Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32322d3234203d3e203238313635.roa
File:                     3133382e35392e3134382e302f32322d3234203d3e203238313635.roa (raw, json)
Hash identifier:          e3jXzynpvMH3CmVYyg2y/53i5aEalcQq5Q8BvfYB2SY=
Subject key identifier:   7F:69:90:06:80:11:17:1D:C5:FB:F6:59:86:E3:8D:B6:34:F2:7E:B1
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       05570513EF5C4A35DADF76C4B66311927FFC072F
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32322d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:31 +0000
ROA not before:           Wed 31 Jul 2024 22:20:31 +0000
ROA not after:            Wed 30 Jul 2025 22:25:31 +0000
asID:                     28165
IP address blocks:        138.59.148.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:57:05:13:ef:5c:4a:35:da:df:76:c4:b6:63:11:92:7f:fc:07:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:31 2024 GMT
            Not After : Jul 30 22:25:31 2025 GMT
        Subject: CN=7F6990068011171DC5FBF65986E38DB634F27EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:ac:b3:5b:e9:7a:ef:07:91:d5:c5:b0:bf:
                    72:93:f5:2d:d5:e2:98:2a:6d:90:76:da:32:4e:10:
                    27:e2:f2:18:85:78:81:6d:7b:2f:44:d8:49:e1:3e:
                    b5:9e:ae:c1:86:69:b6:16:01:79:bc:bf:fa:84:36:
                    50:7d:41:00:c4:e8:f1:ef:c2:62:8b:ba:70:03:bc:
                    e0:e0:98:13:d7:dd:22:f3:2d:52:da:b6:76:38:17:
                    7c:3b:c2:8e:fa:54:4e:66:99:c3:51:8f:0b:28:64:
                    43:b8:80:ec:1f:9a:03:de:47:61:e5:53:5a:3d:f6:
                    75:7a:89:a1:52:fa:6c:07:54:60:29:ca:b5:85:91:
                    79:f2:d2:d2:d3:dd:94:d0:75:f9:e0:a2:e8:98:c8:
                    3c:bd:68:99:a0:8c:7f:54:02:dd:91:2a:d7:97:c7:
                    d9:95:2f:82:c8:1c:e4:cd:88:81:7f:11:79:4c:b3:
                    6f:2e:0e:e6:12:38:53:46:40:70:15:48:ab:11:b8:
                    c8:06:5e:92:31:4a:03:4a:29:c0:f9:4b:7c:ae:a6:
                    66:5b:57:98:c8:3d:c6:52:29:ad:bf:3b:25:96:84:
                    8e:2f:06:f4:6c:aa:ad:0e:ef:96:31:20:7e:5f:0a:
                    94:21:53:ae:b1:a0:6a:73:47:e5:83:36:10:31:c3:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:69:90:06:80:11:17:1D:C5:FB:F6:59:86:E3:8D:B6:34:F2:7E:B1
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32322d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:be:20:5d:39:30:fc:c1:29:82:9d:9d:91:00:f5:1c:05:93:
         88:27:d2:d8:42:e1:21:1d:31:df:1d:0a:de:1c:1e:e4:7f:7c:
         01:24:7b:13:80:47:18:18:11:d0:55:8b:ec:2e:b0:02:b2:a4:
         32:8f:44:50:fc:06:20:ad:38:bb:10:89:8c:87:4a:d2:84:ba:
         d1:3d:c5:11:dc:fc:51:e8:40:db:0d:92:62:91:98:8e:0d:e8:
         a8:5f:c7:17:1b:2a:e7:35:7e:2f:bd:ed:2d:d8:5d:e9:fc:fe:
         19:7b:56:ad:3a:cd:17:5a:94:f2:21:85:75:dd:b5:9e:bd:83:
         d2:d0:f2:21:84:9a:25:75:b9:55:10:52:5d:e3:02:4f:39:69:
         7f:09:14:0e:85:a2:3e:ac:c6:cc:f9:d8:fc:56:dd:e3:74:9e:
         fa:85:eb:83:c6:da:66:42:e1:ce:22:40:01:9c:db:76:f3:16:
         69:e4:de:ca:5a:7a:06:ec:26:37:26:e9:04:48:d4:93:51:f3:
         36:f3:a7:71:90:18:f7:0d:aa:85:95:5c:5c:bb:23:06:25:89:
         6c:03:04:3c:ed:7b:15:90:70:71:70:17:2b:a6:67:9a:63:fa:
         72:29:56:de:40:79:06:43:28:ea:9f:5f:5f:e9:2a:f6:f8:34:
         52:3d:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org