Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32332e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          sM8urtYTW0JdTzUhyz3ULXgd3Ms/f/o15iigI7Rkf5I=
Subject key identifier:   86:71:EB:4C:38:3B:5A:7C:AA:84:2F:08:61:A6:B0:AB:8B:F9:81:16
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       5578F844DDC51D66EC380E778C1D33BE2BF5D1E4
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32332e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:42 +0000
ROA not before:           Wed 31 Jul 2024 22:20:42 +0000
ROA not after:            Wed 30 Jul 2025 22:25:42 +0000
asID:                     28165
IP address blocks:        177.222.23.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:78:f8:44:dd:c5:1d:66:ec:38:0e:77:8c:1d:33:be:2b:f5:d1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:42 2024 GMT
            Not After : Jul 30 22:25:42 2025 GMT
        Subject: CN=8671EB4C383B5A7CAA842F0861A6B0AB8BF98116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:58:bf:15:04:f9:eb:75:05:03:e3:52:d4:
                    3e:de:9a:4f:49:e9:42:5e:1d:b2:34:b3:c8:80:b7:
                    98:31:54:7f:45:c9:73:49:23:a3:04:f4:ca:ee:1d:
                    50:79:1e:21:6c:f8:57:22:ad:d6:7a:aa:5c:68:c7:
                    01:14:b1:11:4e:80:61:59:de:1e:ed:02:aa:4b:52:
                    44:3d:3c:9b:e9:9b:a1:05:3f:c9:32:28:9e:16:49:
                    8d:eb:f8:5f:64:19:8e:7b:34:d6:a8:4f:a0:dc:5a:
                    cf:6e:70:bf:7c:61:ce:d6:78:6b:72:0a:cf:cb:25:
                    08:9f:c6:da:4e:85:e8:94:8d:8c:e0:cf:51:ee:3a:
                    60:00:5b:5b:22:60:21:2a:37:6e:bd:39:04:71:c1:
                    4a:f0:05:da:a2:53:c1:dd:e1:91:7f:5c:72:58:f0:
                    4a:36:ce:08:ed:7f:e6:fb:c7:4b:eb:dc:96:2a:0e:
                    ed:5d:7e:fa:4d:87:93:08:ca:74:96:ad:7d:18:8c:
                    4c:4c:f7:f7:79:ca:0c:4a:59:e2:1b:ce:7c:a2:0f:
                    c7:8c:cf:3a:87:84:eb:46:98:3e:e7:ad:11:21:98:
                    7c:1d:3a:8b:cc:2a:22:61:b8:4c:f4:79:ba:bc:19:
                    cf:d3:e5:1e:c1:f3:c9:68:33:a9:23:7c:8a:be:5d:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:71:EB:4C:38:3B:5A:7C:AA:84:2F:08:61:A6:B0:AB:8B:F9:81:16
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:18:1a:45:47:d0:10:3c:8a:e6:d5:1e:4e:25:71:c1:a3:
         49:98:f4:16:02:a2:08:4f:37:42:fe:bc:1b:23:be:c2:15:dd:
         be:08:dd:e1:40:e9:04:b6:78:4c:b1:f5:ec:ca:d1:50:a4:24:
         29:5f:07:5c:ce:65:a8:02:54:09:63:7d:dc:13:47:c0:f2:67:
         8a:df:ef:7e:49:e7:e6:d4:fe:f1:e8:f4:c8:2a:f8:f0:de:f5:
         68:fd:a3:58:0d:20:38:1b:e1:ac:51:f3:3e:79:83:5d:eb:84:
         1b:34:cb:5e:65:0a:c1:bd:3b:e4:3e:45:77:c4:8f:59:8b:e0:
         54:41:02:b9:65:12:64:5f:27:ad:06:ab:d1:a4:55:03:04:ee:
         e6:c7:32:ea:04:65:ec:8a:f6:fe:9c:86:07:54:cc:7b:4a:29:
         8d:ec:9b:a8:12:7a:1f:75:1b:fb:0a:dd:11:55:5f:b7:55:c2:
         bd:36:22:13:51:c8:0d:c6:e4:20:21:dd:d6:24:7f:1e:e7:0b:
         d8:df:59:a0:07:53:81:06:1d:f2:3b:6c:bb:d8:b5:0b:a0:03:
         a5:8e:61:ba:79:7e:e2:9d:88:f0:3a:62:81:f8:16:04:e1:91:
         0b:cd:81:20:a5:ea:34:84:18:61:15:6e:f3:ae:35:3a:62:94:
         b8:8f:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org