Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          3sFVoNxrVNd8uYWv9LaI10bhlXMo7HXZ0MPCcKdPXfg=
Subject key identifier:   78:25:57:A6:73:80:3F:3D:BC:03:41:63:E1:2A:B2:A6:60:FB:A3:BF
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       7E282768E4C893EFCCA60048AA8CD3C92A356EF4
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:45 +0000
ROA not before:           Wed 31 Jul 2024 22:20:45 +0000
ROA not after:            Wed 30 Jul 2025 22:25:45 +0000
asID:                     28165
IP address blocks:        187.62.223.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:28:27:68:e4:c8:93:ef:cc:a6:00:48:aa:8c:d3:c9:2a:35:6e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:45 2024 GMT
            Not After : Jul 30 22:25:45 2025 GMT
        Subject: CN=782557A673803F3DBC034163E12AB2A660FBA3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:03:ba:b9:8e:78:00:88:df:98:97:e4:73:
                    31:13:c7:e8:af:1d:f6:7f:2f:36:2d:ae:d8:27:1a:
                    fc:5a:e1:d5:75:28:f7:36:78:df:ef:21:60:44:0b:
                    e9:51:ee:0f:38:85:e2:7a:e3:84:54:fb:0b:85:cd:
                    f3:0b:72:5a:10:7c:8b:dd:ec:0a:1f:7a:c1:d2:dd:
                    8e:0f:a4:aa:31:c7:87:f9:79:f1:cd:83:27:35:75:
                    36:78:bb:f5:cf:8f:39:82:28:0b:1c:ed:2e:fa:90:
                    fc:7d:5a:b7:b0:5f:78:8d:ae:29:0d:92:2c:84:f0:
                    3a:31:85:2c:32:8f:ba:ea:67:89:d0:4c:00:d0:cc:
                    76:a3:83:c2:74:51:7d:33:0e:05:c8:60:39:d5:cf:
                    c2:eb:2f:17:e5:96:40:92:a5:f6:58:16:97:82:44:
                    d0:35:6b:8b:bf:93:10:90:57:bc:db:f0:40:2a:19:
                    da:85:3c:8b:24:80:fa:87:3f:5e:05:3e:32:b5:4f:
                    23:c4:74:34:2b:e6:08:ea:01:61:6a:6c:81:bd:72:
                    16:cb:d6:89:54:56:ae:8a:58:b7:33:5e:85:e1:6b:
                    4f:70:62:ec:0b:7b:89:1a:75:9c:16:97:4c:10:44:
                    85:af:2c:c6:23:db:2f:d7:1c:c8:11:ce:3b:8d:85:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:57:A6:73:80:3F:3D:BC:03:41:63:E1:2A:B2:A6:60:FB:A3:BF
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:20:aa:59:1b:5d:8f:80:86:7a:67:07:51:96:29:38:d1:0c:
         fe:94:11:a0:09:b5:d4:a6:d1:6e:02:2d:a7:84:1f:17:55:60:
         9d:8b:a1:c8:30:e0:57:4d:10:3d:52:a8:ff:36:95:72:0c:32:
         73:b5:e6:93:62:0f:b4:1c:c4:e3:dc:b3:4f:0d:97:0e:4d:a7:
         69:1e:29:23:02:c3:f5:0d:28:dc:d4:d2:e8:4f:79:b1:9c:64:
         f6:9a:98:fb:fd:85:3e:78:89:9d:5f:62:06:af:cc:2a:df:19:
         ba:f2:e2:39:56:b3:fb:db:f1:e8:28:55:7b:91:05:12:b3:1a:
         cb:58:a8:4d:25:ce:1f:56:90:16:1b:c5:d8:6b:73:f5:bf:ca:
         34:dc:46:0f:63:70:e5:12:54:c4:5c:c0:8b:05:ea:e8:5e:b7:
         c6:07:80:b0:cd:51:3f:a3:f3:f2:e6:2c:5e:5e:ec:ac:40:27:
         dc:92:9d:7c:63:3e:b7:aa:8b:64:94:05:97:06:cc:ae:61:19:
         14:c5:a5:74:57:10:ce:f4:b4:75:69:ab:05:af:d3:3e:1a:37:
         4b:55:65:32:86:79:a3:34:8d:9b:c6:b6:ec:7c:94:d2:6a:0b:
         1b:94:53:ff:5f:af:a7:98:2b:15:5a:22:73:63:6c:ec:44:bf:
         a9:57:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org