Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3135362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          Jd6so5qxG8NH/9gXoBZBL0ilL5+E3WqLO4eyFIFApzE=
Subject key identifier:   C1:D5:D7:FA:11:06:3A:07:E5:01:A9:D8:74:A8:7E:7A:EA:71:00:74
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       2ECC9BDA11D24CE74BF78D07F3E11CD16F5306E4
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     28349
IP address blocks:        189.51.156.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:9b:da:11:d2:4c:e7:4b:f7:8d:07:f3:e1:1c:d1:6f:53:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=C1D5D7FA11063A07E501A9D874A87E7AEA710074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:24:91:38:53:a2:d9:a1:c5:3b:92:30:36:
                    e0:14:b2:29:a8:21:95:21:98:54:af:87:b6:56:f6:
                    f8:db:f3:c2:67:1c:af:11:fe:a3:a0:5b:18:c5:f4:
                    4b:84:eb:dc:2c:37:20:bc:e0:85:4e:aa:c1:48:b1:
                    19:fd:09:6d:8c:62:cd:fb:8d:db:f3:d1:84:34:c7:
                    d0:58:52:0b:fd:b6:13:97:3b:33:91:bb:e3:b5:fb:
                    06:df:6e:ac:66:a6:50:cc:6c:42:a3:c8:03:e1:66:
                    81:7c:24:7b:13:05:d8:fd:5d:c7:05:1d:fc:49:90:
                    5b:0e:39:3b:7f:29:7a:4a:9d:ce:30:5f:4f:4b:a5:
                    97:a6:44:b7:da:d5:23:3a:f2:1e:e6:2f:68:62:60:
                    03:ed:5f:9b:60:6e:a2:4f:ba:29:b4:8f:b3:63:39:
                    e9:33:1f:0c:17:16:88:2d:51:fd:c7:53:81:3d:12:
                    8c:d6:b7:12:f7:09:8f:68:10:da:56:59:d2:b6:aa:
                    fa:ba:57:5f:72:e7:4b:a8:ec:80:86:97:27:b0:63:
                    85:d5:5c:f4:b8:84:bc:71:2c:98:b8:76:a1:75:f7:
                    40:06:9e:e5:b4:09:70:33:a4:40:ef:1a:b3:78:21:
                    85:ac:41:0a:45:d1:ed:b6:80:49:c3:b2:25:26:42:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:D7:FA:11:06:3A:07:E5:01:A9:D8:74:A8:7E:7A:EA:71:00:74
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:73:39:85:37:87:cb:00:d4:3b:40:51:9b:88:45:f0:99:
         b2:1b:0e:02:08:57:20:07:20:d2:3b:b0:4d:d6:b4:81:9c:1a:
         59:16:6d:26:e5:0a:7c:b3:43:3f:f1:28:dc:c9:4c:65:82:c8:
         20:4f:e4:3a:e5:af:07:c8:7d:78:2a:39:e0:55:a1:5a:6d:e8:
         2d:d9:68:b7:bb:91:0f:a9:42:eb:69:0a:eb:18:18:0b:98:93:
         12:83:c6:6b:00:10:79:6a:26:07:23:27:56:f2:e7:e8:df:80:
         30:c3:90:74:7b:f0:3b:c1:83:5e:74:18:f2:77:3c:d7:d1:42:
         2f:85:c5:66:3c:8c:96:0f:75:37:6a:3e:bc:67:72:45:89:19:
         3a:b6:5e:1d:13:b6:4b:d5:9b:2c:4c:b8:f7:dd:00:1e:4c:8b:
         4b:a3:e0:6c:42:ed:81:2a:8b:de:1d:55:c5:7c:4a:1a:19:77:
         60:8e:67:fd:72:1a:89:e4:f2:dc:e1:f4:d4:3e:08:0d:89:f4:
         4a:f8:ff:07:d8:de:7e:a8:58:37:84:fc:f7:eb:63:c0:fd:1f:
         ce:78:b4:88:77:01:de:47:cf:71:0e:29:0c:9e:ec:a8:c2:1b:
         b1:62:1e:74:4d:17:ca:b0:b5:fd:db:df:24:bd:a7:ef:82:93:
         27:26:a6:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULsyb2hHSTOdL940H8+Ec0W9TBuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MjhaFw0yNTA0MDMxOTU5MjhaMDMxMTAvBgNV
BAMTKEMxRDVEN0ZBMTEwNjNBMDdFNTAxQTlEODc0QTg3RTdBRUE3MTAwNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iiSROFOi2aHFO5IwNuAUsimo
IZUhmFSvh7ZW9vjb88JnHK8R/qOgWxjF9EuE69wsNyC84IVOqsFIsRn9CW2MYs37
jdvz0YQ0x9BYUgv9thOXOzORu+O1+wbfbqxmplDMbEKjyAPhZoF8JHsTBdj9XccF
HfxJkFsOOTt/KXpKnc4wX09LpZemRLfa1SM68h7mL2hiYAPtX5tgbqJPuim0j7Nj
OekzHwwXFogtUf3HU4E9EozWtxL3CY9oENpWWdK2qvq6V19y50uo7ICGlyewY4XV
XPS4hLxxLJi4dqF190AGnuW0CXAzpEDvGrN4IYWsQQpF0e22gEnDsiUmQqrdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwdXX+hEGOgflAanYdKh+eupxAHQwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzEzODM5MmUzNTMxMmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTOcMA0GCSqGSIb3DQEBCwUAA4IBAQBMVnM5hTeH
ywDUO0BRm4hF8JmyGw4CCFcgByDSO7BN1rSBnBpZFm0m5Qp8s0M/8SjcyUxlgsgg
T+Q65a8HyH14KjngVaFabegt2Wi3u5EPqULraQrrGBgLmJMSg8ZrABB5aiYHIydW
8ufo34Aww5B0e/A7wYNedBjydzzX0UIvhcVmPIyWD3U3aj68Z3JFiRk6tl4dE7ZL
1ZssTLj33QAeTItLo+BsQu2BKoveHVXFfEoaGXdgjmf9chqJ5PLc4fTUPggNifRK
+P8H2N5+qFg3hPz362PA/R/OeLSIdwHeR89xDikMnuyowhuxYh50TRfKsLX9298k
vafvgpMnJqaN
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org