Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          noP+Ju4WC6mDAawl+WjKCcx0uQ/XT23rDG4/tX5xBQw=
Subject key identifier:   A4:34:77:E3:ED:AC:0B:13:D4:A7:2B:63:5B:89:43:1B:2D:AB:ED:D0
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       29C9CACAAD005257EDC6408B4A44D6CD7595335D
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:43 +0000
ROA not before:           Wed 31 Jul 2024 22:20:43 +0000
ROA not after:            Wed 30 Jul 2025 22:25:43 +0000
asID:                     28165
IP address blocks:        187.62.221.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c9:ca:ca:ad:00:52:57:ed:c6:40:8b:4a:44:d6:cd:75:95:33:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:43 2024 GMT
            Not After : Jul 30 22:25:43 2025 GMT
        Subject: CN=A43477E3EDAC0B13D4A72B635B89431B2DABEDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:09:52:6a:1b:35:59:dd:3b:76:3e:de:d5:
                    4b:4e:cd:72:95:15:a1:84:3e:0c:28:05:f0:78:2c:
                    35:f2:15:d7:05:c8:ce:ed:5d:3c:ee:d3:b4:73:b2:
                    f5:dd:04:b8:5d:87:89:b9:cf:b3:8d:9b:2a:fb:35:
                    68:3e:63:ee:26:b2:db:d0:72:67:f8:73:3c:38:2e:
                    53:c6:2b:b4:5a:c7:a9:3c:db:21:ab:8c:bc:8c:a4:
                    22:ad:bf:22:e6:75:ba:aa:85:25:6d:8c:1a:b2:61:
                    6a:fb:b4:7f:6a:dd:1a:b3:df:03:e7:87:5b:04:20:
                    f4:1e:6f:72:17:1f:84:68:36:94:43:68:c3:bb:e7:
                    b8:2d:55:fc:7c:a9:a5:6e:71:47:09:67:9f:b6:c9:
                    ea:e7:13:fb:0e:e5:12:92:50:3d:db:a4:79:db:d7:
                    c8:1d:74:bd:d1:da:9a:bf:ec:bc:58:ca:69:ba:72:
                    19:51:ad:c7:bc:67:b2:f5:6b:10:b2:31:da:c8:87:
                    c4:12:5a:6e:54:a3:b7:9f:33:a5:8d:cd:46:c2:77:
                    10:91:2b:9d:8a:e9:a4:79:f8:2f:0c:85:43:7c:d0:
                    b4:7b:cf:c3:f6:29:60:7b:76:ef:19:4f:57:b1:f7:
                    3d:da:29:25:31:bf:4d:af:2c:03:43:ef:eb:53:73:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:77:E3:ED:AC:0B:13:D4:A7:2B:63:5B:89:43:1B:2D:AB:ED:D0
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:59:95:66:de:09:c5:c8:b4:97:d7:e6:c1:85:56:84:62:a5:
         af:f0:ca:36:59:09:20:06:d0:7d:d9:75:65:1e:14:63:94:40:
         b3:0b:eb:a2:74:8f:4c:79:eb:1f:bb:03:84:2d:20:bc:9d:f0:
         fe:c6:62:2f:bb:68:3d:14:6f:59:d5:c8:5b:d0:c4:de:dc:a0:
         8c:d8:cf:4c:06:f0:2d:0a:7d:8b:9e:79:34:83:c4:3c:97:50:
         e3:c7:24:c5:74:f4:23:74:6c:9d:f9:78:5f:7e:b2:2d:d6:0b:
         1f:9d:3b:43:61:7c:30:65:a2:70:4b:ba:f6:9b:b4:50:bd:92:
         11:32:82:a1:da:a2:99:06:0d:eb:e6:24:f2:d0:d4:ca:24:df:
         5d:05:37:fe:43:17:bd:98:4a:29:3e:35:0d:9f:18:1c:23:ef:
         2b:2e:2a:4d:73:c2:21:2c:55:b0:4d:72:a3:88:5f:4b:2b:96:
         78:a8:76:a2:9b:97:85:32:b1:df:6a:1c:36:59:7c:0d:1a:1c:
         23:b2:a7:43:9d:00:13:46:dd:dd:e6:9b:4d:c5:14:5e:e7:aa:
         5a:90:c1:69:bd:be:b7:6c:01:17:59:46:46:bd:01:40:5a:73:
         d5:10:90:e1:6b:2c:50:de:74:50:81:28:b5:ea:08:40:36:75:
         a7:9b:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org