Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32302d3230203d3e203238313635.roa
File:                     3137372e3232322e31362e302f32302d3230203d3e203238313635.roa (raw, json)
Hash identifier:          ibzceDDuvfCCJo4qIcJpGXiuIRaInx0QdwyWMS6brDc=
Subject key identifier:   7A:B8:90:17:CA:8E:49:5F:41:AC:CE:D4:2E:32:B4:63:38:6C:C6:4B
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       6E9A39569770D52A786342C5E794A505F05B6D2D
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32302d3230203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:33 +0000
ROA not before:           Wed 31 Jul 2024 22:20:33 +0000
ROA not after:            Wed 30 Jul 2025 22:25:33 +0000
asID:                     28165
IP address blocks:        177.222.16.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9a:39:56:97:70:d5:2a:78:63:42:c5:e7:94:a5:05:f0:5b:6d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:33 2024 GMT
            Not After : Jul 30 22:25:33 2025 GMT
        Subject: CN=7AB89017CA8E495F41ACCED42E32B463386CC64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:e6:47:f7:11:f7:c6:4c:21:5d:a9:c2:bf:
                    87:b9:35:90:2a:96:c3:7e:4a:9a:86:6b:31:25:ac:
                    f1:0d:cd:b5:28:2d:a9:9c:92:8b:40:0b:b1:8b:85:
                    ab:2b:4d:d2:86:fd:e7:67:d6:18:4f:3e:7d:f1:86:
                    87:7a:f6:0f:83:ff:85:4d:c7:43:cb:3f:1a:fa:7d:
                    42:4c:cd:ac:18:96:34:f8:cb:be:76:09:e8:97:5b:
                    e8:36:72:fb:e9:0d:cf:a0:9a:48:03:51:3b:c7:40:
                    ac:d9:5f:9f:4a:07:2f:c6:27:77:aa:c4:90:21:e0:
                    c2:21:fe:92:87:86:d9:73:8a:44:d8:d9:58:20:c5:
                    19:61:e9:b0:81:91:ce:f6:d7:09:2e:3f:06:e1:aa:
                    a3:23:2a:d8:f3:05:14:10:70:84:da:80:dd:04:e2:
                    4a:58:d0:77:e4:80:d0:70:8d:3b:7f:5b:6b:74:ce:
                    88:e3:68:27:77:98:60:97:fc:ed:9b:a3:f5:99:89:
                    59:c5:7e:c8:39:56:51:73:13:be:92:cb:4f:17:d2:
                    8d:2f:33:d1:b3:d7:6e:be:0b:f0:2f:a0:18:e3:76:
                    ff:b8:0f:e2:7a:4a:9d:1d:18:27:80:e7:f7:2e:0f:
                    7c:e9:72:3d:bc:6a:7c:e6:a2:df:5a:48:89:48:50:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:90:17:CA:8E:49:5F:41:AC:CE:D4:2E:32:B4:63:38:6C:C6:4B
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32302d3230203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:81:20:60:27:fa:e3:b5:8a:bf:36:0d:e2:e1:da:4e:c2:
         fa:64:c2:bb:0f:31:64:65:bf:84:55:f4:e1:2a:5a:1c:0c:87:
         0c:12:75:32:e7:f7:63:77:94:44:f8:8f:d7:c4:a3:a3:d0:11:
         80:7d:57:07:20:d1:5d:2c:9e:12:d2:42:47:f8:dc:34:af:8f:
         a5:60:24:4d:e0:50:dd:37:74:67:56:2e:69:51:28:67:b8:c7:
         d5:57:fa:32:04:4e:84:d5:1b:b9:66:55:a4:05:4c:56:82:6a:
         67:7b:9f:3c:31:27:0a:58:1e:64:a4:9b:d3:1d:0b:80:24:de:
         4c:d2:6b:05:7d:ce:ba:32:ee:c3:64:95:a4:6b:77:26:2d:f3:
         40:95:af:b2:5e:3d:3c:df:c2:33:ad:89:3c:5b:80:d0:7f:5b:
         3e:ef:d8:d6:2a:2e:eb:5e:01:3b:1f:40:7f:80:b1:8a:81:f2:
         9e:58:51:7d:3c:6c:42:cb:1f:44:c7:7a:bb:a0:f9:36:5e:c9:
         00:4c:88:04:18:57:a6:71:06:a9:1c:8b:ee:e6:dc:2e:4d:71:
         5a:51:22:59:35:f2:49:06:57:a3:9e:81:c5:66:0c:a0:8e:fa:
         bb:f3:d9:c1:39:54:95:d4:6d:03:33:cb:21:39:27:7e:1b:c0:
         e1:f4:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org