Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa
File:                     3137302e38312e3137312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          53I536/yBPQ8XQnR0c2wyTI88oiVNw3AXYC3al43iy0=
Subject key identifier:   6E:47:50:B4:7A:B8:58:F7:13:A0:F6:F2:7D:D7:F1:DB:5B:C1:E0:B8
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       73D891113B44F2D7788D4CD735B070B856A5DD88
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:28 +0000
ROA not before:           Wed 31 Jul 2024 22:20:28 +0000
ROA not after:            Wed 30 Jul 2025 22:25:28 +0000
asID:                     28165
IP address blocks:        170.81.171.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d8:91:11:3b:44:f2:d7:78:8d:4c:d7:35:b0:70:b8:56:a5:dd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:28 2024 GMT
            Not After : Jul 30 22:25:28 2025 GMT
        Subject: CN=6E4750B47AB858F713A0F6F27DD7F1DB5BC1E0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:b3:43:5e:54:ba:80:9b:9d:d3:ea:5a:c2:
                    79:c9:5e:1d:c0:20:8e:3e:bb:05:1b:d5:77:1c:3c:
                    52:fe:8f:60:ea:1e:81:9e:8a:04:eb:4b:e2:80:96:
                    74:a7:17:14:c9:a2:dc:6f:4c:18:7e:b8:39:ff:95:
                    e9:55:3f:34:46:a6:b2:b0:e8:e1:9f:fe:27:2b:52:
                    31:a6:36:66:ae:44:b1:97:ae:b6:b2:06:ac:9f:df:
                    e5:c7:06:ab:04:e1:30:d2:87:e6:38:4e:90:5e:94:
                    11:d9:aa:fd:1b:62:b9:e0:5b:7c:f9:13:6a:7b:1e:
                    6a:ea:67:8f:da:3e:b3:5b:cc:4d:c7:9e:23:47:e1:
                    9c:5d:68:b5:ea:83:d9:ea:8a:98:e6:c0:84:5d:73:
                    bd:2f:75:c4:ee:26:46:d9:73:3e:eb:a2:56:f7:75:
                    cd:4d:fb:bd:88:51:a2:ab:63:ea:dd:3c:61:a4:d4:
                    ca:26:5f:c8:f0:84:c2:c6:89:3d:24:29:34:53:08:
                    32:03:04:79:93:65:b8:d6:45:72:32:d9:cd:5c:5f:
                    b5:68:58:68:4e:7c:f5:38:05:19:95:f4:11:fc:b6:
                    da:60:90:db:3e:5e:1a:d5:11:24:cb:27:99:e3:e1:
                    1f:87:6a:4d:ed:5d:fa:47:82:d4:fb:74:6e:87:c0:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:47:50:B4:7A:B8:58:F7:13:A0:F6:F2:7D:D7:F1:DB:5B:C1:E0:B8
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:54:35:2c:e1:40:7b:47:a4:7d:36:2c:f6:a1:ae:ef:ff:42:
         da:d9:d5:db:74:5c:33:e4:32:87:94:ac:b4:72:f9:60:20:2f:
         6d:d4:64:45:ca:4e:97:0d:de:ab:82:d2:bd:98:c0:1d:a0:52:
         ec:02:5e:ae:c9:1c:98:69:6b:02:e2:59:6a:8a:fd:d5:cc:40:
         5f:14:44:c3:ee:67:42:aa:69:5e:55:71:2a:b6:65:30:34:f6:
         7d:37:a1:34:bb:1d:a6:11:19:04:48:0e:ab:b8:92:9f:ad:72:
         3b:2c:99:e9:79:55:ae:37:6d:d9:6e:bb:8f:7c:d0:73:4d:b7:
         bb:46:66:e9:42:86:5b:a2:2c:7f:f1:31:a7:5c:6c:c4:91:76:
         35:f1:66:96:ae:3c:be:0b:08:ab:57:e5:6a:e9:f2:e5:d7:f8:
         5c:3f:e7:97:18:d5:7c:f1:43:db:eb:ec:52:11:b4:42:8c:e9:
         69:11:d0:cd:cf:06:4a:a9:38:de:ea:d8:31:8f:2e:1a:a8:a3:
         b3:71:b1:b3:96:45:0e:9c:b7:f6:10:06:90:df:b6:65:c5:64:
         a2:3c:2f:e1:53:05:71:a1:6f:4f:dc:44:15:e1:44:d4:39:00:
         3d:69:c6:68:fa:a6:e7:f1:64:dc:e7:d3:a8:77:df:d5:ff:2a:
         fe:84:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org