Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          HttxS9uRW2UIrJE7KlRFuEJ/0qaSkWzggGpJ7J+2ITQ=
Subject key identifier:   92:49:EE:50:07:2E:CC:A9:E1:27:D8:6D:5B:23:65:D0:C2:18:1C:C4
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       7117E3E63E2D1E4F03BE8FAF0D301A40EBD3FC41
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:23 +0000
ROA not before:           Wed 31 Jul 2024 22:20:23 +0000
ROA not after:            Wed 30 Jul 2025 22:25:23 +0000
asID:                     28165
IP address blocks:        177.222.22.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:17:e3:e6:3e:2d:1e:4f:03:be:8f:af:0d:30:1a:40:eb:d3:fc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:23 2024 GMT
            Not After : Jul 30 22:25:23 2025 GMT
        Subject: CN=9249EE50072ECCA9E127D86D5B2365D0C2181CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:5c:b5:ea:47:65:36:5b:1e:db:17:c9:bb:
                    b3:ec:63:b7:49:bd:23:f4:a9:f9:27:4e:d8:a3:d9:
                    a6:ac:03:45:dc:b8:43:80:83:ff:3d:64:ee:39:66:
                    e4:e1:df:2e:f2:47:70:e4:ef:28:23:d2:2d:66:6d:
                    9e:d8:6f:49:8a:e6:55:ef:98:66:af:f8:21:1d:a3:
                    9e:c7:1d:27:c7:42:90:76:c9:cc:8a:e8:4f:03:0d:
                    b9:86:4e:ad:11:f4:5d:92:af:fb:e0:0b:0d:bf:39:
                    2c:25:c7:5d:f9:d1:6d:02:0f:08:33:0f:eb:eb:f8:
                    08:cf:88:d7:99:85:cc:e1:e7:a7:2f:ff:cc:5a:5f:
                    d3:6e:1f:6e:2f:d6:ee:b7:c2:86:6a:a6:27:a2:00:
                    ef:8c:3c:97:a5:45:65:a7:da:c6:cd:10:5b:b9:37:
                    b8:37:98:99:64:e6:04:06:51:13:2a:f8:ff:0f:77:
                    0d:92:20:e1:2e:41:a4:cb:9c:d5:dd:5d:62:58:38:
                    41:a4:af:5d:b5:1e:89:6b:74:62:af:22:9d:85:e1:
                    75:2b:3a:5a:cd:ae:82:3c:76:65:a6:90:0c:a5:92:
                    6c:41:54:83:b4:d5:2b:54:bd:94:2b:f8:c1:6b:57:
                    fc:dc:f1:70:c6:46:19:02:b1:8a:29:99:82:c5:3b:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:49:EE:50:07:2E:CC:A9:E1:27:D8:6D:5B:23:65:D0:C2:18:1C:C4
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:57:fa:e6:24:dc:02:f0:97:90:b2:00:69:84:59:eb:9c:92:
         45:90:9a:18:6c:c9:7d:2f:e3:80:49:18:6a:07:98:31:1f:ac:
         1d:9d:58:f5:29:6a:4d:3d:6a:3d:24:6e:43:8d:02:2b:09:f8:
         39:be:d4:b9:08:1f:14:66:6f:29:06:50:05:9a:52:56:a2:92:
         e7:f2:ba:12:2c:53:4d:59:fb:ea:05:ab:2a:b2:52:2c:d0:b4:
         58:48:b0:3f:e3:db:28:c8:0e:0c:9c:7a:00:74:fa:1d:dc:57:
         73:22:f1:24:67:24:44:fc:6e:e3:b1:e1:0e:d6:b6:7f:c3:c7:
         a5:79:5e:d7:27:c6:73:d0:49:1b:b4:41:d1:6d:c0:84:e1:75:
         5e:3e:92:5b:55:eb:95:07:c4:de:41:59:13:97:92:63:5b:7e:
         49:b3:58:a8:c3:b1:69:f2:90:d9:16:85:ca:53:9c:78:42:63:
         18:99:3f:29:03:22:be:56:9d:79:ba:67:7f:9e:e3:01:a0:af:
         39:09:14:ea:ca:32:a0:a7:69:de:b0:b5:2e:5a:a6:24:01:8e:
         1b:20:3b:3f:e3:4b:bf:8c:81:55:0b:74:16:8a:c4:16:e3:28:
         17:0f:8d:4b:52:b5:c5:31:34:71:e2:3e:7d:be:13:11:48:38:
         b4:1b:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org