Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
File:                     3133382e3230342e39322e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          HZG+C6jjwJipGE2TtXKBMdXMn0ye4guunNTeHAKM1Jo=
Subject key identifier:   56:C5:82:8C:72:49:DE:11:FF:89:C2:E4:62:17:D1:9D:AD:08:36:03
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       025F0ECD3D942B1B59F938CB9D1FE739344F5D03
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:42 +0000
ROA not before:           Wed 31 Jul 2024 22:20:42 +0000
ROA not after:            Wed 30 Jul 2025 22:25:42 +0000
asID:                     28165
IP address blocks:        138.204.92.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:0e:cd:3d:94:2b:1b:59:f9:38:cb:9d:1f:e7:39:34:4f:5d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:42 2024 GMT
            Not After : Jul 30 22:25:42 2025 GMT
        Subject: CN=56C5828C7249DE11FF89C2E46217D19DAD083603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:6d:5e:31:5c:f9:e6:62:ee:fe:ac:e5:b6:
                    19:5b:fc:d9:7c:b1:49:fd:aa:69:e2:07:9d:1c:e3:
                    54:af:4a:a9:5a:78:d1:f0:e3:04:4a:56:15:8e:cc:
                    9f:11:9e:de:33:34:af:36:10:0c:3b:bd:de:c7:b2:
                    37:53:1a:bf:1d:45:de:ec:aa:5b:91:c2:55:60:b2:
                    55:d2:22:c5:0c:3a:39:0b:a3:76:fe:a8:6f:e6:5a:
                    04:b1:6f:0a:86:a3:33:ae:d2:9b:d0:7d:6e:ae:57:
                    05:19:0d:ae:29:af:29:ec:5b:42:cd:92:31:ae:d8:
                    70:67:bb:aa:d3:48:42:95:a3:e6:2b:b1:73:e0:54:
                    cb:59:3e:1f:30:6d:8f:38:9c:ad:10:db:ae:00:65:
                    e6:d3:d6:56:53:48:21:d3:47:99:5f:40:8a:86:43:
                    5a:ec:d5:3d:d3:a8:79:e1:5a:2f:f9:93:5a:cd:59:
                    ba:32:8c:14:ca:9b:47:d4:ca:5d:b0:57:7e:aa:c0:
                    3d:fa:70:fc:4d:e9:d4:9e:99:f0:84:47:02:9a:aa:
                    b2:51:99:00:12:e8:74:c5:d2:d9:21:b9:e7:0a:02:
                    62:63:c5:e9:b2:06:06:a1:7f:74:5a:4f:11:07:05:
                    83:90:4d:68:8a:fd:00:79:ce:bb:64:84:a1:dc:ec:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:82:8C:72:49:DE:11:FF:89:C2:E4:62:17:D1:9D:AD:08:36:03
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:0f:5c:41:63:e2:31:15:1c:0c:97:1d:53:6b:5a:e6:30:55:
         7c:2f:a2:a4:ae:48:86:c5:a8:7d:48:14:c9:81:34:1e:d5:67:
         0c:05:48:32:eb:30:ec:95:15:c3:74:75:ba:66:bb:80:0b:41:
         bf:c7:af:14:cc:2f:1c:d8:43:f1:19:75:3e:c4:ae:cf:d6:25:
         b0:98:f8:e7:12:f9:87:9f:95:4c:5f:7c:28:a0:0b:38:42:29:
         78:5b:e1:18:d8:3d:9e:66:68:e2:57:01:ad:6e:73:ff:e0:97:
         b9:a9:49:94:80:4b:d3:e9:d7:b3:7b:d0:fd:62:b2:a2:8a:31:
         3d:46:4e:70:d4:25:e4:8a:00:c7:a8:27:e8:5f:5e:76:86:0f:
         12:85:7f:6d:0f:d1:db:d8:e4:08:b9:8a:82:6a:7c:7d:ed:f1:
         8e:08:c0:7f:81:65:a9:f6:6a:2e:de:25:5f:7f:fa:63:2b:1b:
         d9:9a:33:fa:6e:63:76:4c:5b:90:e8:41:a1:5b:d2:cc:72:fc:
         7d:bd:76:01:72:ef:08:87:e4:c9:4f:fd:db:df:66:5c:7a:e2:
         d7:dc:74:3a:39:fb:7b:5e:18:94:f0:f4:64:ec:8b:77:8d:b1:
         f3:fa:05:0a:c5:fd:d6:b6:93:f8:f2:a0:56:09:98:99:9c:b5:
         3a:6b:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:42 2024 by rpki-client on console-ams.rpki-client.org