Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa
File:                     3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          UKmxFFW0Q69sawBq3VMpJMGbO5KlDs1tl4jfrn9x5B8=
Subject key identifier:   62:60:4F:F3:4B:FE:F1:80:2C:77:9D:13:68:57:CD:3D:09:B9:EF:A4
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       5120160B112054928CD923A51C7579779C32BFC7
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:46 +0000
ROA not before:           Wed 31 Jul 2024 22:20:46 +0000
ROA not after:            Wed 30 Jul 2025 22:25:46 +0000
asID:                     28165
IP address blocks:        131.255.102.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:20:16:0b:11:20:54:92:8c:d9:23:a5:1c:75:79:77:9c:32:bf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:46 2024 GMT
            Not After : Jul 30 22:25:46 2025 GMT
        Subject: CN=62604FF34BFEF1802C779D136857CD3D09B9EFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:81:e2:2c:5f:a7:bc:a4:c7:f6:4b:b0:aa:
                    09:af:00:2c:cb:18:06:12:f7:52:73:39:d1:06:3e:
                    4d:25:5a:8c:99:0f:0a:3c:02:74:9d:a8:f6:8f:da:
                    9e:ff:f9:88:85:74:5b:64:66:14:9d:27:c2:cb:54:
                    2f:78:d5:8d:23:63:5c:7d:96:f4:7a:c2:a7:09:00:
                    4f:59:e2:f1:9c:29:ae:7f:ea:5b:cc:4d:db:3f:ba:
                    d2:f9:a0:84:0b:22:3b:8a:87:ab:f7:67:19:19:17:
                    87:d5:bb:6b:96:7a:ba:84:2c:52:e2:7b:e0:61:3b:
                    2c:78:53:09:7b:57:4d:e4:97:8c:55:8f:cf:2e:4a:
                    47:5a:63:ad:c0:31:4b:ef:db:44:aa:ba:20:0d:73:
                    28:17:16:8f:9a:30:76:a7:ea:a9:e8:8c:e6:6d:e0:
                    78:b1:fd:5f:46:f4:c1:03:49:3f:10:df:0e:0d:38:
                    b1:d6:3c:cd:3f:46:d8:3d:10:33:0b:19:fd:8a:6a:
                    f0:31:01:81:f3:fb:7d:f6:9c:74:c0:60:6e:ea:ee:
                    0d:b1:be:7a:da:6b:c7:1e:d2:9f:4e:42:d9:d7:09:
                    5e:0b:d5:07:be:0c:1d:cb:dd:32:be:f7:2f:c9:6d:
                    d1:db:ce:b0:77:7c:ed:83:56:d4:e0:38:4e:f4:58:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:60:4F:F3:4B:FE:F1:80:2C:77:9D:13:68:57:CD:3D:09:B9:EF:A4
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:03:8b:1d:bd:35:10:ed:ad:93:e1:c2:ac:da:04:b9:6b:f2:
         ab:24:70:13:50:4a:14:bb:65:08:26:27:1d:91:80:ce:92:d8:
         9f:c6:43:cf:9d:cb:79:0c:66:64:39:bb:54:5c:6e:dc:e3:b1:
         28:2c:08:fb:77:bb:a5:82:c9:2a:a9:33:f3:0f:44:51:91:9d:
         ba:bf:6c:67:9e:74:b8:1c:d8:f2:2d:84:01:a4:c0:88:9f:92:
         dc:e3:86:a5:fe:02:84:b6:ff:c0:2b:ee:fb:2c:d2:69:3c:de:
         62:db:fc:3a:1d:c7:e9:ce:bf:f0:81:91:c7:b1:db:d4:ed:c7:
         b5:b4:6a:4e:56:b5:c6:54:8a:ae:28:11:f8:f6:cd:a9:3d:56:
         b5:d8:4a:a0:d6:0b:3e:78:d6:e4:72:34:31:56:63:fb:5f:e5:
         7b:d7:74:98:50:a6:21:5b:7a:f4:90:0d:92:9a:71:a4:69:c2:
         76:cf:d1:bf:85:9c:85:42:bc:c3:27:33:73:21:07:14:4b:ee:
         b2:23:9c:8c:3e:ea:f3:ed:bc:ca:d1:a9:b5:7a:4e:14:d4:77:
         ab:87:e1:95:7c:10:76:d0:cb:e7:54:1d:7e:19:51:f9:45:e9:
         65:c4:f7:ee:55:57:2e:38:a1:df:38:1f:b7:a4:1b:e2:58:73:
         db:e2:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:42 2024 by rpki-client on console-ams.rpki-client.org