Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa
File:                     3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          qdNwQ3USh/O7edQitNf9hFxYgy+HtX7OaRhLOk+AYR8=
Subject key identifier:   12:88:56:34:70:57:8E:1C:64:8A:39:CE:88:04:1D:3F:3B:41:4A:53
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       7BAE8FF405C002772E6B208915EC857F84B008B9
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:25 +0000
ROA not before:           Wed 31 Jul 2024 22:20:25 +0000
ROA not after:            Wed 30 Jul 2025 22:25:25 +0000
asID:                     28165
IP address blocks:        191.240.144.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ae:8f:f4:05:c0:02:77:2e:6b:20:89:15:ec:85:7f:84:b0:08:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:25 2024 GMT
            Not After : Jul 30 22:25:25 2025 GMT
        Subject: CN=1288563470578E1C648A39CE88041D3F3B414A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:7e:74:ac:e4:a9:e7:0f:19:2b:80:57:06:
                    9e:a0:6a:34:a5:a2:fa:28:58:ba:3a:b0:51:c2:4e:
                    2e:d7:ef:69:f4:22:ad:f0:6c:6e:0f:4a:fb:6a:9a:
                    b5:a7:85:c9:af:d6:f8:0d:c0:62:b8:90:50:53:1a:
                    24:1a:b3:48:3a:55:05:39:78:45:8c:2b:68:e6:f4:
                    95:73:5c:e4:f6:30:69:52:be:13:f9:2c:eb:6e:e3:
                    6a:21:a4:08:44:7a:96:01:f4:60:e4:c5:56:5a:8a:
                    92:cf:1b:6a:33:46:27:bf:85:39:9c:e3:0a:7c:36:
                    07:f6:d0:b6:92:0b:ab:30:6c:37:8c:44:5d:73:45:
                    f6:2f:95:3e:6e:c3:18:f6:0d:5d:82:31:30:94:d0:
                    88:47:53:71:86:e2:bf:c6:1c:07:a1:cd:0d:66:16:
                    c6:b6:0f:e7:16:6d:04:38:4a:43:a0:86:c0:f5:61:
                    a0:a0:9f:59:04:c1:ec:71:b1:26:e2:6e:96:5b:29:
                    a4:6a:c9:e5:f1:8e:c1:b1:c9:51:41:45:15:dc:58:
                    1d:e1:72:34:e7:e5:1b:2d:5c:4f:75:ca:fd:d2:7f:
                    b8:69:82:8f:38:05:d2:39:38:72:76:1f:25:3e:14:
                    ae:e8:70:2a:27:63:69:40:cd:3a:0d:0f:80:be:57:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:88:56:34:70:57:8E:1C:64:8A:39:CE:88:04:1D:3F:3B:41:4A:53
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:03:64:3a:b5:89:13:9d:09:bd:f2:f3:86:79:6e:ab:32:03:
         d5:57:ac:81:3c:33:de:3e:46:87:5f:fd:fd:7d:5d:31:1a:04:
         c3:df:5d:00:0b:c0:1d:0c:6e:9a:0e:b6:6a:00:0c:c1:0a:29:
         13:08:21:b8:a5:fb:72:6a:a1:21:d6:fa:22:c7:b3:d0:60:c1:
         f3:b4:db:32:87:7a:b4:71:24:f0:61:de:17:be:83:b6:4a:88:
         17:fd:ee:07:ce:c1:28:38:b8:fc:43:5b:ae:28:f5:93:59:6c:
         b1:46:dc:5d:90:bd:59:cc:2e:05:e1:3e:19:98:69:2b:02:84:
         da:3f:3f:54:ef:10:01:c2:3b:c5:c7:d7:62:6f:68:fd:12:aa:
         b6:2e:9f:3a:a8:37:cc:e8:99:c9:03:c6:67:24:19:a3:6c:38:
         6b:79:0a:6c:8e:ed:fe:cb:30:e1:91:3f:0a:17:70:9b:c2:03:
         31:f4:88:31:fb:4b:99:a8:d5:78:a8:67:35:11:73:a9:ab:8d:
         63:2c:ca:59:e6:05:ca:18:7d:c4:2e:d5:a2:7c:95:0c:06:52:
         d8:13:43:65:ea:59:d9:01:22:32:54:cf:34:0e:8f:db:dd:da:
         17:3a:88:51:ec:b9:35:50:00:97:d7:2d:05:64:3f:59:99:24:
         68:99:11:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe66P9AXAAncuayCJFeyFf4SwCLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMjVaFw0yNTA3MzAyMjI1MjVaMDMxMTAvBgNV
BAMTKDEyODg1NjM0NzA1NzhFMUM2NDhBMzlDRTg4MDQxRDNGM0I0MTRBNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVH50rOSp5w8ZK4BXBp6gajSl
ovooWLo6sFHCTi7X72n0Iq3wbG4PSvtqmrWnhcmv1vgNwGK4kFBTGiQas0g6VQU5
eEWMK2jm9JVzXOT2MGlSvhP5LOtu42ohpAhEepYB9GDkxVZaipLPG2ozRie/hTmc
4wp8Ngf20LaSC6swbDeMRF1zRfYvlT5uwxj2DV2CMTCU0IhHU3GG4r/GHAehzQ1m
Fsa2D+cWbQQ4SkOghsD1YaCgn1kEwexxsSbibpZbKaRqyeXxjsGxyVFBRRXcWB3h
cjTn5RstXE91yv3Sf7hpgo84BdI5OHJ2HyU+FK7ocConY2lAzToND4C+V4IZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEohWNHBXjhxkijnOiAQdPztBSlMwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzOTMxMmUzMjM0MzAyZTMxMzQzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/8JAwDQYJKoZIhvcNAQELBQADggEBALcDZDq1
iROdCb3y84Z5bqsyA9VXrIE8M94+Rodf/f19XTEaBMPfXQALwB0MbpoOtmoADMEK
KRMIIbil+3JqoSHW+iLHs9BgwfO02zKHerRxJPBh3he+g7ZKiBf97gfOwSg4uPxD
W64o9ZNZbLFG3F2QvVnMLgXhPhmYaSsChNo/P1TvEAHCO8XH12JvaP0SqrYunzqo
N8zomckDxmckGaNsOGt5CmyO7f7LMOGRPwoXcJvCAzH0iDH7S5mo1XioZzURc6mr
jWMsylnmBcoYfcQu1aJ8lQwGUtgTQ2XqWdkBIjJUzzQOj9vd2hc6iFHsuTVQAJfX
LQVkP1mZJGiZESI=
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org