Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e31372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          zc6Uu+w7yPYI4zptYTWP0884BCHZ2bWq4+34oT+xcfU=
Subject key identifier:   15:C8:A2:17:22:C5:2F:B7:EF:C8:0F:99:56:E8:EA:99:37:A2:48:3B
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       6FD7100B3D70FCC6CD443C21CE4972AA29856C96
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:28 +0000
ROA not before:           Wed 31 Jul 2024 22:20:28 +0000
ROA not after:            Wed 30 Jul 2025 22:25:28 +0000
asID:                     28165
IP address blocks:        177.222.17.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d7:10:0b:3d:70:fc:c6:cd:44:3c:21:ce:49:72:aa:29:85:6c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:28 2024 GMT
            Not After : Jul 30 22:25:28 2025 GMT
        Subject: CN=15C8A21722C52FB7EFC80F9956E8EA9937A2483B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:85:07:77:88:42:8a:a3:38:2f:24:e2:91:
                    21:a2:36:26:f8:52:fc:07:74:5e:4d:aa:1e:de:ac:
                    5d:3c:00:26:dc:33:78:c4:ac:20:c6:f9:e3:9d:32:
                    f1:26:6d:59:61:5a:33:a6:3d:d6:c0:4b:cf:ad:42:
                    e0:f2:e9:c5:7b:5d:46:f0:20:02:41:4f:8f:5c:39:
                    29:23:c1:70:8d:75:e3:08:05:a2:ee:67:d2:c8:bb:
                    7f:7a:b0:41:94:77:d5:01:c9:ab:57:a8:b7:c5:b3:
                    b2:3c:bf:2d:ff:1e:38:f9:df:be:e1:a9:cf:5a:1d:
                    a4:74:60:52:b4:44:a4:e2:7a:25:f6:6b:4d:e6:44:
                    cb:59:5d:e8:2a:2a:2e:53:da:87:ee:10:ef:14:e1:
                    f3:ee:94:92:0f:ce:64:c7:21:fa:2e:01:3f:18:9e:
                    fa:f2:3b:44:ff:e7:f2:89:89:b0:bb:86:06:a6:cf:
                    fc:e1:df:d9:f5:b1:67:80:6b:d1:7b:7c:d1:1d:55:
                    86:cd:b6:c8:17:a5:89:cf:f7:42:4c:c0:71:48:0a:
                    59:e2:fb:ae:a0:3e:b3:21:1b:55:e6:5b:10:7e:39:
                    93:7b:be:4c:18:73:24:ce:cf:7d:0b:db:b4:54:a8:
                    4d:5c:3b:26:0a:c5:96:fe:c8:28:cd:af:95:4a:38:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C8:A2:17:22:C5:2F:B7:EF:C8:0F:99:56:E8:EA:99:37:A2:48:3B
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:3a:75:15:01:0e:01:12:ce:26:80:c5:db:56:e6:9f:ce:
         fa:03:99:7f:d9:23:ec:d8:61:a1:51:01:be:3f:ce:6a:f8:3d:
         b1:2e:0f:ac:06:59:17:51:80:1e:48:fb:6a:4d:dd:6e:43:39:
         c0:c8:7b:b3:81:28:9e:42:1d:67:57:4d:b1:d4:1f:dc:e1:3e:
         ad:42:f5:db:2f:5c:f7:b5:e6:30:13:64:22:2b:0b:8e:76:58:
         26:5a:4d:3a:f5:c5:03:61:db:8e:da:15:da:88:dc:f3:80:77:
         7a:cb:1c:4d:9c:a5:d9:03:bc:c0:3c:b1:66:51:18:5f:2f:87:
         ef:5e:de:5b:9c:cf:6d:a0:3a:7b:69:e5:e0:96:e4:ec:62:7e:
         dd:2d:c2:ae:07:5e:af:b5:b0:86:d3:6e:12:95:d6:16:30:45:
         81:60:3a:5b:48:17:21:f0:cc:d6:f9:56:d1:05:d2:bb:1f:79:
         28:63:60:26:32:97:b2:61:a9:84:7f:8a:41:22:c9:8d:04:05:
         90:d2:81:95:be:80:21:ad:d4:e1:5e:e4:15:22:a9:17:d4:c9:
         87:af:21:d9:cf:89:1b:a5:d1:99:25:2b:77:a6:44:05:a1:61:
         2d:89:3d:04:cd:bc:e5:da:cb:ed:8c:98:c4:e5:8d:b3:ff:00:
         2b:ba:4b:71
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb9cQCz1w/MbNRDwhzklyqimFbJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMjhaFw0yNTA3MzAyMjI1MjhaMDMxMTAvBgNV
BAMTKDE1QzhBMjE3MjJDNTJGQjdFRkM4MEY5OTU2RThFQTk5MzdBMjQ4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom4UHd4hCiqM4LyTikSGiNib4
UvwHdF5Nqh7erF08ACbcM3jErCDG+eOdMvEmbVlhWjOmPdbAS8+tQuDy6cV7XUbw
IAJBT49cOSkjwXCNdeMIBaLuZ9LIu396sEGUd9UByatXqLfFs7I8vy3/Hjj5377h
qc9aHaR0YFK0RKTieiX2a03mRMtZXegqKi5T2ofuEO8U4fPulJIPzmTHIfouAT8Y
nvryO0T/5/KJibC7hgamz/zh39n1sWeAa9F7fNEdVYbNtsgXpYnP90JMwHFIClni
+66gPrMhG1XmWxB+OZN7vkwYcyTOz30L27RUqE1cOyYKxZb+yCjNr5VKOMrnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFciiFyLFL7fvyA+ZVujqmTeiSDswHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzNzM3MmUzMjMyMzIyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd4RMA0GCSqGSIb3DQEBCwUAA4IBAQCfQzp1FQEO
ARLOJoDF21bmn876A5l/2SPs2GGhUQG+P85q+D2xLg+sBlkXUYAeSPtqTd1uQznA
yHuzgSieQh1nV02x1B/c4T6tQvXbL1z3teYwE2QiKwuOdlgmWk069cUDYduO2hXa
iNzzgHd6yxxNnKXZA7zAPLFmURhfL4fvXt5bnM9toDp7aeXgluTsYn7dLcKuB16v
tbCG024SldYWMEWBYDpbSBch8MzW+VbRBdK7H3koY2AmMpeyYamEf4pBIsmNBAWQ
0oGVvoAhrdThXuQVIqkX1MmHryHZz4kbpdGZJSt3pkQFoWEtiT0Ezbzl2svtjJjE
5Y2z/wAruktx
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org