Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa
File:                     3133382e35392e3134382e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          6lmtJhoqFpBm/0SOTxX4fhMlI55WWghrrKXj+fMa0e0=
Subject key identifier:   0C:6D:33:5F:B4:2A:4F:0A:15:CC:F4:88:15:94:63:AB:43:D5:0D:9B
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       021B9B8EFD8BB16F7C93B05031CC42DC01C7A566
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:29 +0000
ROA not before:           Wed 31 Jul 2024 22:20:29 +0000
ROA not after:            Wed 30 Jul 2025 22:25:29 +0000
asID:                     28165
IP address blocks:        138.59.148.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1b:9b:8e:fd:8b:b1:6f:7c:93:b0:50:31:cc:42:dc:01:c7:a5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:29 2024 GMT
            Not After : Jul 30 22:25:29 2025 GMT
        Subject: CN=0C6D335FB42A4F0A15CCF488159463AB43D50D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:80:de:df:5c:dd:ef:88:cb:2c:dd:38:30:
                    f2:6e:3d:08:64:01:e2:ee:dd:1c:ab:fa:f4:01:84:
                    f2:db:35:15:86:cf:4b:f5:cb:31:7d:03:18:90:b5:
                    7a:bf:34:30:52:08:1a:4c:31:16:f5:a9:60:1a:f7:
                    1b:4c:86:f0:6b:1e:6f:d7:8e:53:3d:3a:6c:2a:74:
                    91:14:51:e9:eb:86:a3:69:2c:1c:68:96:35:59:70:
                    4e:73:97:68:4e:3e:f9:fe:9d:b7:e1:31:0c:2c:21:
                    aa:dc:78:aa:2d:c3:45:72:d7:fd:15:51:aa:11:be:
                    9c:05:41:62:20:08:80:9a:04:59:c3:17:5b:2c:37:
                    58:ca:89:ab:25:37:a7:a4:18:67:63:1f:3d:1c:7e:
                    e8:ff:35:0b:66:8c:d3:bb:0c:a6:6b:39:54:d8:6b:
                    c8:cf:4d:5e:54:7d:e3:15:92:c9:51:cd:80:d5:38:
                    e2:db:97:f6:ae:16:3f:02:24:c8:be:1c:e0:82:a2:
                    3a:ac:4d:e8:61:0f:57:07:38:db:20:5b:42:29:15:
                    4f:b3:e9:2a:7d:88:49:99:e0:92:9c:88:92:eb:58:
                    ac:02:5c:24:d2:f3:aa:0c:8e:1c:8b:f1:92:0e:e2:
                    ac:20:b0:67:df:ce:83:ae:26:e8:47:fa:88:3e:e1:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:33:5F:B4:2A:4F:0A:15:CC:F4:88:15:94:63:AB:43:D5:0D:9B
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:43:67:c7:22:97:58:da:8e:ad:b3:07:5d:b0:6d:50:eb:
         e6:63:a4:9b:71:65:a0:87:16:76:6f:23:01:f0:4c:5a:eb:72:
         bc:b6:58:e8:47:87:51:f9:e4:67:d0:dc:c7:4b:3d:f3:b0:4f:
         56:e1:3a:1b:89:22:8f:a7:a3:c4:6c:63:78:48:54:ac:ba:e8:
         28:73:86:85:40:2a:d7:9f:f2:7f:6c:8d:9a:71:7e:67:a6:0f:
         07:e0:e0:ba:c1:b0:6a:99:8d:68:33:68:b8:80:6a:43:02:7c:
         db:dd:38:51:27:ff:90:a6:11:ce:1a:31:50:49:9f:db:8f:10:
         ef:d2:40:50:33:02:44:bf:ed:ea:60:1b:7b:25:51:6b:d7:71:
         ae:b0:0c:8f:ae:20:01:2e:5e:4f:d9:95:9d:7a:d9:26:97:13:
         c1:3e:6a:7a:42:36:4f:42:96:d1:6f:d8:9d:31:f4:74:12:db:
         49:6d:72:2c:de:1f:f8:95:f3:2e:b8:dd:7c:cc:17:f8:aa:90:
         02:e8:f0:1f:96:d7:61:8a:53:76:0b:2e:a4:70:39:83:c7:3a:
         97:1e:4d:72:e8:25:04:0f:54:dd:96:b3:93:ba:0d:42:5a:1d:
         25:1b:7d:38:a9:1f:78:3e:4d:01:24:4e:a7:a0:52:34:96:ac:
         c0:44:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:42 2024 by rpki-client on console-ams.rpki-client.org