Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa
File:                     3133382e3230342e39322e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          ossl2By4JSDaMzXUl3BETWlFjOmTe0acWoKz0NOjl1o=
Subject key identifier:   6E:CC:6C:69:BC:E3:E6:EF:81:B0:AF:7E:3F:6F:CC:CF:BC:45:59:D9
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       218CECFC96B8D5D4E1F8735AA7BD8D5AC5CBE681
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:39 +0000
ROA not before:           Wed 31 Jul 2024 22:20:39 +0000
ROA not after:            Wed 30 Jul 2025 22:25:39 +0000
asID:                     28165
IP address blocks:        138.204.92.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8c:ec:fc:96:b8:d5:d4:e1:f8:73:5a:a7:bd:8d:5a:c5:cb:e6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:39 2024 GMT
            Not After : Jul 30 22:25:39 2025 GMT
        Subject: CN=6ECC6C69BCE3E6EF81B0AF7E3F6FCCCFBC4559D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:51:10:f4:ba:08:0c:95:23:57:0b:21:68:
                    d2:85:88:9c:99:aa:d3:77:11:b0:7f:85:6a:8d:cd:
                    bc:0e:fd:cd:7c:68:6d:c5:a0:e7:1f:84:dd:0c:d8:
                    21:98:a2:c9:cd:5d:a6:67:88:1d:38:2c:45:ac:5f:
                    ce:46:48:3a:22:f1:1b:e0:81:58:ab:ec:b7:d4:8f:
                    3c:02:e9:38:5a:35:eb:79:88:28:f8:b1:01:22:86:
                    78:13:14:d7:b2:5b:cf:b4:20:e6:05:95:37:2a:4b:
                    4f:93:5e:2c:da:11:5e:25:84:b7:64:b7:7b:78:21:
                    0b:cc:57:24:d7:db:2f:2f:02:fc:b0:ff:4e:ba:63:
                    29:8c:50:6a:37:a2:40:80:0c:f5:ea:d0:69:80:2a:
                    16:49:23:60:fc:d1:f3:55:81:c6:b6:ee:5b:9e:fb:
                    58:eb:9a:ca:5f:b1:72:6f:3e:5c:4e:56:5d:9e:57:
                    94:ad:3c:4a:9e:a1:18:e9:b7:05:8b:bd:6b:e5:d1:
                    a0:d4:8b:fe:5f:2a:c2:bc:dd:15:6b:e3:e1:a3:76:
                    0c:78:56:a0:c8:3e:e3:a2:4f:3e:11:6b:16:21:92:
                    84:eb:2a:39:70:44:ff:e4:52:fd:d6:7e:09:0d:e1:
                    8f:b7:c2:03:6a:93:16:1a:56:57:85:b8:5a:73:e9:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CC:6C:69:BC:E3:E6:EF:81:B0:AF:7E:3F:6F:CC:CF:BC:45:59:D9
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:35:fe:81:63:40:0a:76:90:7b:5d:87:54:e1:a5:cf:1c:26:
         6f:ef:a2:6b:c1:6d:d9:65:b3:5d:aa:30:31:e4:c1:57:32:49:
         b9:53:b3:ad:cf:af:56:db:f5:7f:cb:15:4a:bd:10:b1:e1:59:
         f8:60:a3:5c:48:39:0d:47:ca:ec:92:7c:9f:cf:87:f3:4b:e8:
         3b:23:c6:0b:90:1c:3d:b6:f0:32:3c:fb:46:cb:ac:d2:c7:63:
         6a:c1:5f:da:09:91:0b:22:16:94:ce:78:14:06:58:4f:3f:85:
         14:e3:23:ef:b4:6f:ec:a7:36:06:6c:4a:f0:f8:64:0c:07:15:
         8d:62:71:30:71:f0:97:9e:3a:f6:cb:72:9d:9a:d6:e7:b4:fd:
         9c:58:6d:ce:a2:e7:26:8b:83:ce:77:92:ad:8e:84:c4:e2:e5:
         4b:1b:19:8e:71:e5:b0:87:06:6c:ad:6f:90:dd:27:1b:e7:7e:
         97:b7:bc:33:a2:33:10:f5:15:68:c2:30:77:49:af:f2:bf:82:
         37:07:b2:4e:dc:06:54:ab:15:e9:36:2b:6f:75:d5:5c:cb:ec:
         79:de:29:30:2a:be:58:a1:9b:3c:fc:d0:ea:3e:86:e6:d9:2a:
         71:90:ea:4a:80:c2:7e:81:3e:64:0d:88:45:15:24:aa:4d:1e:
         94:32:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org