Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          Vpsb+lfgz8e5kRBolp6AuMjAf+YjXh4z6TXnkUe2vU8=
Subject key identifier:   77:6A:AC:09:C3:97:B6:18:EE:B4:3A:79:5E:15:E4:54:7D:E6:C4:4C
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       3750841265E63ABDC10FF7374BD5E43F48AC06EE
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:36 +0000
ROA not before:           Wed 31 Jul 2024 22:20:36 +0000
ROA not after:            Wed 30 Jul 2025 22:25:36 +0000
asID:                     28165
IP address blocks:        177.184.192.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:50:84:12:65:e6:3a:bd:c1:0f:f7:37:4b:d5:e4:3f:48:ac:06:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:36 2024 GMT
            Not After : Jul 30 22:25:36 2025 GMT
        Subject: CN=776AAC09C397B618EEB43A795E15E4547DE6C44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:70:29:fa:14:ef:78:2d:9d:44:1b:19:f0:
                    7f:37:44:4c:06:b6:37:6c:c2:f4:63:19:b5:fb:88:
                    2d:22:77:b6:70:4a:9d:a8:aa:d4:b9:4c:ec:e5:b5:
                    68:d2:fa:65:c2:ab:cc:26:2d:a4:01:6e:76:13:5c:
                    71:96:de:88:d0:e2:8e:53:68:21:18:c8:25:20:ed:
                    03:72:89:c8:fa:17:58:cb:d9:ee:e6:10:2c:78:55:
                    b7:11:4c:f8:06:dc:fc:10:00:e3:e4:80:f2:07:d6:
                    23:bf:26:6a:e0:95:43:bc:80:1a:1a:8f:c4:1a:22:
                    14:25:b0:86:64:b4:30:68:23:68:f7:d9:a3:50:af:
                    62:f7:f8:9c:2d:13:cc:be:2a:f8:aa:ad:a7:80:09:
                    db:b1:a7:d4:a0:23:5b:7d:f7:b7:38:cf:89:86:bc:
                    a2:5b:15:40:88:9d:9f:08:cf:1d:f0:47:9d:6a:d8:
                    ac:c2:47:25:6a:97:f8:19:46:91:bb:fa:5c:46:75:
                    72:d9:23:b8:90:f8:87:4b:15:d2:b8:7c:14:e3:cb:
                    18:96:cb:9c:9d:4e:43:e6:a7:a3:58:59:15:c6:de:
                    7a:40:3f:e7:0b:bd:e2:f5:cf:3c:54:44:05:cc:0e:
                    88:aa:9c:02:a4:fb:b9:4b:77:4f:c7:a4:72:5f:0d:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6A:AC:09:C3:97:B6:18:EE:B4:3A:79:5E:15:E4:54:7D:E6:C4:4C
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:23:f3:c6:63:ef:37:2d:bd:86:64:6f:ef:f8:3a:95:c0:
         fe:61:6f:6f:79:3a:e4:53:8f:8f:4a:ff:8c:10:4f:bf:cf:f4:
         de:31:37:1e:05:98:81:86:c4:bc:c4:b4:0a:7e:b8:dc:e8:f1:
         87:0b:c2:80:a6:cd:d9:a5:65:ea:01:cc:a9:4b:c2:0e:df:5f:
         db:29:b5:17:2c:fe:5d:c8:28:14:ec:74:1e:ca:e1:0d:43:3d:
         6e:25:3b:a6:1c:ae:94:57:20:68:87:bd:2a:ea:9b:82:95:4d:
         ed:6c:c1:f6:db:4a:9d:ec:11:29:0f:39:4e:a4:f0:ad:5a:60:
         d7:95:2e:28:8d:6a:b2:f4:b3:aa:ca:fe:f1:11:85:77:1f:00:
         07:49:45:f5:dc:e4:fb:e7:49:00:2f:ed:b0:f1:33:fe:67:92:
         d5:7d:65:1a:ff:40:e7:14:99:8f:3f:c2:17:8d:fa:c3:39:b3:
         dc:dc:d7:51:3a:2a:d6:cd:10:ea:06:1f:50:cc:08:48:94:87:
         b3:0e:58:c0:36:54:ce:bc:60:24:c6:c3:ff:a4:47:80:37:54:
         da:cb:16:e1:49:a2:10:ad:44:69:ca:86:f2:a8:92:be:fa:2d:
         e2:d5:d9:67:70:27:49:8f:59:c7:70:4a:59:fc:48:c2:ec:a4:
         d2:c4:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org