7
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:3f:cc:39:cf:5b:19:48:42:31:65:d2:3b:5b:ab:5e:28:
         19:c4:8b:66:1b:b0:73:07:90:03:d3:c6:84:f2:ef:1a:7b:bf:
         9e:b2:b2:bc:84:79:73:88:11:4a:e0:5b:5e:3b:76:ff:5b:c6:
         b5:66:fb:22:33:d6:a2:2a:aa:86:87:68:c1:32:31:26:ec:7a:
         39:6c:96:85:15:51:46:c5:15:a2:ff:e0:d5:39:1b:13:5c:c4:
         0b:07:77:fa:a3:e0:6f:64:0e:95:f4:fe:db:20:3d:ac:24:2b:
         8a:04:ae:56:31:5e:ce:9f:3f:de:75:6e:63:65:71:01:c5:0c:
         6e:6a:14:21:25:cf:37:5f:5e:40:85:59:a4:ce:71:28:ef:e3:
         79:20:59:af:b2:df:20:f2:7b:41:93:5e:dc:8a:c5:d2:e5:4b:
         21:30:cb:96:df:23:f5:a3:2f:31:6e:85:a2:99:22:82:1f:ed:
         95:47:7b:a7:52:a9:f0:8e:9b:15:41:d9:ff:75:54:1a:53:7f:
         d8:c2:0a:12:1e:5a:55:a4:51:70:2b:31:44:a0:89:e8:cd:38:
         81:bb:f6:59:76:3d:7a:e0:a0:ce:64:98:14:c8:0a:2b:f7:0a:
         6a:d5:6b:b7:11:d2:19:89:68:f8:b2:ea:13:9c:73:40:f8:06:
         3b:ed:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 13:11:10 2024 by rpki-client on console-ams.rpki-client.org