Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e31362e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          gVdQTNeDKBafy4nUaT2d72wKkJWIJxgjj7zuZI+q9Bs=
Subject key identifier:   F7:8F:BD:C2:61:08:14:C2:ED:81:6C:15:BB:C1:F6:59:80:0E:68:89
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       68C0C59291694FC9C91B5689823B30B4AF43A6F0
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:40 +0000
ROA not before:           Wed 31 Jul 2024 22:20:40 +0000
ROA not after:            Wed 30 Jul 2025 22:25:40 +0000
asID:                     28165
IP address blocks:        177.222.16.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c0:c5:92:91:69:4f:c9:c9:1b:56:89:82:3b:30:b4:af:43:a6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:40 2024 GMT
            Not After : Jul 30 22:25:40 2025 GMT
        Subject: CN=F78FBDC2610814C2ED816C15BBC1F659800E6889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:00:a7:aa:ca:81:15:48:dd:16:ab:b6:27:
                    5d:0a:4e:93:50:d5:9e:57:15:3a:b4:7b:7d:85:eb:
                    1e:2c:c5:a7:5b:6a:0a:15:7b:23:65:f1:c9:e3:ab:
                    fc:32:76:9b:18:66:94:79:c7:b4:03:76:b5:72:16:
                    7b:cf:5e:82:71:0d:70:da:73:ae:0e:d1:8a:ae:96:
                    56:5a:a4:90:54:66:07:9e:30:3f:aa:b3:15:94:36:
                    ac:73:b8:f6:a3:bd:5d:77:36:2f:3b:d2:2b:cb:d8:
                    0e:d6:bb:df:4a:0d:ae:f3:14:aa:13:e1:1c:82:9b:
                    a1:11:03:52:54:23:9b:d3:4b:3a:6d:b0:9a:4a:36:
                    9e:60:c5:97:23:1d:8a:ba:2b:04:4b:c0:33:de:e9:
                    43:b7:0c:47:11:be:f1:e8:54:c2:f8:9e:2e:c3:5b:
                    54:48:fc:23:2b:38:a6:1c:aa:ac:3d:b3:93:03:31:
                    16:85:23:2d:31:11:a3:c8:99:67:85:fc:1f:61:40:
                    31:83:a5:79:a2:e8:c8:3d:8a:0b:76:65:48:d7:9f:
                    5d:a8:ac:ad:c4:09:04:f9:55:9c:b8:ea:95:5a:db:
                    78:07:99:cb:09:99:01:e4:c3:99:03:15:e1:65:0a:
                    71:81:e7:3a:b9:37:06:56:a4:e5:ef:2a:33:f7:a5:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:BD:C2:61:08:14:C2:ED:81:6C:15:BB:C1:F6:59:80:0E:68:89
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31362e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:c8:a9:63:38:de:47:cb:ae:06:fc:12:dc:c7:09:fc:9e:
         a2:3b:3d:0e:63:98:ea:45:81:7a:99:08:20:1f:43:e9:52:d2:
         d5:bf:7d:c1:8c:16:44:87:7f:93:7a:3b:45:5e:cb:58:01:7d:
         34:6b:57:44:06:1a:ca:f4:58:13:4c:a8:bc:25:3a:85:2c:4b:
         b9:a7:71:cf:2a:ed:36:97:e5:79:f4:8f:91:9b:d2:8c:ed:96:
         93:02:54:c4:99:10:3a:ee:12:23:26:d8:04:2b:a4:fd:fc:c6:
         b2:ff:6b:e0:c2:fa:1a:74:9e:36:4e:b6:51:a3:56:b3:2a:3a:
         bf:c7:6f:4e:d0:90:e4:89:99:d2:57:22:f8:fe:f1:ba:f7:09:
         fd:48:d4:2f:4e:e8:7b:dc:7e:2c:b5:e8:1e:f1:da:57:ad:eb:
         2c:f8:25:26:e0:6b:d2:82:7b:29:d7:ec:e6:de:27:17:5b:d5:
         34:47:76:59:21:10:7f:64:0b:74:29:c8:c0:7e:b6:84:ba:7e:
         d6:99:3a:ef:31:44:ff:d0:15:c3:1f:e2:ed:1c:80:23:48:32:
         1d:81:5a:49:5a:48:23:d5:64:43:42:78:54:9c:fa:9e:05:99:
         56:e6:d9:71:45:c5:61:9f:7f:82:98:f0:94:ae:7b:ce:72:ee:
         72:de:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org