Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          tuKZXVjKoXrWVKLf4ngdhosK4j+MpX9SnncGGHL0fV4=
Subject key identifier:   F9:74:9B:C6:3B:32:7B:30:37:CF:62:AA:63:EC:87:BE:1C:65:B6:AA
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       540E1CF7A8B5F8519F8C091F4EBBBE4906C85BBB
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:16 +0000
ROA not before:           Wed 31 Jul 2024 22:20:16 +0000
ROA not after:            Wed 30 Jul 2025 22:25:16 +0000
asID:                     28165
IP address blocks:        177.184.200.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:1c:f7:a8:b5:f8:51:9f:8c:09:1f:4e:bb:be:49:06:c8:5b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:16 2024 GMT
            Not After : Jul 30 22:25:16 2025 GMT
        Subject: CN=F9749BC63B327B3037CF62AA63EC87BE1C65B6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:6d:61:24:61:bd:dc:be:ed:3d:b1:93:04:
                    f4:3d:e0:1c:ea:25:d8:9a:90:f4:d8:ef:b6:a5:74:
                    e4:7f:66:42:c3:70:db:44:c8:f7:29:7c:cc:9e:12:
                    be:82:3b:9a:e4:47:7a:d8:d0:57:e7:7c:c0:89:4d:
                    24:a6:76:8b:06:84:13:93:1f:e7:ff:b3:f2:23:45:
                    f4:a1:35:ac:85:df:8f:63:c7:6b:a9:fe:3b:86:28:
                    60:51:1a:cc:1b:b0:cc:a3:89:4d:d2:cb:50:ac:6e:
                    fb:2f:35:5c:e1:97:ce:a1:46:a4:82:43:e7:1f:2b:
                    25:4b:b7:c3:d6:07:d3:30:c8:8f:b3:72:06:5f:26:
                    51:f3:ed:4d:e5:17:91:b5:b7:23:fb:0a:0e:4f:dc:
                    0e:07:7b:55:f8:bd:ae:44:dc:ef:ac:b3:5a:0c:62:
                    d1:c6:43:13:87:f8:21:1a:a7:6f:ee:51:9f:bb:25:
                    a9:1e:ab:c0:56:57:9f:b3:58:88:a7:6b:72:3a:6c:
                    17:e2:b2:e1:c4:59:4d:93:f3:04:19:a9:6b:43:60:
                    20:1c:16:5f:92:0a:0d:d8:c6:c5:a4:c8:cd:9e:29:
                    c7:bf:37:f9:82:30:7d:ab:5e:37:5e:85:97:8a:23:
                    2a:f2:92:80:fb:4e:2d:8e:05:3c:2b:8e:db:c2:5d:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:74:9B:C6:3B:32:7B:30:37:CF:62:AA:63:EC:87:BE:1C:65:B6:AA
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:a8:27:d5:8a:b9:8e:b1:50:96:ad:b7:12:ed:f7:7c:ef:
         b0:cd:f9:37:bd:80:1a:20:78:57:3a:e1:02:5f:fb:21:ab:1a:
         ee:ab:88:c0:49:c8:89:d2:a5:ba:37:e6:25:ae:de:08:82:0b:
         8c:29:83:fe:ea:72:a8:65:ba:30:15:c1:32:87:e6:4d:e4:56:
         c6:ae:29:14:08:6f:06:b0:61:54:64:03:1c:45:26:06:9c:38:
         06:3c:93:5f:c8:01:13:a9:7e:61:26:f5:49:ef:8d:c2:f2:b0:
         0b:01:ce:d0:e3:2c:60:31:88:40:37:81:c0:1b:67:f4:39:ba:
         92:24:2e:09:93:bd:84:ce:a5:80:f8:50:77:63:9d:2d:a8:c2:
         1f:4f:d2:b1:58:60:d3:52:0e:db:f1:63:d4:90:8e:e6:52:57:
         ee:df:00:9d:a2:41:bd:15:14:6f:bd:c3:a8:5a:f6:4a:2f:cd:
         a2:63:25:7f:cb:75:28:4a:3e:4b:f0:52:98:3a:b4:f2:7d:7f:
         7f:1f:43:5e:f4:5e:50:f8:c9:17:be:cb:c8:12:5d:1a:68:f4:
         ee:bd:0f:84:63:de:33:d1:b9:e6:c3:88:1a:55:11:1f:71:19:
         ec:85:46:11:61:f4:10:4f:83:13:4b:05:e2:6a:50:c3:ce:f3:
         22:b1:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org