Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32312d3231203d3e203238313635.roa
File:                     3137372e3232322e31362e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          8fXCe4MUK9WLW+lG6JBUbRqPN+rKMzg70u4ogogdSsQ=
Subject key identifier:   E4:0C:5D:B4:E2:AE:C6:AF:72:C2:15:71:0A:64:8D:86:A4:D7:1E:22
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       653A9EA44DD2576AC7D1781C38D3055DA5F91696
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32312d3231203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:35 +0000
ROA not before:           Wed 31 Jul 2024 22:20:35 +0000
ROA not after:            Wed 30 Jul 2025 22:25:35 +0000
asID:                     28165
IP address blocks:        177.222.16.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3a:9e:a4:4d:d2:57:6a:c7:d1:78:1c:38:d3:05:5d:a5:f9:16:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:35 2024 GMT
            Not After : Jul 30 22:25:35 2025 GMT
        Subject: CN=E40C5DB4E2AEC6AF72C215710A648D86A4D71E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:cb:82:42:1e:3a:b6:3b:13:4d:84:01:61:
                    dc:7f:ee:27:26:ef:3c:e8:1a:c0:ec:ca:94:2d:e6:
                    8e:e0:5f:b7:49:e1:3e:68:95:cf:d9:a5:92:65:a7:
                    1f:ac:46:f4:37:65:12:95:2d:79:b9:6c:0f:ec:9f:
                    ba:1d:4e:4a:6a:fb:f6:74:00:fb:ae:86:f3:94:41:
                    13:81:de:7d:90:2f:b8:8a:b6:f6:ed:db:a5:54:6e:
                    a7:95:65:8b:f4:b6:27:39:2e:dd:a6:e9:33:b2:c0:
                    0f:d8:c8:2b:66:cf:8d:88:6a:cf:69:d7:c3:1b:50:
                    58:fc:33:72:4b:12:43:5f:88:6f:b8:cd:10:9a:04:
                    99:ba:bf:ee:c9:82:2a:49:ee:d1:bf:3f:48:67:57:
                    2f:ee:d0:37:fd:83:bf:47:ff:94:a2:18:b5:48:d8:
                    99:33:92:28:ab:4a:a3:86:22:df:1e:72:aa:dd:8f:
                    e0:b2:03:3c:d8:22:f3:b5:87:5c:06:45:2a:cf:f7:
                    99:7d:88:0b:ad:65:a0:c6:66:07:b4:c1:7f:1b:46:
                    6c:06:78:18:f9:f5:34:a6:1c:b7:92:43:8c:19:9b:
                    cb:75:45:89:48:85:6e:00:a1:d7:5b:6d:67:7d:0f:
                    30:4d:35:14:c7:db:4a:00:a4:d2:6a:79:b2:f6:ff:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0C:5D:B4:E2:AE:C6:AF:72:C2:15:71:0A:64:8D:86:A4:D7:1E:22
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:8e:1c:f1:7d:88:93:c2:9b:6b:3a:fa:e2:b8:c2:93:23:25:
         d2:c9:ee:89:dc:02:b0:2d:db:80:eb:c4:c6:93:30:f7:17:6e:
         22:9d:0d:1a:f5:2d:ec:39:c3:2d:24:35:f0:60:12:47:00:71:
         ec:23:18:8d:a4:b5:30:ee:e2:dc:ae:9b:00:05:38:4c:d7:56:
         79:b8:9e:8a:3f:26:ec:57:c6:c2:2c:f8:b6:d7:f9:b1:ae:f4:
         ed:de:4e:95:1d:10:f0:c6:73:96:d9:ef:46:ea:65:ad:c4:b0:
         34:a6:ad:b7:61:f3:55:40:f9:8c:c8:b4:50:cd:5a:09:e7:68:
         64:27:70:60:90:42:a5:18:7e:ee:69:b4:60:35:48:6e:33:35:
         04:25:7b:c0:8a:24:24:b7:0d:f4:bf:f6:35:c9:c8:e3:bb:90:
         2c:b6:3f:cc:7c:bf:4d:8d:1e:77:40:4c:6e:27:26:a0:ad:b7:
         25:84:f6:2c:be:40:74:ae:d6:e1:ec:f0:e0:a1:3e:3c:d7:92:
         0e:41:2a:31:8b:d9:35:68:b2:88:5e:ef:62:4e:87:ff:cd:f0:
         d1:5a:ab:b7:7c:62:4a:ac:b4:d3:8a:b0:ad:63:a5:12:4e:68:
         08:5a:c1:fd:3a:33:e7:ac:fe:50:53:60:31:5b:81:30:1d:92:
         ea:da:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org