Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          wYfLTzvHi3JE6BTWYrXYNkQXGxSjJJOYcV9N3DzdjfQ=
Subject key identifier:   44:28:18:F4:20:A7:49:F1:9E:49:89:8C:FC:A8:83:3B:31:76:38:5D
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       246A2FFF8F60DB853C3563AD5C334D17FCA4A0B6
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:25:42 +0000
ROA not before:           Mon 01 Jul 2024 19:20:42 +0000
ROA not after:            Mon 30 Jun 2025 19:25:42 +0000
asID:                     28165
IP address blocks:        187.62.221.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6a:2f:ff:8f:60:db:85:3c:35:63:ad:5c:33:4d:17:fc:a4:a0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:20:42 2024 GMT
            Not After : Jun 30 19:25:42 2025 GMT
        Subject: CN=442818F420A749F19E49898CFCA8833B3176385D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:03:b6:9d:c3:67:2e:fc:18:0a:f6:53:19:
                    2f:f6:11:c4:b4:f3:54:e2:3c:88:2a:d4:1a:5e:9c:
                    95:09:2b:2a:82:d7:e5:02:6b:27:9e:e1:94:58:37:
                    b2:5a:aa:e1:95:12:1b:96:4e:c1:ea:cd:3c:b8:8d:
                    85:5d:9d:be:68:4f:55:94:bd:2c:99:d8:15:0c:6f:
                    53:10:88:d3:d9:c0:aa:c9:76:28:8d:ca:2a:35:ef:
                    86:23:90:12:0c:77:c8:10:c2:c9:e4:c1:c6:0c:e4:
                    d3:a3:02:65:e4:ca:c2:38:65:85:39:4d:25:ab:58:
                    24:9b:c2:e2:07:5e:46:7f:3d:17:24:9b:e8:b4:d8:
                    29:aa:15:a9:56:73:bd:b9:5b:2a:52:7d:73:2c:0a:
                    63:c2:18:f5:54:7c:69:07:1e:23:c4:e3:01:21:ab:
                    cc:04:c6:bd:10:4e:fe:23:b1:03:91:49:c9:15:38:
                    af:0a:3c:09:50:35:b4:4a:79:cf:76:cf:69:f7:5d:
                    05:6e:9e:0d:89:d1:ab:4d:3c:a7:21:00:02:78:6f:
                    0e:42:c4:b1:14:cb:ce:11:26:1c:c1:1a:ec:7d:72:
                    7d:ab:cf:38:c1:05:6b:41:b4:d2:ba:65:8e:89:9c:
                    4e:df:fe:a5:61:fb:3b:32:63:2b:4a:42:4a:af:4b:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:28:18:F4:20:A7:49:F1:9E:49:89:8C:FC:A8:83:3B:31:76:38:5D
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:fe:d6:52:9d:d1:18:43:e5:ca:99:6c:e7:05:36:56:28:
         96:ba:5c:dd:00:cb:d3:a2:f5:73:4c:c2:13:8e:db:62:c3:73:
         e0:a2:f1:83:e9:05:b3:4d:60:e9:f2:63:19:1d:bb:fb:1d:8a:
         b6:49:68:ad:a2:c6:41:cf:cc:7b:82:bf:33:5d:cb:b7:40:00:
         92:5c:b6:b1:62:68:3f:ba:c4:d8:f5:32:f7:b8:c2:29:91:df:
         4b:df:2e:75:58:cf:59:5b:b9:1f:b4:3e:75:79:3a:dc:76:bf:
         6a:f9:90:99:22:91:2e:39:25:b2:d5:aa:39:7f:e6:2f:f2:47:
         79:81:1a:65:28:30:e7:2e:32:51:30:3f:23:f4:5d:dc:d1:92:
         03:af:e4:d7:fa:be:e5:5f:73:65:b5:44:08:4a:15:e1:ec:73:
         c5:a0:4d:f5:b5:3e:70:95:1f:84:d8:49:95:d0:1c:66:6b:43:
         c6:f3:c2:c8:df:2d:02:e1:d0:c8:3d:19:67:ed:5e:53:1f:92:
         21:cd:ff:2f:88:5b:61:4b:95:f8:86:58:ff:fa:fa:e1:6e:24:
         b3:bd:e9:72:d6:f5:25:cd:11:32:7f:c4:a6:1a:95:a6:ec:9b:
         bd:cd:08:47:1a:63:f4:74:9d:c4:c2:22:a9:7f:4f:7e:88:af:
         65:cb:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org