Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31382e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e31382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          CWUsBNaG+Tqe5jAN/HwLYn9y0jxxAmL2v4Cwqls7k1g=
Subject key identifier:   28:F3:DB:7D:49:2F:D1:93:7D:84:80:DC:B4:F4:B7:64:1C:9C:A5:71
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       7933B4A21E17DEB445132EBACC35546A4229FB42
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31382e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:29 +0000
ROA not before:           Wed 31 Jul 2024 22:20:29 +0000
ROA not after:            Wed 30 Jul 2025 22:25:29 +0000
asID:                     28165
IP address blocks:        177.222.18.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:33:b4:a2:1e:17:de:b4:45:13:2e:ba:cc:35:54:6a:42:29:fb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:29 2024 GMT
            Not After : Jul 30 22:25:29 2025 GMT
        Subject: CN=28F3DB7D492FD1937D8480DCB4F4B7641C9CA571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:4c:9a:b4:7a:b3:10:b8:1c:5e:95:a5:9e:
                    8c:d3:20:12:8d:b4:66:20:48:4f:d5:72:20:f1:47:
                    c9:90:66:2b:de:f6:41:2f:bb:9a:d1:8c:71:b2:f8:
                    a1:4d:d0:fc:a4:5a:96:da:7f:b8:f2:b6:0b:63:f3:
                    c5:b3:c6:f8:3a:c8:72:3f:39:86:f3:60:35:13:b2:
                    8e:42:5f:d6:cf:83:2b:59:34:f0:c8:50:e4:d7:15:
                    cf:09:29:9a:2f:6a:19:c5:c8:46:6e:6f:b6:5f:ef:
                    52:06:8d:11:5b:97:43:78:22:34:06:8b:d2:87:66:
                    04:29:31:f4:d4:3f:fe:22:76:96:5a:70:e1:62:60:
                    ab:6a:c4:25:55:10:02:23:dc:d6:cd:ab:ed:4c:fe:
                    dc:e0:e5:01:e3:e2:55:66:4f:c8:65:a2:68:ea:c3:
                    d2:af:ef:91:3e:4f:f7:80:b1:e9:5f:54:f2:1d:05:
                    cc:c6:fa:af:2a:ae:0b:ed:ba:17:5b:c1:cd:cb:11:
                    24:23:b0:74:37:e1:2c:9b:5f:a1:76:5f:c6:99:1a:
                    22:af:37:df:4a:a2:96:3c:31:85:f6:33:16:72:e7:
                    44:af:d3:c1:7f:0b:d0:ed:f9:8b:56:6b:d8:02:d8:
                    af:29:ec:aa:b5:8c:f4:7f:fe:d7:28:4a:12:88:a2:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:DB:7D:49:2F:D1:93:7D:84:80:DC:B4:F4:B7:64:1C:9C:A5:71
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e31382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:49:f9:7b:d4:ef:b1:26:b0:3b:af:6c:39:89:ad:c8:dd:59:
         70:a1:93:ef:fc:a8:66:3f:76:3e:e1:a4:17:6e:54:e1:47:55:
         60:79:e0:1f:d1:0a:a6:29:95:98:31:1d:7c:95:1f:0c:41:3c:
         71:4f:c3:72:70:ab:bc:5b:05:5b:25:ba:c2:60:c7:30:e0:73:
         67:90:84:88:a9:f3:aa:bc:d2:2e:6b:5c:dc:8f:3d:de:28:fe:
         33:7a:ed:8a:78:d2:11:fd:ef:86:98:f6:bc:fa:b4:aa:92:28:
         4b:f1:17:87:92:8f:2c:7b:ec:25:21:06:77:30:f2:34:a0:ec:
         eb:c2:ae:bd:9f:0f:57:68:4c:8a:48:19:1d:0d:6e:ad:a2:15:
         6b:30:0d:33:89:51:ca:94:2d:a6:c6:8e:f4:7b:13:b5:77:07:
         28:1c:11:88:b7:3c:19:63:c5:53:c0:c8:b5:72:e5:d1:4f:37:
         d1:14:d9:a1:85:cd:eb:de:ea:f1:5b:ac:ca:68:78:c2:05:b5:
         28:44:5b:ca:1e:51:0c:3f:a4:f7:57:f8:f5:c6:73:8d:65:c1:
         d1:f7:f4:37:f8:bf:85:b9:f6:99:59:12:9a:03:d4:6b:02:fc:
         73:8d:51:f2:08:fa:be:ca:f9:52:fa:a0:aa:ea:d8:87:fb:eb:
         39:43:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org