Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa
File:                     3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          CRhb79erJCBAojZyI84kQgMDKYiTxox37s/qrqGtw5o=
Subject key identifier:   A5:6A:0F:3A:74:9E:5A:3A:47:A5:9B:24:29:05:82:0E:73:42:D9:37
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       6FBC0BCC212F3189FDF65939B3690A1B89850AAF
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:22 +0000
ROA not before:           Wed 31 Jul 2024 22:20:22 +0000
ROA not after:            Wed 30 Jul 2025 22:25:22 +0000
asID:                     28165
IP address blocks:        131.255.102.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bc:0b:cc:21:2f:31:89:fd:f6:59:39:b3:69:0a:1b:89:85:0a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:22 2024 GMT
            Not After : Jul 30 22:25:22 2025 GMT
        Subject: CN=A56A0F3A749E5A3A47A59B242905820E7342D937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:27:25:c1:0f:fc:ba:64:8e:e2:dd:6c:09:
                    77:dd:76:c7:97:d9:14:1d:f8:0e:f5:c9:91:f2:5c:
                    a9:fe:a2:87:6f:14:d5:05:19:86:a0:2d:4c:35:5d:
                    32:f0:1f:87:6b:1c:65:55:72:d5:9a:c3:13:62:2b:
                    19:31:46:87:b1:a7:3c:b3:31:6b:e9:a9:ae:f4:ca:
                    58:42:c1:ef:ed:95:89:d4:21:90:7b:b5:17:96:64:
                    9f:51:a6:ab:0a:cd:5c:c7:b2:e2:5f:dd:4d:48:53:
                    f3:9b:d8:3d:7e:b5:92:72:e9:91:c9:54:87:0f:a5:
                    37:aa:8b:e1:68:91:e4:2c:c6:4c:07:cb:97:39:2c:
                    e3:f6:8b:4a:39:97:66:8b:26:a4:82:6b:a6:3f:65:
                    28:b3:62:38:7f:b5:9c:80:4b:db:99:d2:48:8a:e6:
                    0e:c5:39:83:c9:78:06:d4:68:ae:5b:47:e2:1a:e4:
                    53:2b:b2:ff:29:b6:e7:d9:6b:67:c6:04:40:22:94:
                    e7:2c:16:48:ed:30:41:21:58:ba:75:e4:9f:14:30:
                    89:d4:a7:1f:31:a2:73:bc:8d:b6:18:08:de:ba:14:
                    64:b8:44:70:74:61:39:75:0f:a4:15:ea:ee:9e:6f:
                    a4:db:08:8a:eb:4f:ba:2e:05:a8:04:98:a6:c1:c9:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6A:0F:3A:74:9E:5A:3A:47:A5:9B:24:29:05:82:0E:73:42:D9:37
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:1a:60:b1:38:99:2b:9b:92:c9:d0:1c:f6:aa:b4:7a:4b:6b:
         ba:f1:53:5d:42:24:48:cd:5f:f6:bc:73:2f:16:e0:03:2c:34:
         a9:d6:97:fd:73:6f:c7:3f:b4:f0:51:f9:ec:74:dc:90:3c:61:
         0d:d9:b7:91:92:b6:a0:23:4b:48:91:da:c6:8e:72:b2:73:45:
         a5:d6:35:cc:6d:1e:db:e2:97:49:07:e4:8c:e6:eb:91:a3:01:
         60:80:ba:b7:00:39:a3:b6:ac:05:33:90:96:4e:36:3c:5c:7b:
         95:d8:3d:2c:ff:ea:8a:98:22:29:d8:b0:45:08:dc:7f:7a:bc:
         e0:fc:82:0f:55:3e:0c:13:75:5b:4a:13:17:d4:02:93:15:d2:
         cd:1b:d2:20:a7:79:a1:23:5b:9b:18:12:15:14:89:e1:d5:3e:
         85:4a:10:cd:bc:5d:e6:e7:df:a7:d6:45:8e:b2:36:44:b8:12:
         e8:3c:d2:15:0a:07:9d:5a:90:1e:04:24:4f:a3:40:36:dd:1f:
         15:b7:78:8e:5d:9c:54:2c:36:c8:b2:cd:36:53:b5:47:18:a1:
         1c:26:68:d1:bf:a0:3e:ad:b1:e3:91:92:61:a7:cd:2f:81:bb:
         8f:f1:ae:7d:e8:3c:14:fb:8a:68:09:65:d0:4b:86:d1:4c:b8:
         bd:b5:4f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:42 2024 by rpki-client on console-ams.rpki-client.org