Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139342e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3139342e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          wVnT+1GCmxlOgsKP5vZEmgfEEpeKdgoHnM7UAgwmuw4=
Subject key identifier:   D3:E5:8F:04:D6:32:4E:43:1B:47:73:77:63:D9:88:08:DF:5C:64:27
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       012DB5FFB1DB38ABBF2217BA3CE69F9827342FA7
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139342e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:40 +0000
ROA not before:           Wed 31 Jul 2024 22:20:40 +0000
ROA not after:            Wed 30 Jul 2025 22:25:40 +0000
asID:                     28165
IP address blocks:        177.184.194.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2d:b5:ff:b1:db:38:ab:bf:22:17:ba:3c:e6:9f:98:27:34:2f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:40 2024 GMT
            Not After : Jul 30 22:25:40 2025 GMT
        Subject: CN=D3E58F04D6324E431B47737763D98808DF5C6427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:a2:ab:4c:d8:5f:9a:53:67:9b:13:ea:a8:
                    2d:c7:99:da:77:9d:b4:b7:33:41:32:2a:7a:26:64:
                    1e:64:1d:dd:34:f3:37:c0:93:24:a9:67:aa:b3:9d:
                    fb:bf:cf:e0:92:ca:28:68:95:4e:47:d1:17:2f:9e:
                    88:72:10:90:9a:56:b0:fd:e9:bf:31:08:3e:c0:7a:
                    14:8a:6f:75:b4:3a:d7:3d:a1:bf:31:a3:c7:31:7b:
                    eb:d6:f2:2d:06:b6:3c:4e:4e:8e:c0:0f:a4:f3:39:
                    75:89:74:c6:2e:35:a6:f7:f1:75:c1:33:d4:a9:68:
                    12:61:fc:5d:68:a1:93:ea:56:34:9c:f2:11:65:56:
                    06:58:4c:4b:7f:53:5e:35:68:94:16:42:23:6b:c5:
                    d3:98:c4:ee:28:24:d9:52:d4:74:88:17:f6:7c:73:
                    78:64:8d:11:54:30:5c:29:f6:ad:5d:dc:e1:ec:d3:
                    07:1d:6f:0c:be:2b:9e:05:51:b2:2e:45:6f:9e:42:
                    0c:02:93:2c:5e:39:38:f2:1e:cb:ed:3f:fe:7a:25:
                    8a:eb:a7:ec:1a:7f:bb:77:0f:2b:14:fd:a2:61:b0:
                    87:43:5b:5c:10:54:07:a9:da:ae:6d:1b:04:15:59:
                    55:ed:93:43:a0:ca:c2:4f:98:7d:b5:4e:0f:4a:87:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E5:8F:04:D6:32:4E:43:1B:47:73:77:63:D9:88:08:DF:5C:64:27
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139342e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:a9:06:17:7b:f7:55:e2:a7:de:30:d8:61:2d:1e:0f:e8:
         04:b3:11:b9:22:e3:d7:5e:8b:f2:d5:99:7a:c6:ea:a8:fb:08:
         d9:4f:9c:48:db:23:38:14:f6:4f:c6:5c:ee:70:7f:18:b9:ef:
         18:b8:b5:47:10:bd:fa:b0:f6:15:be:7b:0a:a8:d7:a3:22:56:
         54:7c:02:60:18:aa:82:de:10:0b:d4:f6:fe:25:6c:0c:85:ec:
         fe:3d:ac:bb:aa:c3:00:24:91:ab:4e:2b:b1:fc:98:3f:02:c3:
         3f:06:54:5e:4e:fc:4d:b7:11:2e:51:65:5b:bd:49:d4:00:e1:
         ef:43:8f:54:7d:f1:7a:a1:32:18:53:a3:6e:95:9e:78:cf:08:
         74:0c:17:a6:b0:48:df:02:15:ed:ca:06:2a:b2:93:11:17:bb:
         18:7f:98:87:27:a0:6e:30:44:e5:f5:6d:15:bb:f4:28:aa:8f:
         35:2d:83:21:01:06:fb:cc:8f:3d:7f:ac:99:69:a4:12:75:24:
         0b:b9:6e:2e:37:50:02:74:f4:c4:cc:8e:ae:68:db:6b:88:9e:
         ef:fc:f3:b6:db:14:dd:cb:69:e1:34:c3:76:1d:c8:45:41:c9:
         8c:1c:de:c2:74:99:33:c8:9c:06:66:76:2a:9b:a6:9a:53:5d:
         2f:e5:9b:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAS21/7HbOKu/Ihe6POafmCc0L6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwNDBaFw0yNTA3MzAyMjI1NDBaMDMxMTAvBgNV
BAMTKEQzRTU4RjA0RDYzMjRFNDMxQjQ3NzM3NzYzRDk4ODA4REY1QzY0MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAKKrTNhfmlNnmxPqqC3Hmdp3
nbS3M0EyKnomZB5kHd008zfAkySpZ6qznfu/z+CSyiholU5H0RcvnohyEJCaVrD9
6b8xCD7AehSKb3W0Otc9ob8xo8cxe+vW8i0GtjxOTo7AD6TzOXWJdMYuNab38XXB
M9SpaBJh/F1ooZPqVjSc8hFlVgZYTEt/U141aJQWQiNrxdOYxO4oJNlS1HSIF/Z8
c3hkjRFUMFwp9q1d3OHs0wcdbwy+K54FUbIuRW+eQgwCkyxeOTjyHsvtP/56JYrr
p+waf7t3DysU/aJhsIdDW1wQVAep2q5tGwQVWVXtk0OgysJPmH21Tg9Kh52JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0+WPBNYyTkMbR3N3Y9mICN9cZCcwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzNzM3MmUzMTM4MzQyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxuMIwDQYJKoZIhvcNAQELBQADggEBAI/MqQYX
e/dV4qfeMNhhLR4P6ASzEbki49dei/LVmXrG6qj7CNlPnEjbIzgU9k/GXO5wfxi5
7xi4tUcQvfqw9hW+ewqo16MiVlR8AmAYqoLeEAvU9v4lbAyF7P49rLuqwwAkkatO
K7H8mD8Cwz8GVF5O/E23ES5RZVu9SdQA4e9Dj1R98XqhMhhTo26VnnjPCHQMF6aw
SN8CFe3KBiqykxEXuxh/mIcnoG4wROX1bRW79CiqjzUtgyEBBvvMjz1/rJlppBJ1
JAu5bi43UAJ09MTMjq5o22uInu/887bbFN3LaeE0w3YdyEVByYwc3sJ0mTPInAZm
diqbpppTXS/lm9w=
-----END CERTIFICATE-----