Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          BTcRqftsD63OR1rQnSOPkTZEe2UjXzr8EFyE5dFMY9s=
Subject key identifier:   54:1E:AB:A9:62:7B:11:A7:C4:82:7D:11:D0:A0:E2:7E:A1:1E:77:FD
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       5337DD1B8DB819446D7D49E8A3383C0CB5CB1481
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:39 +0000
ROA not before:           Wed 31 Jul 2024 22:20:39 +0000
ROA not after:            Wed 30 Jul 2025 22:25:39 +0000
asID:                     28165
IP address blocks:        191.240.145.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:37:dd:1b:8d:b8:19:44:6d:7d:49:e8:a3:38:3c:0c:b5:cb:14:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:39 2024 GMT
            Not After : Jul 30 22:25:39 2025 GMT
        Subject: CN=541EABA9627B11A7C4827D11D0A0E27EA11E77FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:56:a1:3b:04:46:da:a2:b5:ea:7a:48:1f:
                    c9:08:53:0e:5a:6e:5c:bd:e5:04:53:dd:91:9b:71:
                    12:c6:e8:30:00:86:ab:40:d6:34:b3:b4:11:4b:d8:
                    9c:c3:a2:a2:a5:04:5f:b1:ad:97:b5:5c:ef:c8:eb:
                    6f:ff:8a:68:c1:db:f5:4b:b8:6d:a2:e0:ab:97:cb:
                    3f:a9:93:6e:41:d7:0d:79:56:92:f1:04:ba:a9:ae:
                    53:80:62:da:53:ca:57:e2:df:d7:73:d3:48:83:72:
                    9d:a3:1c:90:f2:49:98:31:ab:85:9a:ac:e6:85:ec:
                    dd:4f:c6:b7:a2:ef:09:91:8f:af:cf:97:40:2a:70:
                    0a:16:11:3e:47:4a:ea:56:86:3d:03:62:9e:aa:5e:
                    3c:30:c5:cb:13:7a:0b:d8:16:c0:bf:84:ae:d1:77:
                    30:90:4e:71:ca:ea:4c:c7:80:07:6f:0c:88:5f:04:
                    4e:8f:43:9a:a4:bb:28:2f:54:51:fa:c3:be:59:e6:
                    7e:bb:ef:2d:9a:c6:95:c1:d2:ab:d7:c6:48:44:c4:
                    47:49:e7:c8:df:98:e9:fb:0e:bc:69:4b:7a:93:b2:
                    24:36:02:f6:7c:5a:9a:71:af:f9:e8:b1:96:b5:07:
                    53:64:d9:28:27:5e:e8:78:a7:49:6a:c8:ea:3d:16:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1E:AB:A9:62:7B:11:A7:C4:82:7D:11:D0:A0:E2:7E:A1:1E:77:FD
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:23:6f:da:92:4b:3d:98:a1:8d:50:61:94:99:80:8e:4c:ed:
         a4:59:0e:11:eb:1b:0b:07:30:aa:d0:49:ff:e6:f6:61:4a:d0:
         4d:26:11:04:16:a1:dd:07:37:a7:c2:1b:bc:2f:9d:36:d3:b7:
         ac:42:f8:c5:fc:67:98:27:71:42:8c:38:92:86:b2:67:3b:cf:
         30:cc:8c:ea:96:20:d9:80:de:de:59:bf:06:70:6c:78:30:62:
         c5:ce:16:ca:1d:87:f6:9b:17:d7:8b:ae:85:4f:8a:0e:22:b3:
         78:8c:86:5c:4b:57:5c:07:46:7b:87:d0:ed:1d:cb:95:93:4c:
         17:e6:a4:61:39:89:80:82:d8:bc:29:ee:91:e9:84:ff:c8:31:
         ef:be:04:a7:42:2f:4c:93:ab:3b:2d:06:b9:61:af:e8:c4:d2:
         1f:4b:3e:ae:eb:cd:70:57:58:34:17:9f:97:c5:fb:79:f0:3c:
         a0:41:ae:75:9a:6a:ca:46:b3:dc:09:33:a6:17:27:00:74:44:
         13:4f:c4:49:ab:7e:4e:50:d5:cc:33:1c:2d:e7:5e:05:e6:56:
         64:12:a4:9c:00:fd:45:01:ea:89:c6:d2:c4:32:32:65:f0:5f:
         56:54:06:24:49:96:c0:55:b1:82:f0:aa:3e:33:f6:a0:21:03:
         19:5f:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org