Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          KF6nNIv15xp+oA9Hj+bBvIFjq7aiyhdTSl6LRugdGCQ=
Subject key identifier:   CE:64:92:AA:FF:FC:96:37:17:E4:D1:66:B6:F2:D9:C0:56:8B:8E:A4
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       543F4B33FACBAE1400CE00D895E4AD16972A0B2C
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:15 +0000
ROA not before:           Wed 31 Jul 2024 22:20:15 +0000
ROA not after:            Wed 30 Jul 2025 22:25:15 +0000
asID:                     28165
IP address blocks:        177.184.205.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3f:4b:33:fa:cb:ae:14:00:ce:00:d8:95:e4:ad:16:97:2a:0b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:15 2024 GMT
            Not After : Jul 30 22:25:15 2025 GMT
        Subject: CN=CE6492AAFFFC963717E4D166B6F2D9C0568B8EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:9d:13:52:d6:64:2c:77:97:9b:0f:66:c3:
                    3a:49:3a:8a:59:0e:34:82:3c:c1:b9:33:cd:a7:c4:
                    66:0b:ff:ea:12:8d:ec:f5:6f:63:d5:62:dc:0e:87:
                    28:72:39:f0:32:cf:0f:74:8c:bd:34:01:fa:1a:f8:
                    b8:07:65:57:d2:7b:74:eb:47:31:95:95:fb:37:0d:
                    87:6b:a5:79:74:38:e4:8b:de:c4:63:c1:30:af:b8:
                    01:2d:63:d6:3e:1a:fb:57:f8:16:dc:1c:c5:d8:1d:
                    7c:31:88:4a:6d:3f:99:b5:5b:b7:78:90:34:cb:c6:
                    b0:47:07:61:d0:26:57:af:9f:91:5e:6c:49:f5:39:
                    5a:70:c0:9b:51:43:d4:6d:77:95:de:e2:f7:4f:b1:
                    66:3a:7c:27:b4:04:4a:8a:1b:96:1e:2a:c0:b8:6f:
                    dc:01:fe:34:d9:06:d3:e3:18:0f:47:b7:88:88:fe:
                    69:a6:4f:99:95:56:f9:11:00:4a:da:35:16:75:90:
                    07:10:f8:71:ce:b6:14:35:18:92:03:53:20:45:da:
                    8f:f1:13:23:0c:1b:8d:af:2a:fd:72:37:61:bc:d6:
                    93:b8:c7:1c:25:bb:81:a7:35:42:04:d5:11:d9:90:
                    7c:c1:67:c6:21:16:91:bf:34:70:dd:fa:d1:e2:71:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:92:AA:FF:FC:96:37:17:E4:D1:66:B6:F2:D9:C0:56:8B:8E:A4
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7c:47:32:7c:4f:14:07:a1:22:be:05:5f:f8:15:fd:f1:04:
         9c:6f:a4:48:c0:5c:9b:bf:fb:57:34:81:78:bf:8d:eb:e3:a9:
         cd:29:bf:33:97:e8:c8:03:83:51:53:4d:80:3f:8e:a5:db:bb:
         39:f4:8a:60:45:42:c1:68:67:dd:3d:53:0e:d4:5b:16:8e:e9:
         5c:7e:1a:a7:f1:cd:44:42:eb:33:42:66:06:58:7e:25:49:32:
         d6:32:7c:26:70:4e:4b:4f:7e:55:6f:c1:d1:8e:d6:bc:00:49:
         07:c5:47:5f:a9:38:ad:5b:e3:ac:ab:e8:05:e2:69:db:b6:b9:
         c0:75:32:a7:48:a6:6f:85:51:e6:4c:f7:e3:d2:a7:65:fb:8f:
         f0:08:ba:7a:5a:16:2a:a9:b4:60:81:08:34:70:81:30:b0:05:
         c4:16:8e:8f:5d:7e:f7:57:8a:6e:45:56:31:09:dd:d3:d8:5a:
         d5:f1:25:90:f7:c0:e4:c7:1e:7f:f3:b7:a9:06:eb:94:6b:54:
         ab:55:d3:d4:b8:e6:84:e9:7c:57:cb:74:f1:a0:4a:31:b8:c3:
         a8:db:99:2b:dd:f3:3b:07:fe:a1:06:17:91:3a:58:0e:38:99:
         db:bc:20:e6:a2:e6:f8:03:fb:4a:f2:87:ea:c8:ef:f7:d2:c6:
         ee:75:75:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVD9LM/rLrhQAzgDYleStFpcqCywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMTVaFw0yNTA3MzAyMjI1MTVaMDMxMTAvBgNV
BAMTKENFNjQ5MkFBRkZGQzk2MzcxN0U0RDE2NkI2RjJEOUMwNTY4QjhFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5Z0TUtZkLHeXmw9mwzpJOopZ
DjSCPMG5M82nxGYL/+oSjez1b2PVYtwOhyhyOfAyzw90jL00Afoa+LgHZVfSe3Tr
RzGVlfs3DYdrpXl0OOSL3sRjwTCvuAEtY9Y+GvtX+BbcHMXYHXwxiEptP5m1W7d4
kDTLxrBHB2HQJlevn5FebEn1OVpwwJtRQ9Rtd5Xe4vdPsWY6fCe0BEqKG5YeKsC4
b9wB/jTZBtPjGA9Ht4iI/mmmT5mVVvkRAEraNRZ1kAcQ+HHOthQ1GJIDUyBF2o/x
EyMMG42vKv1yN2G81pO4xxwlu4GnNUIE1RHZkHzBZ8YhFpG/NHDd+tHicQFvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzmSSqv/8ljcX5NFmtvLZwFaLjqQwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzNzM3MmUzMTM4MzQyZTMyMzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxuM0wDQYJKoZIhvcNAQELBQADggEBAKh8RzJ8
TxQHoSK+BV/4Ff3xBJxvpEjAXJu/+1c0gXi/jevjqc0pvzOX6MgDg1FTTYA/jqXb
uzn0imBFQsFoZ909Uw7UWxaO6Vx+GqfxzURC6zNCZgZYfiVJMtYyfCZwTktPflVv
wdGO1rwASQfFR1+pOK1b46yr6AXiadu2ucB1MqdIpm+FUeZM9+PSp2X7j/AIunpa
FiqptGCBCDRwgTCwBcQWjo9dfvdXim5FVjEJ3dPYWtXxJZD3wOTHHn/zt6kG65Rr
VKtV09S45oTpfFfLdPGgSjG4w6jbmSvd8zsH/qEGF5E6WA44mdu8IOai5vgD+0ry
h+rI7/fSxu51da0=
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org