Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa
File:                     3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          9R3C+NJEA+G7SX65yGxudW2u0x1MXZLymmuM6rHtruw=
Subject key identifier:   B9:45:EB:50:FA:F9:A9:D7:63:14:D8:F4:4D:62:21:11:98:DC:92:F6
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       79630639FDD0D85A2ED14078C23473DCE7A7DD0B
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:44 +0000
ROA not before:           Wed 31 Jul 2024 22:20:44 +0000
ROA not after:            Wed 30 Jul 2025 22:25:44 +0000
asID:                     28165
IP address blocks:        191.240.152.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:63:06:39:fd:d0:d8:5a:2e:d1:40:78:c2:34:73:dc:e7:a7:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:44 2024 GMT
            Not After : Jul 30 22:25:44 2025 GMT
        Subject: CN=B945EB50FAF9A9D76314D8F44D62211198DC92F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:b5:dd:97:49:8a:4f:3e:18:d3:d1:7b:1b:
                    10:fa:ae:5f:0c:c4:94:58:84:8c:27:6d:0a:31:12:
                    4a:a3:46:82:5e:e3:8d:71:46:7d:f9:b3:5f:97:a4:
                    5c:27:db:91:bb:9c:15:5e:8d:7a:10:2b:4a:46:7c:
                    0d:43:57:f4:c1:e5:64:3d:c3:2b:e0:e9:44:19:6b:
                    2a:8c:ef:a5:37:76:c9:e9:c7:f9:15:ae:3b:bb:77:
                    87:7c:40:0f:af:48:ad:e2:53:c4:5a:90:1d:bd:7f:
                    b1:c2:de:08:6b:d4:53:90:0d:b5:54:87:36:c7:98:
                    19:f1:d3:30:fc:df:a7:77:44:f9:e5:78:4c:05:5a:
                    a1:7c:12:a2:92:f8:18:62:d1:63:82:16:c2:0c:ea:
                    56:12:03:55:20:5a:15:3d:7c:61:54:97:75:7a:c4:
                    d2:da:58:87:1d:4b:6c:ad:66:46:27:a3:77:24:02:
                    2b:53:3f:f3:48:6f:6c:19:d0:88:00:19:50:bb:d7:
                    41:26:28:bc:de:07:17:70:cb:32:dc:4e:86:e5:10:
                    f9:1e:18:46:9a:51:20:ac:9f:31:9a:fd:2d:10:ee:
                    99:ae:a4:ad:15:d8:41:4d:2b:ab:70:f7:c4:1d:a3:
                    38:33:2c:8a:bf:1f:6d:1d:b7:89:38:4b:e8:45:83:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:45:EB:50:FA:F9:A9:D7:63:14:D8:F4:4D:62:21:11:98:DC:92:F6
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:a6:c7:ed:4c:9b:0c:02:54:91:f6:ad:d4:1e:89:b6:2a:
         40:c0:86:bd:6b:1d:da:0f:94:52:94:31:b2:ad:eb:df:13:9d:
         21:92:1b:1b:a5:7f:e0:7c:56:8e:58:f2:e1:28:85:d0:3a:42:
         c8:de:28:2a:3f:2f:7b:a0:8f:f0:b3:8c:d2:09:7f:ef:09:63:
         d2:5b:fd:73:02:c1:d1:08:8e:5c:03:53:35:cc:bc:92:28:34:
         64:ae:f8:5f:1c:00:4a:0f:cd:d2:69:8b:02:68:a4:7f:e7:70:
         76:50:bf:84:e6:83:84:0f:eb:a4:b9:b4:94:d7:ca:35:43:31:
         12:7b:01:d5:4f:2f:96:7c:f8:29:8c:ec:af:69:6b:d0:a5:2d:
         c8:28:fa:65:2c:10:e9:30:e1:81:c5:fe:9a:48:6e:93:31:cb:
         87:5b:27:d2:9d:24:07:c0:ce:93:7d:db:d0:4f:1f:3b:5f:28:
         b5:c4:08:33:01:c0:c3:e0:3a:7f:14:f2:89:9f:94:c4:64:99:
         9d:5c:ae:84:c7:78:4f:0e:e3:e3:01:d4:81:54:a2:60:84:74:
         a1:0d:16:0d:64:45:46:02:68:0c:ec:e2:2a:4e:cb:85:2b:5a:
         a7:9a:21:69:c0:1a:e9:3d:f6:f5:0e:64:db:95:5b:36:57:80:
         01:2d:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org