Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          Gri+jjUrEZwCz3KL4UDHpZsc975Nm4DK2p7/KJ+TZBQ=
Subject key identifier:   5D:9D:8D:77:FA:55:67:F8:90:3F:16:9B:BF:47:20:FA:99:41:41:9B
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       4D1BA84667FDF16908C4035CF196FB5C4E0D0596
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:29 +0000
ROA not before:           Wed 31 Jul 2024 22:20:29 +0000
ROA not after:            Wed 30 Jul 2025 22:25:29 +0000
asID:                     28165
IP address blocks:        177.184.206.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1b:a8:46:67:fd:f1:69:08:c4:03:5c:f1:96:fb:5c:4e:0d:05:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:29 2024 GMT
            Not After : Jul 30 22:25:29 2025 GMT
        Subject: CN=5D9D8D77FA5567F8903F169BBF4720FA9941419B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:a9:ad:af:84:3e:9b:1a:85:52:19:ab:e3:
                    ae:af:ff:75:2e:71:58:df:c2:bb:bd:41:1a:7d:cf:
                    c4:ff:50:d6:3a:0e:ce:bd:ee:d2:5d:b8:6a:d2:fa:
                    de:1f:1a:ff:fd:4a:87:ac:aa:c2:a2:4f:69:7d:55:
                    d5:45:da:06:96:3e:e0:ba:57:8e:c2:66:98:cc:c4:
                    b2:b3:6d:c3:68:e0:e5:14:dd:a6:6f:fc:4e:06:14:
                    97:b5:b6:ca:59:57:76:25:d9:6d:95:a6:1d:43:0b:
                    c5:a4:75:f3:87:01:90:cc:1b:94:73:c4:0f:fa:ee:
                    78:93:54:38:83:0c:bf:8d:5a:ed:23:b5:37:d8:23:
                    fa:11:15:45:d0:4f:19:83:72:d8:f2:4a:7e:7e:fa:
                    b9:09:c3:ba:f7:9f:7e:d8:56:ea:01:a1:85:34:a8:
                    68:5b:48:ca:0c:85:ed:59:c9:9f:7d:82:4e:ea:05:
                    fb:a8:91:a3:14:ef:cb:30:91:c7:8f:0b:3e:33:e8:
                    be:c0:46:bb:c2:09:7f:5b:28:95:3f:1b:f4:65:ff:
                    ba:b8:03:3c:de:a3:09:a6:25:a0:ff:df:93:60:94:
                    f7:f1:08:f1:df:91:30:e9:00:b6:17:e4:8b:d4:48:
                    f5:a3:97:a4:e0:4a:4e:80:46:5e:4f:90:f1:18:c0:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:8D:77:FA:55:67:F8:90:3F:16:9B:BF:47:20:FA:99:41:41:9B
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:71:a5:02:39:db:48:ba:67:98:c1:f0:89:74:92:48:36:
         d7:0e:41:3a:21:cb:1a:18:a4:28:05:ae:7a:e9:51:2b:62:37:
         f6:0a:89:1a:28:0f:1b:4a:0b:ca:eb:e8:56:80:b7:a5:73:5e:
         ee:d5:1f:4f:bb:f2:16:a3:3d:ba:8a:cb:cc:a9:b9:d5:1b:89:
         30:32:db:91:57:95:4c:07:05:fd:96:0a:68:6c:2f:2b:20:a6:
         11:b7:93:09:5f:54:a1:3f:e5:3d:0a:45:43:91:65:d5:90:18:
         00:9b:17:7b:88:bf:a3:7e:c3:a6:87:cc:00:5d:b1:b8:9f:52:
         8a:18:3d:f3:e0:9b:bc:dc:7c:1a:5f:5f:6a:af:f5:d9:fb:09:
         5f:de:73:2a:4f:70:36:79:37:89:9b:40:b4:62:ae:9d:82:7e:
         b8:53:8b:53:e3:6b:00:60:8a:d9:75:df:f6:0b:51:27:95:5c:
         4b:9d:58:a3:41:c7:56:9d:ec:0a:98:38:f4:2b:c9:60:a1:63:
         94:e6:4b:ef:6f:15:9c:89:74:2b:30:8f:97:b5:c8:4f:f5:ae:
         ec:b8:4f:49:a9:38:e3:fa:49:75:ec:ac:cd:05:14:6d:98:a4:
         e8:c8:d1:95:ca:6a:0b:c7:2f:57:a7:92:83:b5:86:23:21:3b:
         a7:96:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org