Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32302d3234203d3e203238313635.roa
File:                     3137372e3232322e31362e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          1q18LJ00S7eSBI1A1P0U/Zs7oe/1RqF3QgqDT4uCQXY=
Subject key identifier:   FF:FA:02:FC:51:C0:49:A0:30:40:A3:C7:CD:8E:C7:3E:5F:0C:A2:20
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       78C567FFC82925BB23EF3FFC05A9012CAE5B1457
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32302d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:21 +0000
ROA not before:           Wed 31 Jul 2024 22:20:21 +0000
ROA not after:            Wed 30 Jul 2025 22:25:21 +0000
asID:                     28165
IP address blocks:        177.222.16.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c5:67:ff:c8:29:25:bb:23:ef:3f:fc:05:a9:01:2c:ae:5b:14:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:21 2024 GMT
            Not After : Jul 30 22:25:21 2025 GMT
        Subject: CN=FFFA02FC51C049A03040A3C7CD8EC73E5F0CA220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:27:0f:e6:de:d1:7a:a4:6e:4d:7d:8c:79:
                    81:db:d0:6d:98:08:70:3d:ad:5f:48:70:84:f5:f5:
                    b9:92:96:fc:6c:4d:32:da:ab:91:7c:65:9c:03:99:
                    66:29:8e:0a:31:5b:33:98:8b:ea:f9:d1:dd:ce:ed:
                    0a:44:d3:2f:00:aa:3e:7e:ee:35:05:9d:0e:b4:78:
                    b6:a3:38:7d:e4:fe:a9:25:f0:23:92:ba:e1:78:81:
                    b3:ae:51:0c:c0:36:f0:b5:d2:30:a5:38:be:3a:0a:
                    7a:96:c4:66:72:9b:4a:f3:fc:ce:39:df:1d:7c:48:
                    3f:2f:e4:32:9e:31:6f:c5:0c:b7:88:e5:53:f6:23:
                    73:36:c0:da:ab:75:c6:3c:72:ad:f3:a4:77:04:88:
                    71:85:b3:7b:49:f6:0e:62:fd:0e:10:79:09:ab:66:
                    77:06:80:bf:b4:9f:92:e8:c9:7d:bc:3e:a4:fa:90:
                    4e:4d:e4:4b:12:58:05:b8:4e:07:4a:13:93:3d:c1:
                    bf:dc:38:16:23:be:ff:b8:e7:8c:ec:8b:57:11:58:
                    2b:35:4d:e4:d0:93:2c:11:5b:fb:5d:1f:94:1d:a6:
                    6d:41:19:31:e5:e2:9e:97:e4:60:36:7f:8b:6e:67:
                    de:4b:05:eb:d1:b9:ab:63:7a:ae:b0:79:9f:5b:ab:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FA:02:FC:51:C0:49:A0:30:40:A3:C7:CD:8E:C7:3E:5F:0C:A2:20
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:fe:49:b0:57:58:23:a4:81:1a:19:09:e3:a5:cd:dd:98:
         81:ac:c2:fa:d0:fe:30:db:ae:a8:5f:b5:1c:15:40:96:f6:f8:
         1a:1a:57:ae:95:32:d8:9a:82:8d:fa:95:6d:e7:1d:4e:d4:fc:
         bf:13:76:9d:35:45:b9:82:4e:3d:89:54:38:49:ba:35:39:2c:
         12:25:0a:cf:d7:04:3a:4c:ff:88:88:0a:d4:fd:fc:d5:f4:9f:
         dd:e5:02:72:3f:c4:e5:28:4e:2e:65:d5:eb:f8:e8:35:75:d7:
         f8:f6:51:2d:87:46:a6:3f:85:6b:65:eb:b5:26:34:ea:ee:16:
         93:73:ce:7a:97:27:e6:00:0d:06:9d:1b:41:45:c7:d4:97:87:
         a7:24:f5:0a:01:98:60:3d:76:31:bd:9d:a9:73:b7:59:33:ef:
         76:d0:46:fd:03:ab:8c:df:e3:4a:1c:ad:c5:d4:4c:46:e2:e4:
         4a:dd:b7:22:0b:69:9f:e7:57:c5:98:f3:05:eb:3b:c7:9f:e6:
         6c:5b:6f:53:98:71:39:55:3e:29:32:b1:2b:6f:c1:b5:8b:a5:
         9d:aa:f0:24:bf:3e:f1:5e:3e:45:ee:ca:5f:e2:75:0a:c3:90:
         01:8b:52:26:d5:f8:d5:58:e5:59:f1:ea:46:77:79:80:3c:01:
         ca:5a:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org