Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
File:                     3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          7zm96MbvPTh16QHyz7PkMZf34WUYTsE0+Sh3XRWP+Og=
Subject key identifier:   C7:92:46:ED:F4:0A:70:74:B1:77:E3:3B:D5:6E:67:6B:05:E0:7D:B4
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       107B281F7D900193C94E0B211B5A599E0F615C29
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:17 +0000
ROA not before:           Wed 31 Jul 2024 22:20:17 +0000
ROA not after:            Wed 30 Jul 2025 22:25:17 +0000
asID:                     28165
IP address blocks:        191.240.156.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7b:28:1f:7d:90:01:93:c9:4e:0b:21:1b:5a:59:9e:0f:61:5c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:17 2024 GMT
            Not After : Jul 30 22:25:17 2025 GMT
        Subject: CN=C79246EDF40A7074B177E33BD56E676B05E07DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:76:57:42:6f:40:17:38:b7:70:87:f6:41:
                    56:36:a2:45:29:2c:31:c2:b7:43:79:df:53:96:f9:
                    1e:de:25:c4:ea:09:dd:dd:3e:7b:e0:be:aa:07:91:
                    23:fc:83:59:38:34:f4:de:f7:3e:90:fa:02:dd:67:
                    d4:23:f3:4a:92:d5:d8:da:c4:47:6e:98:be:38:70:
                    df:e6:5b:48:47:18:12:3e:b6:4d:46:f0:85:07:7c:
                    bb:44:70:a2:78:4d:83:e4:64:d0:03:7a:ab:9f:5e:
                    a3:93:bb:12:a1:1d:d7:36:8e:18:40:2f:08:48:da:
                    d4:c6:d7:d9:90:8a:73:10:63:b3:78:c6:75:9c:f3:
                    da:15:d4:3c:6b:04:54:c7:dc:8f:8f:6a:2d:38:88:
                    33:4f:1b:3e:42:c5:4f:3c:61:9e:1c:d0:d3:91:c2:
                    fe:df:a5:d4:2f:b4:46:c2:a7:1c:2a:86:e5:a3:fb:
                    2c:37:c6:c4:be:e6:10:cc:6f:bf:f2:a4:1c:92:9d:
                    db:af:eb:d3:5e:e3:05:09:62:37:f0:87:69:2d:0f:
                    fc:a0:0c:14:75:4a:c4:ef:c7:1d:a9:c4:76:54:87:
                    ac:d5:a8:dc:ad:0e:07:8a:55:4b:33:65:96:f1:9f:
                    57:ed:28:e2:bb:a2:ce:26:5b:ba:f5:68:70:e2:88:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:92:46:ED:F4:0A:70:74:B1:77:E3:3B:D5:6E:67:6B:05:E0:7D:B4
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:2a:9f:5e:bd:5a:48:44:a9:0e:01:85:42:1c:84:f1:dd:
         38:b0:9f:8d:8f:09:1a:18:be:d2:f3:00:ed:7a:67:56:77:9c:
         06:23:4b:08:20:0d:f4:af:2e:3b:fc:df:c9:8a:ef:3c:19:ba:
         2a:5d:71:19:f5:6a:8d:e1:6c:cb:42:c4:9f:b7:b5:d2:69:10:
         48:3a:63:24:6a:ff:d4:be:9b:a9:5d:8f:a9:96:61:06:b9:e4:
         5a:07:6d:ba:f5:b2:09:59:5e:37:c9:38:9e:83:7b:78:b9:e1:
         5e:c2:11:b8:96:45:8b:11:4e:93:c9:09:df:76:02:af:a2:50:
         a2:93:eb:e6:5e:8f:21:25:16:82:88:9a:a3:ab:3e:99:74:a2:
         71:d5:07:c2:f5:62:b5:24:65:c3:5a:93:7b:89:91:dd:6a:5d:
         0e:c2:b5:62:20:bb:1a:93:c5:14:13:a3:d2:6d:93:5f:0e:4d:
         b5:cd:22:d1:02:a5:11:ca:6c:ea:fd:57:2f:c2:3c:0b:45:3f:
         e7:ab:22:93:bc:2d:95:6a:91:1e:bf:cb:35:f9:51:0a:83:32:
         00:a3:5f:c7:e3:3e:c4:9e:16:66:32:86:44:06:25:0b:34:31:
         1a:4c:2d:f4:90:1b:c4:07:23:7b:fe:d6:e1:b5:d5:5f:fd:d9:
         20:08:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org