Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa
File:                     3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          JH6RPnuCaMZvdsMGt+olbWGXNLd3rChMHEyw6Vp9Rqk=
Subject key identifier:   0D:85:09:25:9A:11:6A:A7:55:9F:72:26:78:58:E0:C6:B2:80:D3:72
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       150D4095ED47A2B2ABC4BD6656E51E6888A17096
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:43 +0000
ROA not before:           Wed 31 Jul 2024 22:20:43 +0000
ROA not after:            Wed 30 Jul 2025 22:25:43 +0000
asID:                     28165
IP address blocks:        177.184.196.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0d:40:95:ed:47:a2:b2:ab:c4:bd:66:56:e5:1e:68:88:a1:70:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:43 2024 GMT
            Not After : Jul 30 22:25:43 2025 GMT
        Subject: CN=0D8509259A116AA7559F72267858E0C6B280D372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:1d:81:02:70:df:b3:00:13:bb:ef:03:83:
                    43:91:96:78:57:f2:de:5b:e6:37:04:a2:d9:04:40:
                    fa:5b:f1:55:39:c2:dc:99:a7:3c:88:29:d2:75:18:
                    45:90:f4:32:5b:b6:e1:5a:29:20:ef:42:3e:b2:55:
                    27:8d:38:36:eb:70:32:7b:da:a2:36:0e:e7:22:31:
                    cf:d5:5b:1a:b6:06:0d:0f:c8:fd:2e:c5:75:17:18:
                    4a:cc:80:23:12:7c:51:0d:21:e1:98:c2:82:38:2f:
                    c0:7c:76:bb:18:a0:5d:ba:fa:7f:27:fd:c1:c7:bc:
                    1e:7a:97:91:64:e9:c9:79:a8:30:05:83:09:42:f6:
                    30:10:d3:fe:7b:33:c3:21:46:c1:e1:59:f7:0d:39:
                    a4:7f:68:d2:09:e7:e4:70:61:2f:9b:d5:a0:59:45:
                    0c:8c:75:30:e8:5d:9d:ff:76:8d:77:f4:03:f9:99:
                    c3:9f:80:f7:bc:37:54:10:02:22:b9:4e:30:c8:ef:
                    5f:0b:62:1d:7d:e9:b2:35:d0:49:0b:ef:4c:41:6e:
                    d1:f4:fe:fd:95:bb:04:fa:0a:f2:de:f1:b6:a3:87:
                    ed:ed:3b:eb:f1:7c:44:6e:70:b5:f2:9b:d8:82:37:
                    da:c9:b9:4a:f2:3e:d6:99:39:7a:ef:18:cb:22:19:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:85:09:25:9A:11:6A:A7:55:9F:72:26:78:58:E0:C6:B2:80:D3:72
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:53:e8:22:60:62:1e:dc:bc:c0:32:a0:0b:52:3e:9b:10:4f:
         a5:bf:f1:88:e7:6a:a8:65:b7:7f:37:68:00:7a:e9:aa:78:b1:
         f8:4e:90:2f:00:cf:37:3f:92:d2:98:b1:70:dd:45:6b:10:2f:
         af:dc:2d:d0:a6:9d:bc:42:bd:e5:68:47:3c:59:f9:28:e4:ed:
         fd:ad:c6:f0:bb:2e:fc:35:6a:44:54:7c:bc:70:14:36:1c:d2:
         7f:24:6b:19:22:a9:c6:8c:b6:26:61:be:c0:2c:a7:29:91:1a:
         91:f8:1d:c0:9e:14:3a:67:aa:7e:35:93:d6:9e:a7:03:9a:d6:
         7d:6e:5c:f5:3b:66:d0:9f:62:db:b3:64:8d:e1:1a:ac:1b:b8:
         39:ea:99:34:00:bf:cc:74:56:50:88:ef:7d:a5:bb:af:a7:75:
         ba:af:b7:c0:47:7f:20:d9:51:f4:71:df:2a:19:fa:08:ba:42:
         a2:d8:18:9b:74:50:21:81:ec:67:fd:13:d2:c3:6a:f1:9e:89:
         b7:c7:9c:76:b2:62:8e:33:63:cf:4a:35:33:c8:62:6d:3d:fd:
         50:b3:71:b3:75:5b:08:db:e3:cd:7e:68:f7:c0:1e:21:1e:ff:
         d7:42:8d:7c:59:b5:17:53:97:27:7e:0c:c6:49:23:57:73:ee:
         5e:2f:e4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org