Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa
File:                     3133382e35392e3134392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          k3uPT7b6Ztc2CbtaBJLChTjcBF1fvBNvnTCm4U8p8MM=
Subject key identifier:   9C:78:1F:36:D8:61:57:95:ED:17:29:46:84:56:33:2A:E3:34:5B:DA
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       794F886BD8F3C7D08D8F8FC6CEBE21EB0319CF08
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:33 +0000
ROA not before:           Wed 31 Jul 2024 22:20:33 +0000
ROA not after:            Wed 30 Jul 2025 22:25:33 +0000
asID:                     28165
IP address blocks:        138.59.149.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4f:88:6b:d8:f3:c7:d0:8d:8f:8f:c6:ce:be:21:eb:03:19:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:33 2024 GMT
            Not After : Jul 30 22:25:33 2025 GMT
        Subject: CN=9C781F36D8615795ED1729468456332AE3345BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:32:0b:a5:7f:f8:44:60:59:d1:18:3e:da:
                    05:7b:d2:6e:bd:b9:4f:f4:d7:eb:09:ea:06:bd:57:
                    78:5b:d4:28:59:ce:25:55:c5:da:62:f8:fa:22:a7:
                    ed:ed:44:fb:82:b7:45:b4:fa:6f:ad:f3:eb:fc:e0:
                    24:a3:52:ed:7c:fa:ed:20:3f:8b:b6:cb:1a:55:b9:
                    24:15:73:54:87:e9:c0:85:18:29:27:be:eb:08:96:
                    87:95:2b:62:ab:12:df:15:11:2f:dc:2d:26:73:a4:
                    13:22:de:ca:85:e7:34:6e:1e:91:ec:a9:18:26:e1:
                    19:18:ba:97:cf:e4:48:c4:4e:24:96:8e:4f:1c:bb:
                    92:09:41:a8:c7:54:59:c0:6f:92:e6:ef:db:d6:74:
                    dd:5b:9b:05:f7:69:c0:88:c7:a7:8b:44:82:d1:7c:
                    cd:9b:1a:b7:ae:e7:d3:8b:a7:fd:54:36:1c:d9:2c:
                    a5:d1:f0:86:01:5a:d3:96:f7:63:8c:08:ff:55:92:
                    8b:b1:0e:f3:50:d4:8d:3b:27:23:0d:9a:f6:92:ce:
                    30:d5:5c:25:79:06:27:f6:30:48:00:d6:1d:84:6c:
                    f2:67:62:4c:65:64:63:1f:53:20:f5:57:fe:e6:89:
                    2f:ed:f8:b5:34:52:04:23:2e:78:aa:86:ac:1e:c5:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:78:1F:36:D8:61:57:95:ED:17:29:46:84:56:33:2A:E3:34:5B:DA
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:45:54:99:e3:49:71:a6:65:b5:a8:d1:1a:ee:1f:f2:99:
         ad:0f:8d:d2:7a:38:92:ca:35:8f:2d:5a:fa:18:7e:f8:d3:69:
         3d:b3:db:01:0c:a0:a3:23:54:1a:68:07:43:8a:de:36:e1:1a:
         a6:08:fe:fa:41:bf:d2:a8:fc:95:0e:51:f6:5a:a2:1c:84:f8:
         c0:66:5b:50:30:9f:e9:37:f8:f3:e8:ac:a5:db:00:62:dd:37:
         69:b8:2d:7f:62:a3:27:f8:8b:aa:4e:65:5f:09:8f:af:fc:14:
         d8:87:82:2b:0d:53:ad:b0:da:6c:36:32:14:5a:ae:25:f1:c3:
         d1:e9:39:15:e5:54:73:25:92:79:77:14:c6:20:37:6c:38:6f:
         2a:38:b0:4e:b8:ed:19:2b:ff:21:0c:0a:13:65:67:e2:06:58:
         dd:20:1a:86:e4:a6:e1:aa:48:31:19:75:92:82:be:21:61:75:
         d9:6d:9a:84:29:42:d1:e2:16:f7:74:01:34:e9:d2:37:6c:36:
         0b:48:27:8a:37:3d:92:15:75:72:bc:1f:be:d4:ae:0a:e4:d6:
         aa:98:73:49:b4:a1:75:53:b2:67:69:08:90:18:d1:e0:20:57:
         03:66:a1:45:96:55:47:c9:83:a2:43:e1:1d:14:10:7e:03:ae:
         59:5e:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org