Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230302e302f32322d3232203d3e203238313635.roa
File:                     3137372e3138342e3230302e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          pCQw08Fc3dizeb6NLzDtqHgcfaJcbqS9VCfBE3PhwJI=
Subject key identifier:   CC:DF:75:01:5F:57:BF:97:73:89:5A:30:87:42:5A:18:4A:4C:7E:6E
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       238F5669DCA1D98DE07BF240D6E714E8234A5B76
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230302e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:35 +0000
ROA not before:           Wed 31 Jul 2024 22:20:35 +0000
ROA not after:            Wed 30 Jul 2025 22:25:35 +0000
asID:                     28165
IP address blocks:        177.184.200.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:56:69:dc:a1:d9:8d:e0:7b:f2:40:d6:e7:14:e8:23:4a:5b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:35 2024 GMT
            Not After : Jul 30 22:25:35 2025 GMT
        Subject: CN=CCDF75015F57BF9773895A3087425A184A4C7E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:d8:02:02:74:86:25:19:04:5a:3e:b9:9c:
                    f9:37:b8:08:99:7d:8d:21:49:31:78:68:92:0b:b7:
                    38:ab:e5:42:74:59:78:97:db:7e:70:a6:24:39:7a:
                    53:88:89:20:9e:48:8d:85:37:6f:f8:c5:8d:30:d6:
                    0f:0a:e8:98:a4:77:c5:8a:44:06:6d:4d:e1:d2:1d:
                    7b:0b:31:e5:69:8f:e6:e5:1e:e3:bf:86:18:dc:46:
                    fe:f0:bc:c7:ce:ff:59:4c:4b:38:64:60:56:4b:91:
                    d5:74:6d:16:64:a1:27:8f:4f:d7:d7:b2:69:d8:04:
                    75:fa:20:e0:e5:b1:b1:c3:ee:0b:cd:e7:de:51:b0:
                    ea:8d:32:18:ed:ba:11:05:59:fd:b6:f7:e6:47:f4:
                    b2:38:df:b9:91:3c:6a:d3:3a:3f:72:82:55:3d:37:
                    77:68:d5:cf:59:3f:e6:ac:10:b9:d6:bc:29:a8:c6:
                    c3:83:ac:7b:8b:5b:52:bc:90:c5:27:7a:a6:f1:8d:
                    ac:fd:fa:b2:e8:a2:f5:00:7e:c0:73:a7:05:1c:e5:
                    a1:d5:9e:28:1b:08:f0:ac:b0:c8:ce:48:ae:93:69:
                    77:b3:ec:e4:00:05:2a:ac:10:9e:f2:c9:8f:29:e6:
                    c3:a6:c0:08:7d:f9:47:24:9f:63:65:90:db:79:2b:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:75:01:5F:57:BF:97:73:89:5A:30:87:42:5A:18:4A:4C:7E:6E
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230302e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:86:ca:da:9b:31:7b:f9:57:a5:9e:8a:0a:8f:e3:de:d7:0b:
         c7:61:92:d2:6a:45:16:53:18:82:ab:84:24:59:b6:da:6a:37:
         08:a2:9a:fb:44:5e:56:6f:c7:45:c7:cf:ea:95:22:70:13:91:
         12:a8:32:ba:9a:0a:7c:84:73:bc:a4:0e:4c:65:c6:ca:60:3d:
         7d:73:db:e8:ff:75:16:72:84:c6:c4:3a:7a:7e:b1:ff:99:ea:
         6b:33:26:52:b1:d0:aa:b5:73:d1:66:fe:54:cd:e6:0b:d2:98:
         e1:a7:54:e4:4a:e7:1f:c3:3f:01:0b:b3:f7:e0:98:72:2e:12:
         7c:1b:f0:36:69:26:72:b6:b8:37:d5:31:db:fb:21:da:03:60:
         87:ed:19:d9:73:67:3b:49:a8:2f:26:0e:8c:5d:a4:57:c3:db:
         e4:45:ac:56:7b:7b:6b:a8:63:15:c2:cd:32:6b:04:8a:a3:18:
         86:b9:6e:34:d6:19:87:6e:c6:74:22:3f:1b:6f:84:5a:f8:84:
         ac:fe:fa:8e:8c:d8:b4:a6:a3:cc:5b:41:f6:97:5a:07:0b:0f:
         8d:87:68:a5:da:40:34:08:4d:ce:d0:df:07:a6:46:30:16:ff:
         84:4c:77:36:15:bd:76:46:e2:43:57:cc:bc:ba:02:2e:9f:a1:
         3c:df:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org