Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa
File:                     3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          R0CDOEp49gH3AHSWLoeC4hOoJomz6cOOb/7b33Gwb5U=
Subject key identifier:   97:3E:79:4E:94:D4:98:90:18:70:31:AC:EC:FC:DA:B4:57:41:AD:1B
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       6E5DD7001312D4ABABC93D4CC9F448B76A0EC3BC
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:24 +0000
ROA not before:           Wed 31 Jul 2024 22:20:24 +0000
ROA not after:            Wed 30 Jul 2025 22:25:24 +0000
asID:                     28165
IP address blocks:        191.240.144.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5d:d7:00:13:12:d4:ab:ab:c9:3d:4c:c9:f4:48:b7:6a:0e:c3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:24 2024 GMT
            Not After : Jul 30 22:25:24 2025 GMT
        Subject: CN=973E794E94D49890187031ACECFCDAB45741AD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:df:3d:e9:c1:e2:24:11:a8:4e:13:59:89:
                    43:dc:6e:d2:0e:fd:b1:00:91:58:8e:58:f5:23:4a:
                    61:d3:87:a0:70:8b:7a:23:6e:44:4f:fb:21:51:7e:
                    dc:57:9e:0d:87:c7:14:9c:4e:36:70:88:3e:f5:28:
                    6a:4c:52:b3:8b:4e:9e:31:5f:99:4d:65:db:d3:d8:
                    4a:0e:78:fb:f4:65:48:8f:15:da:b9:11:77:11:96:
                    91:01:54:96:92:05:c1:09:56:d2:61:ca:9a:f3:44:
                    83:fa:19:9e:f7:d4:4d:b9:db:d5:bc:cc:55:f2:30:
                    b7:db:fd:86:cd:c0:6d:75:da:48:74:8b:a3:bc:4f:
                    15:1f:8e:a8:5a:ef:f7:5a:7b:68:73:91:94:51:54:
                    6c:02:96:c0:30:7e:e5:98:6c:10:35:bd:00:61:26:
                    72:20:6e:84:72:db:ed:c9:75:17:74:99:fe:91:e3:
                    88:8f:59:54:d8:95:73:a9:32:b1:08:5f:66:d0:ff:
                    dc:22:2b:46:fa:4b:60:8c:5a:2d:a2:ff:55:fa:40:
                    f6:0c:7b:13:62:12:96:c2:b9:bf:20:0f:d5:24:15:
                    ae:89:0c:05:ad:77:4c:29:25:60:6c:20:a4:65:60:
                    5c:40:54:0f:f5:6a:4c:be:d1:90:13:b5:c3:85:27:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:79:4E:94:D4:98:90:18:70:31:AC:EC:FC:DA:B4:57:41:AD:1B
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:08:66:b0:c6:1f:51:ea:f3:31:7a:b8:95:a2:55:89:9a:0d:
         18:29:35:c9:98:c0:de:fc:cd:61:38:ba:4f:48:62:6c:1c:fc:
         35:8e:30:1e:ab:d2:66:27:1c:e3:35:97:0b:2c:4a:6e:45:55:
         f1:5a:8d:b5:4f:5c:ce:b5:82:4c:d8:d7:ea:97:ae:8f:91:d2:
         22:33:64:e8:e4:1d:36:82:ee:11:59:75:03:29:3e:c8:ba:74:
         24:02:01:87:d9:41:c4:7d:42:92:25:ae:be:65:6c:ea:5f:1f:
         d0:08:0e:c8:7d:29:c7:e1:cd:6f:80:b9:31:a4:fe:d6:b6:14:
         9b:aa:26:f2:4b:30:9a:a3:df:74:6a:90:a6:47:5e:35:6e:29:
         74:43:f8:d8:8f:d7:66:ba:bf:44:62:f2:7b:88:6d:19:59:bc:
         0a:d5:e7:9f:40:5d:29:e3:bc:b0:c6:e0:aa:12:45:53:2d:4d:
         c4:b3:9e:45:9d:51:19:ab:f7:9f:97:9d:80:31:65:ba:3f:0b:
         02:5d:87:fe:ce:39:1d:46:bf:b7:f8:e9:ca:d2:0b:15:8b:5d:
         2e:90:cf:d8:c2:28:5a:92:10:c5:61:73:de:a3:e7:97:9f:15:
         6c:aa:aa:23:1a:f2:37:ed:42:2a:66:65:28:b3:6f:3b:07:8c:
         67:65:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org