Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32382e302f32322d3232203d3e203238313635.roa
File:                     3137372e3232322e32382e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          ibJzGCVpBiv2nJKAZNAPdNlxETfn4CH6uH0/OQAk4M4=
Subject key identifier:   59:68:AD:D6:12:67:62:45:AF:2F:37:FB:FB:DA:A5:79:AA:DB:F5:32
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       0749CF0F9684EB194376B68F7E4408D5C4E5868C
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32382e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:33 +0000
ROA not before:           Wed 31 Jul 2024 22:20:33 +0000
ROA not after:            Wed 30 Jul 2025 22:25:33 +0000
asID:                     28165
IP address blocks:        177.222.28.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:49:cf:0f:96:84:eb:19:43:76:b6:8f:7e:44:08:d5:c4:e5:86:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:33 2024 GMT
            Not After : Jul 30 22:25:33 2025 GMT
        Subject: CN=5968ADD612676245AF2F37FBFBDAA579AADBF532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:85:72:81:a7:de:4f:ab:24:a2:28:ff:08:
                    bb:17:86:a7:b9:12:95:31:24:8f:45:6d:0b:5a:ce:
                    c0:d1:76:61:6b:e2:46:3f:ea:9c:9f:7e:4a:f6:e6:
                    3d:23:46:8f:5c:9e:a6:18:44:3a:cd:2c:22:81:97:
                    6f:18:22:f6:7c:0d:28:42:58:83:5c:98:38:12:5d:
                    8c:81:ac:f7:87:20:31:17:6c:ce:17:03:ea:02:80:
                    eb:08:f9:ae:59:03:1b:ed:75:fe:6b:03:11:26:ca:
                    b2:23:d9:bb:02:a6:cb:97:8f:81:9b:00:f0:53:73:
                    00:66:98:3f:f3:39:03:2e:47:64:2a:4f:5b:d8:69:
                    95:8b:0f:b8:0c:e8:95:31:82:95:4b:23:5c:fa:e6:
                    90:8a:7d:e9:dc:94:83:85:dc:f1:4b:96:b0:2a:86:
                    58:5f:d8:e6:16:78:a7:86:5a:aa:02:76:f0:d5:1f:
                    dd:df:d8:eb:ed:05:f0:eb:81:cb:2b:47:6a:0a:62:
                    eb:46:c4:92:88:8d:d7:86:74:46:c3:4b:fd:43:20:
                    9b:53:71:a0:77:9a:ea:dd:3c:af:2e:f6:78:22:e5:
                    02:6d:f4:97:79:8e:02:a8:c2:b4:e8:21:30:c0:f2:
                    b1:d7:3f:a1:12:83:91:1e:2b:38:02:e1:29:94:4c:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:68:AD:D6:12:67:62:45:AF:2F:37:FB:FB:DA:A5:79:AA:DB:F5:32
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137372e3232322e32382e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:ad:8e:20:0d:3a:ee:4a:26:a0:94:6d:c2:bd:9c:2b:16:
         d4:e1:77:bc:7f:d0:1e:6d:8b:cd:62:87:80:58:cc:9f:4c:6d:
         48:cb:eb:25:56:5f:dc:bc:b8:cb:b7:81:be:c4:db:0a:0d:2b:
         fa:4e:ad:c8:0d:ea:79:d0:2f:9f:e6:a1:12:6a:a2:80:1c:02:
         66:d2:95:3d:d6:d1:7e:fe:bd:41:c9:c2:d5:1d:1a:bf:58:a7:
         b7:39:79:bd:f0:d3:a8:06:8d:d4:50:cf:0c:d1:ea:f2:55:74:
         b1:75:15:07:4e:8d:a1:e8:b6:04:38:1c:d9:35:65:b5:b9:51:
         e5:1d:61:d6:eb:76:0f:a8:ae:c1:95:a6:b6:53:2f:9b:7d:24:
         da:e2:7a:15:73:46:ff:9c:27:fb:dd:6f:e3:72:d0:6f:06:63:
         97:26:1c:52:9b:8b:ca:97:9c:37:fe:f4:4b:90:6d:dd:fd:3f:
         1b:34:16:c1:57:da:c5:5d:a2:36:c4:f1:6f:b3:e6:df:c4:89:
         37:07:9c:7a:dd:ad:a4:8c:f3:3b:c2:ed:56:9e:9e:3f:cf:f0:
         2e:a0:f4:d0:ac:68:90:da:7a:48:72:b0:94:0f:fc:04:31:cb:
         4a:33:4d:ca:cf:cd:e4:9c:1c:1e:33:15:0b:ae:86:a0:3b:43:
         c4:03:80:bb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB0nPD5aE6xlDdraPfkQI1cTlhowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMzNaFw0yNTA3MzAyMjI1MzNaMDMxMTAvBgNV
BAMTKDU5NjhBREQ2MTI2NzYyNDVBRjJGMzdGQkZCREFBNTc5QUFEQkY1MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbk4VygafeT6skoij/CLsXhqe5
EpUxJI9FbQtazsDRdmFr4kY/6pyffkr25j0jRo9cnqYYRDrNLCKBl28YIvZ8DShC
WINcmDgSXYyBrPeHIDEXbM4XA+oCgOsI+a5ZAxvtdf5rAxEmyrIj2bsCpsuXj4Gb
APBTcwBmmD/zOQMuR2QqT1vYaZWLD7gM6JUxgpVLI1z65pCKfenclIOF3PFLlrAq
hlhf2OYWeKeGWqoCdvDVH93f2OvtBfDrgcsrR2oKYutGxJKIjdeGdEbDS/1DIJtT
caB3murdPK8u9ngi5QJt9Jd5jgKowrToITDA8rHXP6ESg5EeKzgC4SmUTJ79AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWWit1hJnYkWvLzf7+9qlearb9TIwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzNzM3MmUzMjMyMzIyZTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsd4cMA0GCSqGSIb3DQEBCwUAA4IBAQBMk62OIA06
7komoJRtwr2cKxbU4Xe8f9AebYvNYoeAWMyfTG1Iy+slVl/cvLjLt4G+xNsKDSv6
Tq3IDep50C+f5qESaqKAHAJm0pU91tF+/r1BycLVHRq/WKe3OXm98NOoBo3UUM8M
0eryVXSxdRUHTo2h6LYEOBzZNWW1uVHlHWHW63YPqK7Blaa2Uy+bfSTa4noVc0b/
nCf73W/jctBvBmOXJhxSm4vKl5w3/vRLkG3d/T8bNBbBV9rFXaI2xPFvs+bfxIk3
B5x63a2kjPM7wu1Wnp4/z/AuoPTQrGiQ2npIcrCUD/wEMctKM03Kz83knBweMxUL
roagO0PEA4C7
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org