Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          VMNG3lGWoC51LVDrKNWEj6TR4kLxqdw78YdKyvqwoE0=
Subject key identifier:   2C:5D:00:FC:8D:F4:94:02:72:35:35:16:0A:31:AA:3E:47:2B:C4:AB
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       628E9AA0B7D817D4ED78ACE030E1EA3C8D11B66F
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:35 +0000
ROA not before:           Wed 31 Jul 2024 22:20:35 +0000
ROA not after:            Wed 30 Jul 2025 22:25:35 +0000
asID:                     28165
IP address blocks:        177.184.196.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:9a:a0:b7:d8:17:d4:ed:78:ac:e0:30:e1:ea:3c:8d:11:b6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:35 2024 GMT
            Not After : Jul 30 22:25:35 2025 GMT
        Subject: CN=2C5D00FC8DF49402723535160A31AA3E472BC4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:f5:69:d6:36:2b:6f:16:9c:d5:aa:a0:71:
                    12:9d:d0:9a:fa:0d:ca:c0:ae:c4:eb:52:f5:8c:d7:
                    13:af:c3:6e:43:b4:b3:ab:05:65:7c:09:c1:58:fd:
                    be:ea:2f:f1:af:cc:df:8c:45:8e:8e:e5:e1:f0:72:
                    47:d9:dc:6a:7e:31:f1:76:64:a4:8a:52:39:ff:a0:
                    ab:bb:25:8f:f0:3e:5f:66:30:10:be:9c:ba:c8:69:
                    c7:7c:54:0f:d2:53:d5:0a:7c:dc:66:e4:dd:c4:9f:
                    0d:79:6c:d6:ba:79:88:fc:cb:67:99:4b:e4:86:91:
                    ff:63:6e:44:b3:6c:c4:e1:ec:ee:12:84:95:b1:80:
                    ab:2d:0a:fd:0a:26:5c:e8:61:b1:81:ca:c9:e9:f9:
                    31:22:bb:06:b2:90:ce:da:57:e9:3e:63:e7:7c:49:
                    22:59:c4:50:a5:62:e6:2c:e1:7c:53:33:52:3b:d3:
                    c1:30:0e:74:9d:5f:9e:40:97:32:d0:20:a8:9b:ee:
                    e0:79:03:08:47:81:35:f3:fb:b7:b2:f6:dc:d6:57:
                    f8:9a:3a:dc:29:f8:30:98:ed:d6:dd:ab:ca:57:9c:
                    17:e2:88:8a:b2:c4:2d:83:2b:5e:77:a4:c2:48:86:
                    ff:c2:cb:44:54:92:31:7f:1f:ee:a0:f8:2e:db:d0:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5D:00:FC:8D:F4:94:02:72:35:35:16:0A:31:AA:3E:47:2B:C4:AB
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:55:22:38:8f:d7:76:f8:6e:80:fd:d6:61:c4:0e:76:63:ba:
         25:4b:2f:89:32:84:b0:76:12:2f:7b:a4:57:6d:57:5d:13:1e:
         ce:db:3a:5d:48:e5:25:57:a3:3c:22:ff:2e:9a:fa:2d:57:ee:
         53:2b:10:a4:ec:d1:2b:48:6b:6f:ac:52:2c:9b:91:28:99:32:
         fb:8e:9a:aa:8c:5a:ec:ee:f3:32:2e:c5:1e:67:7c:79:fd:ef:
         88:51:59:b1:72:5a:32:d2:a3:52:9f:11:da:4a:76:3d:f4:df:
         67:e0:76:ec:94:66:3c:db:be:32:06:b7:8a:4e:38:be:b2:5d:
         be:6c:38:dd:3d:36:47:85:ef:69:53:33:82:14:db:42:ed:ca:
         e1:c8:14:66:6c:d2:a7:88:38:85:1a:6a:ca:42:28:6c:38:4a:
         7d:af:1b:fe:5d:ca:5d:27:9c:e0:d2:35:72:d8:4d:a8:de:0c:
         71:20:4d:84:04:99:dd:b2:83:39:4e:1d:27:ff:fb:09:de:0b:
         60:f5:1b:fd:7c:a3:a5:a7:9f:8a:11:cd:b0:a7:9b:f7:0d:2d:
         58:d4:1c:36:9f:b6:7a:37:1f:5d:e3:41:09:af:e8:df:e4:95:
         8d:f9:81:ff:a5:f6:34:76:8c:88:e7:cb:ae:0c:96:07:b6:a6:
         d2:e4:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org