Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232322e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          vMhZGVqPbLQrDWCp8MSKu5eG8K9AWw/m8560P8VG40w=
Subject key identifier:   02:43:6B:02:A0:88:1F:23:8E:49:4E:90:82:16:EB:75:79:EB:85:5D
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       7BD79F3C8DB7A1B7A75CFE72EB216CECD94BC70E
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232322e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:23 +0000
ROA not before:           Wed 31 Jul 2024 22:20:23 +0000
ROA not after:            Wed 30 Jul 2025 22:25:23 +0000
asID:                     28165
IP address blocks:        187.62.222.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d7:9f:3c:8d:b7:a1:b7:a7:5c:fe:72:eb:21:6c:ec:d9:4b:c7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:23 2024 GMT
            Not After : Jul 30 22:25:23 2025 GMT
        Subject: CN=02436B02A0881F238E494E908216EB7579EB855D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:ab:5e:8e:6a:9b:9f:d8:54:40:7d:2e:fe:
                    62:75:72:10:85:64:8d:ef:9d:60:47:99:8b:3e:b2:
                    6d:4f:66:7f:ce:4b:4f:d8:4c:d5:1d:f1:f1:97:73:
                    0c:8b:df:af:18:93:35:4a:ec:0a:7b:a4:d3:82:d0:
                    14:24:3c:40:36:89:2f:4c:51:b1:d9:fa:20:95:24:
                    31:5d:02:d7:30:06:b1:e3:d4:09:ed:a5:7c:72:67:
                    d6:44:bb:65:27:1b:18:bb:13:0c:68:ef:45:ab:91:
                    a3:39:7e:37:22:9d:25:d6:4b:bd:08:0b:9d:10:fb:
                    b4:46:60:98:ed:95:b8:2a:0d:13:dd:b1:6a:b7:7f:
                    ea:4a:bb:33:f1:98:32:44:3b:80:e5:72:c2:cf:3d:
                    88:ca:8e:db:c2:00:df:8c:b6:75:e7:29:b8:fd:75:
                    27:f6:7f:e3:3d:8e:77:67:d8:4f:5d:22:72:48:d0:
                    b1:65:be:6d:4e:23:54:37:80:eb:ea:01:5b:a3:f7:
                    10:a4:f5:31:e2:5f:00:5b:d4:ba:4f:1c:1c:f3:5a:
                    90:51:86:4d:cd:c4:32:b8:93:aa:0e:cc:74:c6:ba:
                    a6:b3:94:69:a2:9a:5b:07:db:77:e8:c6:a2:65:79:
                    33:9c:4e:99:01:bd:89:40:52:14:be:6a:b5:08:87:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:6B:02:A0:88:1F:23:8E:49:4E:90:82:16:EB:75:79:EB:85:5D
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:71:db:7a:6f:e7:72:04:a8:e9:8d:ed:32:7f:53:4b:06:2d:
         ed:f0:b0:3d:77:5c:6e:3f:8c:c7:c0:84:44:84:53:8d:82:37:
         ba:3a:9a:58:27:e7:88:9c:39:70:23:83:36:18:fb:9e:6d:6c:
         2b:bd:ce:9c:c6:12:3c:f5:7a:b8:74:90:d8:f6:7d:97:eb:8e:
         23:3a:3b:d3:cc:00:19:c6:9d:fb:15:26:60:36:ee:be:5e:72:
         12:cc:8b:22:51:ea:e0:12:f3:16:02:e2:ad:52:98:52:d1:b5:
         0a:55:7f:0e:b8:da:14:29:0f:97:61:98:65:b3:60:1d:0b:ab:
         be:c6:bd:d6:08:af:59:b3:e9:ee:ed:db:a3:8e:ab:76:d2:60:
         f0:7b:84:19:b1:65:f4:06:62:5b:09:be:d6:d4:fd:77:6c:ed:
         45:14:af:7c:47:94:69:5b:01:c4:7c:35:fa:60:e5:77:c5:43:
         62:73:e7:be:a9:f3:ea:d5:6a:a4:1d:a4:b4:4c:9f:d6:15:15:
         64:c4:07:e4:a9:e6:2b:38:b2:89:72:74:19:d2:44:ec:12:fd:
         a7:cd:fa:94:4e:97:46:43:1c:00:da:b3:2c:6d:6c:ca:b3:cf:
         f0:44:28:6d:ac:ab:aa:86:f1:2d:ab:8f:7b:5e:5f:e7:23:fc:
         78:1f:58:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe9efPI23obenXP5y6yFs7NlLxw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMjNaFw0yNTA3MzAyMjI1MjNaMDMxMTAvBgNV
BAMTKDAyNDM2QjAyQTA4ODFGMjM4RTQ5NEU5MDgyMTZFQjc1NzlFQjg1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbatejmqbn9hUQH0u/mJ1chCF
ZI3vnWBHmYs+sm1PZn/OS0/YTNUd8fGXcwyL368YkzVK7Ap7pNOC0BQkPEA2iS9M
UbHZ+iCVJDFdAtcwBrHj1AntpXxyZ9ZEu2UnGxi7Ewxo70WrkaM5fjcinSXWS70I
C50Q+7RGYJjtlbgqDRPdsWq3f+pKuzPxmDJEO4DlcsLPPYjKjtvCAN+MtnXnKbj9
dSf2f+M9jndn2E9dInJI0LFlvm1OI1Q3gOvqAVuj9xCk9THiXwBb1LpPHBzzWpBR
hk3NxDK4k6oOzHTGuqazlGmimlsH23foxqJleTOcTpkBvYlAUhS+arUIh5zHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAkNrAqCIHyOOSU6QghbrdXnrhV0wHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzODM3MmUzNjMyMmUzMjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz7eMA0GCSqGSIb3DQEBCwUAA4IBAQAocdt6b+dy
BKjpje0yf1NLBi3t8LA9d1xuP4zHwIREhFONgje6OppYJ+eInDlwI4M2GPuebWwr
vc6cxhI89Xq4dJDY9n2X644jOjvTzAAZxp37FSZgNu6+XnISzIsiUergEvMWAuKt
UphS0bUKVX8OuNoUKQ+XYZhls2AdC6u+xr3WCK9Zs+nu7dujjqt20mDwe4QZsWX0
BmJbCb7W1P13bO1FFK98R5RpWwHEfDX6YOV3xUNic+e+qfPq1WqkHaS0TJ/WFRVk
xAfkqeYrOLKJcnQZ0kTsEv2nzfqUTpdGQxwA2rMsbWzKs8/wRChtrKuqhvEtq497
Xl/nI/x4H1hH
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org