Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa
File:                     3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          D61DEDQa2y/Dhq4qASnT26lqi6XPZLDflULEPHjGAeY=
Subject key identifier:   78:AF:6C:8D:07:F2:47:5D:02:27:0E:5C:5A:DE:DA:C6:40:82:CF:9B
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       7A03BD2D4AF57AA686C1BDEDDDA3F910D29F54FC
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:37 +0000
ROA not before:           Wed 31 Jul 2024 22:20:37 +0000
ROA not after:            Wed 30 Jul 2025 22:25:37 +0000
asID:                     28165
IP address blocks:        191.240.158.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:03:bd:2d:4a:f5:7a:a6:86:c1:bd:ed:dd:a3:f9:10:d2:9f:54:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:37 2024 GMT
            Not After : Jul 30 22:25:37 2025 GMT
        Subject: CN=78AF6C8D07F2475D02270E5C5ADEDAC64082CF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:23:55:62:3e:f7:8f:ff:9b:37:a9:79:4a:d5:
                    b9:1a:08:54:03:a1:b3:18:bc:3c:f8:64:76:bd:ec:
                    b0:90:54:8c:02:65:2f:0f:d9:a6:ae:91:b7:ad:28:
                    c5:42:e3:2b:dc:99:c3:65:ee:51:98:d7:7e:d3:f3:
                    ee:ad:3e:c4:42:75:45:3e:2f:e0:ba:4b:62:c9:00:
                    d9:eb:1e:c8:f7:ad:8f:e5:d7:89:52:bb:48:31:67:
                    37:67:b4:63:77:50:17:7d:4f:e1:49:17:d7:8f:cf:
                    7c:85:6a:e1:f2:b6:b8:87:df:4e:68:00:20:84:e5:
                    f5:4c:0c:1e:21:ad:91:3b:9c:9d:0f:4e:11:71:f6:
                    28:a7:97:52:f9:c6:6a:c4:61:31:7e:b9:30:d9:ce:
                    d8:e3:e6:6d:8a:a3:95:3d:c0:e6:c1:7d:61:8a:26:
                    7c:a5:93:f3:60:42:ea:70:86:c1:80:0e:55:0d:1e:
                    0e:f3:d8:97:1e:63:1c:bf:d8:31:5d:85:c8:11:07:
                    21:0f:5a:19:9e:08:68:76:e6:36:df:26:d2:6b:bf:
                    e4:b8:ed:e0:0a:ab:06:23:6f:a5:7a:4a:ea:39:39:
                    f4:6c:8b:73:8f:cd:b0:40:98:33:16:98:e2:19:04:
                    f4:6e:13:a9:9b:95:23:19:db:28:47:2f:5e:a9:bc:
                    2b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AF:6C:8D:07:F2:47:5D:02:27:0E:5C:5A:DE:DA:C6:40:82:CF:9B
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:1f:78:8b:c2:0c:37:20:fd:ca:a6:3b:1f:b7:93:fe:33:8c:
         76:4b:c6:d1:51:43:10:f1:02:bf:cf:5d:6e:3b:72:3b:ff:fa:
         ab:1c:10:56:4c:e7:63:ee:4a:5d:3f:2b:08:46:a3:72:ac:5e:
         69:75:5e:88:9d:c4:1e:85:43:aa:42:40:40:7d:d8:52:00:a7:
         57:2a:7a:40:0a:70:d3:a3:94:1f:33:d1:61:9e:48:da:9c:e9:
         ae:0e:0f:d6:4e:ad:72:a5:bc:52:0e:ae:05:b7:1e:f4:8c:70:
         4b:05:86:98:34:e9:7b:13:49:99:f0:b9:d5:3e:cf:5c:ef:7e:
         cf:47:a6:b3:48:13:10:2d:d9:d0:5e:15:52:cd:31:ca:c0:7d:
         d6:db:46:cd:88:9a:4f:27:8d:f1:75:25:ab:7a:c3:bf:ae:f1:
         35:f3:b2:ca:8b:90:c2:36:f3:f2:1b:0c:28:ed:e3:6b:d6:7c:
         aa:5c:b8:45:96:27:6d:96:d0:9b:f7:67:04:97:34:5e:d9:13:
         52:64:47:07:fa:5c:3c:75:a1:8c:cb:5f:4d:3e:40:39:7d:03:
         ed:2c:bf:4d:57:03:df:89:0c:d4:cb:01:72:63:ab:a5:4a:a8:
         ec:3e:17:71:e7:a7:0e:86:0a:c5:f6:f5:27:49:e4:d7:91:c7:
         3d:51:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org