Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          He4yX16ckBRegKZa93Sqf9tu8RVYlMYneiz6ORK1v/c=
Subject key identifier:   96:71:BF:B8:C5:F7:05:39:DA:0D:BE:06:3A:18:1F:24:50:86:9B:D2
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       200BEF0C38443F480B3C4794BFEDF3FCCA66AE02
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:25 +0000
ROA not before:           Wed 31 Jul 2024 22:20:25 +0000
ROA not after:            Wed 30 Jul 2025 22:25:25 +0000
asID:                     28165
IP address blocks:        177.184.192.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0b:ef:0c:38:44:3f:48:0b:3c:47:94:bf:ed:f3:fc:ca:66:ae:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:25 2024 GMT
            Not After : Jul 30 22:25:25 2025 GMT
        Subject: CN=9671BFB8C5F70539DA0DBE063A181F2450869BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:d8:67:88:ee:4a:61:d6:e2:49:4d:2a:56:
                    ee:d5:1c:08:1e:e8:2e:40:3e:49:16:fc:93:be:f5:
                    af:7c:10:31:b7:cf:0d:87:ea:5f:77:cc:b4:fc:8f:
                    8c:23:2c:da:48:d5:d3:f3:f2:2d:9c:00:bb:e3:40:
                    1a:0d:aa:2e:3f:7c:2d:a1:40:10:94:ea:6a:a6:2c:
                    fd:ec:f3:21:b5:0e:a4:10:0a:3a:1d:e5:3d:dc:9d:
                    da:d0:a2:7c:ca:5d:61:79:ca:ad:ae:8e:b4:74:a6:
                    16:71:01:0c:6c:7e:37:23:37:a4:9f:45:5d:8b:eb:
                    80:ee:45:7d:5d:89:96:db:56:44:9f:97:20:bb:5c:
                    cc:c0:3e:39:a6:50:fe:22:1c:36:89:d6:ea:44:e0:
                    79:1d:d3:1a:7b:e7:5e:03:e3:da:bb:a9:84:c8:83:
                    3b:f2:59:49:c1:76:0d:bd:72:75:d8:9e:df:4b:07:
                    5a:2d:f3:81:ab:c6:b1:6a:fd:d2:2b:ae:f8:e1:bf:
                    6f:40:93:0c:40:e3:41:fc:57:99:ac:05:b0:36:02:
                    36:1b:d7:b9:bc:b8:8f:1c:e8:5a:55:4f:7f:09:42:
                    49:e6:02:64:84:4e:05:3d:bf:b1:84:d2:bd:d1:b1:
                    d9:1b:f2:c6:2b:61:f0:04:2f:f6:0b:ef:74:f9:3b:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:71:BF:B8:C5:F7:05:39:DA:0D:BE:06:3A:18:1F:24:50:86:9B:D2
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:d0:dd:39:54:e8:48:4e:46:d3:91:ca:0a:5e:98:aa:4c:
         a9:06:c8:ce:4c:f8:d4:b9:b2:85:ec:dd:82:95:5c:05:7d:1a:
         ad:f1:9e:4c:30:fe:dd:89:85:dc:c4:62:c9:7a:b9:d1:a5:59:
         31:0d:5f:c9:69:81:5f:44:4f:e4:1c:a6:c9:79:8f:e2:96:2e:
         c7:bc:b3:80:77:9b:f9:3a:47:fb:32:57:42:d9:1f:c7:d6:c8:
         9e:db:0e:10:c0:a7:67:c2:73:cd:7d:4c:af:47:34:a5:d4:87:
         8a:a3:cb:b9:09:4c:9b:2f:76:d2:64:a8:f4:4d:d5:fb:76:5f:
         97:89:41:81:b8:53:2c:5b:7a:25:d8:37:00:1b:ba:8e:6e:20:
         f4:83:fd:00:94:09:e2:9e:fe:29:7f:60:47:c8:48:7c:a2:f4:
         8a:e1:d7:2c:e2:d0:0d:ee:fc:27:e6:b0:9a:b1:a0:80:84:10:
         8c:fe:6e:1e:b9:01:e9:99:f5:2e:db:2d:33:46:30:9e:e1:4d:
         eb:5a:7f:01:f4:5f:83:46:1b:6b:43:2c:a7:d0:64:4a:db:27:
         54:90:fa:61:87:25:72:06:a2:e5:4c:fe:8c:80:c9:35:a6:37:
         1a:d7:35:9b:7f:40:c3:a9:1e:c1:db:8b:19:5f:8d:03:28:a3:
         97:71:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org