Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          jXFyoFIOAKX8gvcC4vUpNyZnhFy2xCNuXsXy4/EqAQw=
Subject key identifier:   45:24:DC:2C:86:69:0C:57:E4:16:EB:7A:61:7F:28:93:14:94:B7:77
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       4CBD6520341E4715DC89E2497C089820A470D34B
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:36 +0000
ROA not before:           Wed 31 Jul 2024 22:20:36 +0000
ROA not after:            Wed 30 Jul 2025 22:25:36 +0000
asID:                     28165
IP address blocks:        177.222.21.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bd:65:20:34:1e:47:15:dc:89:e2:49:7c:08:98:20:a4:70:d3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:36 2024 GMT
            Not After : Jul 30 22:25:36 2025 GMT
        Subject: CN=4524DC2C86690C57E416EB7A617F28931494B777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:c3:d6:7c:4d:0d:43:bf:9e:d9:84:a2:cf:
                    ce:b1:6f:52:c2:5e:f5:a4:23:4a:93:5a:91:de:fa:
                    df:f8:55:2e:59:c1:f5:1f:b2:e9:01:aa:7b:5c:a9:
                    2b:e7:eb:33:8f:7b:7e:0e:ba:20:a1:a4:fd:64:f9:
                    1d:63:d2:a5:da:52:5b:52:2d:2e:3e:c9:55:f8:bb:
                    95:03:18:3d:e1:01:32:e8:e4:b8:4a:9d:4b:2a:09:
                    7e:cb:4b:91:d6:b1:89:f0:05:64:a9:94:c8:37:bb:
                    5a:5f:3b:44:22:c3:f2:e5:93:fe:00:f5:a6:98:a4:
                    d1:e8:51:bd:90:98:3b:fe:21:09:ce:f3:0e:2a:3d:
                    a9:e4:b0:64:be:ee:2f:98:1b:f9:71:76:81:82:81:
                    1b:dd:18:42:ff:4f:e1:3d:18:eb:5d:10:40:8b:e7:
                    0a:af:fb:34:20:49:58:a7:c7:f6:91:d7:0a:3d:33:
                    7b:e9:83:04:48:51:a9:aa:e6:9e:27:49:3e:7b:27:
                    68:26:f7:27:23:45:51:03:7d:eb:e2:e1:ab:85:89:
                    15:5b:6d:c0:07:99:7b:9e:98:98:ea:77:15:5a:01:
                    96:76:33:dd:6f:c3:59:5b:9a:1e:e1:45:64:ab:0b:
                    41:69:c4:23:a0:25:73:24:4e:14:1e:8a:c6:67:9f:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:24:DC:2C:86:69:0C:57:E4:16:EB:7A:61:7F:28:93:14:94:B7:77
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:11:07:ac:fe:b8:22:82:65:e8:b5:c3:31:aa:64:73:4d:
         2c:fe:ef:18:a0:ce:bd:13:20:22:f4:d4:ce:3b:fe:62:2a:79:
         41:e8:b3:56:35:34:c2:8e:1c:fe:51:3a:c4:03:14:40:95:21:
         96:ee:c5:6b:3f:ce:d4:2c:06:3e:a6:af:26:fd:af:a1:98:24:
         3b:2d:ed:3a:47:d1:0e:0a:2b:3a:65:e5:c3:18:aa:37:a3:15:
         b7:6c:45:b1:6c:6e:c8:5f:d6:42:b1:b2:05:d5:46:be:66:4b:
         74:ba:a4:19:f2:f3:26:25:3d:61:c4:07:cd:b5:43:91:ea:85:
         d8:1d:1d:03:f2:3c:a4:e1:e0:10:05:f3:59:37:e7:99:45:dd:
         9c:bf:d7:0b:e2:14:71:24:fd:15:a9:ff:83:c7:b1:10:1e:34:
         8a:b8:bf:77:c5:66:9d:66:e7:34:a0:da:a2:94:6f:d6:97:1f:
         e3:94:21:b8:6e:a9:84:e3:69:c2:c0:e5:c9:38:26:ca:37:cb:
         ba:31:a6:e1:9f:82:4a:69:63:30:d3:6b:29:9b:d9:61:58:9b:
         35:fd:83:c0:96:00:f1:fb:2c:c2:36:24:0f:7c:76:8a:d9:e4:
         ee:0d:80:c6:d1:a1:12:b9:54:a0:30:bf:60:e2:5a:88:76:dd:
         1d:bb:84:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org