Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32342e302f32322d3232203d3e203238313635.roa
File:                     3137372e3232322e32342e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          uIfB2xXGAw5Rc2XEIHhTT36fHf4k52p3q8/RssCIEqk=
Subject key identifier:   88:8B:48:8D:A2:40:11:16:FD:E6:B8:97:73:8C:81:23:BB:C8:1F:37
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       49804306DA35CD6990CCCC311831EE3A536D3306
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32342e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:32 +0000
ROA not before:           Wed 31 Jul 2024 22:20:32 +0000
ROA not after:            Wed 30 Jul 2025 22:25:32 +0000
asID:                     28165
IP address blocks:        177.222.24.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:80:43:06:da:35:cd:69:90:cc:cc:31:18:31:ee:3a:53:6d:33:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:32 2024 GMT
            Not After : Jul 30 22:25:32 2025 GMT
        Subject: CN=888B488DA2401116FDE6B897738C8123BBC81F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:66:7f:ce:bc:e5:b0:a6:9e:3b:88:a0:b2:
                    0e:bc:12:45:12:81:af:b3:a9:e1:fd:2c:9a:33:c5:
                    f7:6e:02:fb:ba:4e:b5:30:39:44:06:71:1f:9e:53:
                    95:ba:ee:8a:5d:74:3f:cd:64:42:f9:43:9b:a4:a7:
                    d7:37:99:19:73:a1:3b:b7:4b:10:b7:f9:49:0b:55:
                    0e:61:7d:41:d7:c3:e8:b6:29:6e:53:46:f9:84:ba:
                    a3:c7:a9:37:67:cd:9a:95:45:14:95:33:9d:86:b8:
                    11:21:a8:c7:77:3f:4d:e6:77:aa:8c:81:0a:42:2a:
                    09:ae:c5:9d:e5:de:78:bc:f6:e7:3d:b0:45:61:d1:
                    22:27:a7:0e:1c:8e:d5:02:c6:2e:fd:74:ea:66:15:
                    e6:59:d9:77:43:32:8a:a5:c0:c3:39:e9:ea:34:f0:
                    67:27:84:d3:5a:65:60:4e:24:81:42:26:40:2a:a9:
                    0c:67:11:23:f7:81:77:2e:ad:42:33:f4:7b:e4:ad:
                    af:c0:0e:ae:7e:2d:20:1a:d0:b8:26:97:ce:34:f8:
                    d2:76:f4:07:72:18:76:b3:e0:db:dc:75:cd:53:5e:
                    d4:6f:9b:42:3b:aa:63:db:ad:ea:1d:0d:42:94:9e:
                    0a:a1:eb:c6:99:72:f8:fe:3c:f4:05:1a:40:48:b5:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:48:8D:A2:40:11:16:FD:E6:B8:97:73:8C:81:23:BB:C8:1F:37
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32342e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:78:2b:e9:e5:99:de:96:1b:77:12:85:40:22:b3:e1:f9:94:
         1a:0f:6e:64:02:60:b1:19:08:57:43:a7:f3:e9:ad:9f:7b:72:
         44:06:ee:5a:fe:31:0f:2e:fe:d6:e0:15:02:bd:a1:8f:ce:1b:
         93:29:c6:b1:5d:89:70:5b:d7:8a:37:7f:2a:e4:ba:82:cb:29:
         6a:bf:e8:a2:5d:9c:b6:ad:89:5c:b4:d5:c0:66:28:d5:1f:42:
         4e:16:60:27:a9:ad:ea:32:e6:6b:50:c4:2c:78:b1:ee:35:81:
         5f:a2:ae:2b:49:19:22:37:a6:3f:f5:0b:31:cc:17:02:aa:d2:
         e8:a2:30:d4:ed:26:07:c6:ac:fc:d8:54:b5:f2:48:72:cf:55:
         a2:5a:95:9b:42:e7:2c:a1:5e:69:5d:5d:8f:d2:f5:45:7d:93:
         49:11:b6:f5:64:cd:d2:1b:ed:3e:80:37:6b:28:3b:01:b0:f4:
         74:49:8a:64:b4:4e:84:10:47:db:0a:8a:f0:de:9c:d0:88:f4:
         95:22:46:90:6b:9f:b3:7b:b3:03:fc:0f:4b:70:46:0f:b6:b3:
         41:08:b1:01:1b:17:8a:3b:75:63:9b:26:b9:f2:a9:2e:43:64:
         48:a2:08:fd:60:08:74:b9:5f:f1:70:da:a1:90:6d:06:a7:32:
         ca:1c:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org