Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232302e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          JFS1WXivCmH/rMK3Ew0yQIx9xT3LVkKAnpPJonZHcU4=
Subject key identifier:   F5:0D:4B:56:8E:C5:12:D0:06:AC:39:06:2F:95:1B:F9:68:15:F5:2F
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       69B23723086519F4DA008BDACBF992FD544C6065
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232302e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:42 +0000
ROA not before:           Wed 31 Jul 2024 22:20:42 +0000
ROA not after:            Wed 30 Jul 2025 22:25:42 +0000
asID:                     28165
IP address blocks:        187.62.220.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b2:37:23:08:65:19:f4:da:00:8b:da:cb:f9:92:fd:54:4c:60:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:42 2024 GMT
            Not After : Jul 30 22:25:42 2025 GMT
        Subject: CN=F50D4B568EC512D006AC39062F951BF96815F52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:b6:c4:15:41:3c:74:e7:fc:7d:cf:1d:7d:
                    50:2d:d4:e3:e7:92:c2:f5:7a:67:3d:e0:91:4b:97:
                    7b:9f:e1:74:a9:30:20:68:71:37:ae:4f:ad:54:17:
                    17:a5:65:ea:b7:d9:46:a3:44:25:3c:99:0e:99:6d:
                    33:ff:ea:77:0f:ec:33:2e:ef:bc:91:39:a5:f9:f5:
                    9d:d5:78:d2:5d:e7:9e:1b:27:a7:d8:d2:1d:06:78:
                    1b:87:15:f0:ba:ef:96:2b:8a:9e:4c:7d:c9:d0:7e:
                    9d:6a:76:0f:98:d4:46:97:ac:8b:60:73:5e:6f:6f:
                    5e:f7:e8:96:2d:38:ce:99:55:b4:b7:41:84:56:a3:
                    2f:42:bc:e0:73:8d:92:c7:ea:5f:04:df:e6:4d:8a:
                    ad:b0:90:81:73:db:61:07:80:c8:bf:c2:4f:c2:89:
                    b9:e9:85:70:49:21:34:3e:c8:4c:0a:6c:19:7b:30:
                    98:5f:6e:fb:38:41:54:7e:e6:86:dd:51:7c:83:15:
                    02:b3:e5:63:2b:56:fa:42:ec:f5:4d:9b:18:d2:9d:
                    9b:60:55:68:1e:9d:57:10:44:71:34:19:6d:65:ad:
                    ef:5f:c8:75:53:87:97:ca:a4:bd:c3:cb:99:04:48:
                    a7:4f:54:69:8c:9f:27:2d:37:2e:8e:32:16:f2:0e:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0D:4B:56:8E:C5:12:D0:06:AC:39:06:2F:95:1B:F9:68:15:F5:2F
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4f:64:65:b8:53:6f:b6:d6:e1:a1:64:c5:c6:18:5b:f7:ed:
         20:85:6c:fe:6a:73:2b:13:8f:29:62:03:73:1d:95:34:49:42:
         72:63:03:88:ff:fb:ca:64:bd:df:79:aa:19:19:b6:60:6e:0a:
         a5:e5:5e:67:5e:96:1d:70:9a:2c:9f:9c:f1:6f:eb:04:81:4e:
         62:2c:34:de:00:c8:94:80:e6:07:f5:52:23:9a:34:da:cf:6f:
         da:42:2c:80:96:c8:a8:dc:ab:58:b1:38:81:63:dd:93:9e:b5:
         ba:51:03:9d:46:aa:51:06:21:d6:7c:0e:5c:e7:7f:c6:d2:95:
         2c:42:4f:c2:07:5e:88:38:11:c1:ef:ba:81:b4:a7:06:be:75:
         a4:92:1f:a2:cc:56:5c:d5:b8:9f:af:b5:00:5e:b9:ae:7d:0b:
         43:a8:8a:74:9d:5f:2b:cd:a6:d9:23:3d:f5:04:be:5c:d6:36:
         03:a0:ce:14:86:ae:b3:ec:0b:f4:a1:7b:6f:4e:4f:b5:76:14:
         1c:1d:25:9b:ef:47:d1:9b:56:0d:4f:06:bd:84:ac:30:2e:93:
         23:2b:d8:ab:8a:e0:01:eb:f1:99:8d:67:1a:b8:07:9a:46:17:
         f6:43:ab:27:53:5c:85:ea:cb:96:2d:a3:48:e0:ff:b2:8b:d4:
         a8:cf:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org