Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          EgLz9gQ6tolgWQ8LjwRGS4HkRPEy4XYN0hVssDs65jM=
Subject key identifier:   5E:45:96:70:B6:8E:87:8A:58:7B:61:A9:06:B9:41:67:6C:69:46:F4
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       1C8EF223EE96158877F6A264DD1D03008824A14B
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:36 +0000
ROA not before:           Wed 31 Jul 2024 22:20:36 +0000
ROA not after:            Wed 30 Jul 2025 22:25:36 +0000
asID:                     28165
IP address blocks:        177.184.204.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8e:f2:23:ee:96:15:88:77:f6:a2:64:dd:1d:03:00:88:24:a1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:36 2024 GMT
            Not After : Jul 30 22:25:36 2025 GMT
        Subject: CN=5E459670B68E878A587B61A906B941676C6946F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:96:1f:ce:3e:e4:9e:85:f4:79:9c:f6:cf:
                    39:c4:64:e0:87:c4:b0:d6:f1:b5:75:70:35:38:06:
                    33:00:e7:9d:ba:9f:79:97:16:79:72:a5:30:4e:8a:
                    42:c6:43:49:1a:16:7b:97:84:b8:c6:b0:d1:26:1c:
                    33:9b:b5:3e:6e:3d:6c:37:01:2f:fc:e3:92:fc:c3:
                    1f:49:be:49:8c:06:30:9e:40:b6:d9:43:dc:5f:05:
                    c2:d7:47:c5:21:bb:2f:f4:be:8f:76:86:d1:ac:6b:
                    6b:e7:0b:1e:72:88:41:42:a1:38:f0:dd:54:92:a5:
                    c0:c1:f2:aa:23:ca:e6:58:99:64:9d:e6:22:c8:36:
                    64:1b:b4:a0:e9:4b:72:0f:52:a7:4b:80:73:a2:5a:
                    8d:0f:4c:29:0e:2d:7c:cf:98:76:1e:4d:c6:9a:e4:
                    6d:6c:73:0a:b8:05:54:c8:5b:e6:ff:95:b6:23:de:
                    95:43:01:24:b9:33:c9:1c:df:4e:a2:b5:3d:97:a9:
                    47:e7:24:e7:e3:4d:5e:5a:6b:f9:bc:33:6d:9d:b2:
                    04:3b:9a:bb:8b:b1:f4:d9:e0:70:d6:b5:41:f7:fb:
                    b8:72:0a:6d:c7:bd:83:41:93:8a:e9:12:4a:bb:49:
                    fa:8b:fc:57:34:6b:8b:69:9d:da:a3:88:60:5a:a2:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:45:96:70:B6:8E:87:8A:58:7B:61:A9:06:B9:41:67:6C:69:46:F4
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:a0:34:84:84:be:d8:17:ab:27:c8:b1:84:c8:ca:13:b8:
         40:fc:27:53:76:6e:0b:cb:d6:5d:90:44:5b:47:18:72:84:73:
         4a:73:80:3b:26:e0:8e:61:f3:cc:5b:f1:b9:3d:77:60:21:09:
         97:4f:59:21:ef:1b:33:d5:e3:59:a7:73:8b:4d:c4:a4:a9:dc:
         d9:cf:10:db:58:26:11:c4:75:0d:03:d8:9c:6a:54:96:18:56:
         c1:fa:c5:a6:61:fe:80:e0:75:a1:0d:36:70:e5:31:83:04:85:
         de:b7:9c:9f:85:1b:c8:33:73:b0:4b:37:60:52:8a:0d:4b:f0:
         d2:c7:b9:47:8a:72:fc:aa:15:82:c4:d4:67:e2:6d:89:b0:76:
         35:de:58:74:7f:be:b5:08:36:e7:e7:a0:12:1e:b7:09:72:92:
         8c:64:af:e4:49:36:e6:79:6d:06:56:ae:e3:64:37:69:68:5e:
         fb:df:07:7e:91:53:1c:53:c9:a7:26:29:ef:e6:42:fa:1f:ce:
         7a:b8:2e:e7:5b:62:de:8e:e3:e0:8f:51:be:e7:07:d0:13:d9:
         36:0e:e1:c1:bb:18:df:0c:46:c6:40:4a:be:39:13:4d:79:8d:
         7d:c2:8e:ca:b5:97:a2:2b:3d:b5:53:ae:0a:ff:ea:80:1b:f5:
         6c:3f:fa:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHI7yI+6WFYh39qJk3R0DAIgkoUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMzZaFw0yNTA3MzAyMjI1MzZaMDMxMTAvBgNV
BAMTKDVFNDU5NjcwQjY4RTg3OEE1ODdCNjFBOTA2Qjk0MTY3NkM2OTQ2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE9ZYfzj7knoX0eZz2zznEZOCH
xLDW8bV1cDU4BjMA5526n3mXFnlypTBOikLGQ0kaFnuXhLjGsNEmHDObtT5uPWw3
AS/845L8wx9JvkmMBjCeQLbZQ9xfBcLXR8Uhuy/0vo92htGsa2vnCx5yiEFCoTjw
3VSSpcDB8qojyuZYmWSd5iLINmQbtKDpS3IPUqdLgHOiWo0PTCkOLXzPmHYeTcaa
5G1scwq4BVTIW+b/lbYj3pVDASS5M8kc306itT2XqUfnJOfjTV5aa/m8M22dsgQ7
mruLsfTZ4HDWtUH3+7hyCm3HvYNBk4rpEkq7SfqL/Fc0a4tpndqjiGBaouLJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXkWWcLaOh4pYe2GpBrlBZ2xpRvQwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzNzM3MmUzMTM4MzQyZTMyMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxuMwwDQYJKoZIhvcNAQELBQADggEBAKbpoDSE
hL7YF6snyLGEyMoTuED8J1N2bgvL1l2QRFtHGHKEc0pzgDsm4I5h88xb8bk9d2Ah
CZdPWSHvGzPV41mnc4tNxKSp3NnPENtYJhHEdQ0D2JxqVJYYVsH6xaZh/oDgdaEN
NnDlMYMEhd63nJ+FG8gzc7BLN2BSig1L8NLHuUeKcvyqFYLE1GfibYmwdjXeWHR/
vrUINufnoBIetwlykoxkr+RJNuZ5bQZWruNkN2loXvvfB36RUxxTyacmKe/mQvof
znq4LudbYt6O4+CPUb7nB9AT2TYO4cG7GN8MRsZASr45E015jX3Cjsq1l6IrPbVT
rgr/6oAb9Ww/+q0=
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org