Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139382e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3139382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          HFrZYz0mzoQgeN6mkJWGZGm/JEp+pImsjn80iHGpm3g=
Subject key identifier:   C7:40:CF:8B:9C:C5:AE:38:9E:70:3B:58:DA:3A:48:55:DE:42:FA:27
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       04329F0825C50AFF3A998B72C3E5635ACE106964
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139382e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:20 +0000
ROA not before:           Wed 31 Jul 2024 22:20:20 +0000
ROA not after:            Wed 30 Jul 2025 22:25:20 +0000
asID:                     28165
IP address blocks:        177.184.198.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:32:9f:08:25:c5:0a:ff:3a:99:8b:72:c3:e5:63:5a:ce:10:69:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:20 2024 GMT
            Not After : Jul 30 22:25:20 2025 GMT
        Subject: CN=C740CF8B9CC5AE389E703B58DA3A4855DE42FA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:47:69:41:a8:92:0d:2e:5c:ba:8d:34:14:
                    3f:94:8c:42:34:6b:8e:4e:6a:63:62:ff:b2:9e:93:
                    9d:e0:09:b0:8c:f9:57:0b:ab:2b:aa:0a:65:6d:b6:
                    03:27:69:dc:f9:9a:86:39:3a:5f:06:2c:3e:40:7c:
                    ab:c0:f3:66:81:d0:42:bc:c8:29:44:38:47:67:d9:
                    3b:f3:6f:2c:35:0b:47:72:a1:8c:50:4d:93:8f:d9:
                    b4:d9:10:92:5b:30:5f:02:d4:c4:bf:1a:47:9f:8e:
                    36:76:08:34:65:c9:1a:79:af:9d:43:a1:24:a7:94:
                    13:80:22:43:63:70:c6:52:62:55:2d:7f:f7:58:f2:
                    68:23:b1:41:4d:27:c8:8d:85:13:37:3a:76:9d:79:
                    31:9d:b9:59:fb:91:e2:28:4b:7a:e6:4a:9d:43:35:
                    4b:cc:d3:5a:13:0f:4d:ba:c6:6d:53:22:d6:eb:0c:
                    fd:1a:5e:e0:3c:98:a3:d3:38:5d:0b:64:5f:4b:e0:
                    7f:6f:c8:cf:ca:b5:c8:f7:4e:3b:cf:c5:da:5f:ba:
                    b1:89:40:7d:95:22:21:1a:87:04:16:5c:01:63:ea:
                    ba:29:21:26:8b:cb:e0:52:08:83:d1:61:3f:89:dd:
                    ab:88:8c:84:0b:c5:2c:c7:7a:f2:f2:2a:c0:10:e6:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:CF:8B:9C:C5:AE:38:9E:70:3B:58:DA:3A:48:55:DE:42:FA:27
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3139382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:e2:ca:40:61:bd:e8:bb:4e:99:c2:89:71:ab:4c:16:c5:
         2d:57:be:14:54:77:a8:1c:d0:17:88:b8:e4:1e:8d:18:b1:df:
         ff:e0:80:8f:63:b4:d1:df:d0:6a:ba:8b:36:4e:5e:f3:2d:95:
         be:47:b0:4a:d9:df:66:b9:13:82:54:2c:d4:ef:ec:a0:b9:83:
         2b:4d:ba:c2:98:b7:8e:73:d7:28:99:32:27:7a:de:9a:dd:b3:
         35:78:13:3b:51:ad:ee:c3:50:30:5e:6d:41:db:69:33:88:43:
         e2:36:8a:e2:ba:ae:0c:dd:a7:67:ec:68:f7:2d:db:f6:42:82:
         a2:70:4b:7c:f6:6a:e2:e6:fc:e1:17:d2:53:8e:30:fb:d6:69:
         b9:85:c3:c9:5f:d8:47:b9:a2:60:98:e8:45:e8:47:6d:af:81:
         4a:bb:7d:99:8e:af:eb:c8:ac:7a:95:a5:d3:67:61:6f:cf:f3:
         38:06:9b:77:98:50:60:ed:c8:63:e9:52:b8:64:72:85:35:81:
         07:46:ee:68:10:e1:a6:09:1f:c8:a4:49:49:0d:14:56:71:6b:
         97:ed:a5:fc:4b:ce:11:8d:03:24:9e:b3:58:a8:8a:e3:79:31:
         a7:0d:69:90:e9:a2:7f:5e:32:56:ee:ff:ac:60:9c:0a:63:97:
         f7:a2:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org