Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa (raw, json)
Hash identifier:          Fnz5c0unrkbycGXNoRNIOcRN9rnrmRNBUVxpYR6uziY=
Subject key identifier:   59:36:81:FB:9A:42:94:9F:0E:F8:F1:7B:BE:70:C2:F3:7D:8E:51:D6
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       62BAFDC3501D178DCF531CC10A0AD3BB853F1237
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:26 +0000
ROA not before:           Wed 31 Jul 2024 22:20:26 +0000
ROA not after:            Wed 30 Jul 2025 22:25:26 +0000
asID:                     28165
IP address blocks:        200.229.224.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ba:fd:c3:50:1d:17:8d:cf:53:1c:c1:0a:0a:d3:bb:85:3f:12:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:26 2024 GMT
            Not After : Jul 30 22:25:26 2025 GMT
        Subject: CN=593681FB9A42949F0EF8F17BBE70C2F37D8E51D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:bf:33:01:60:45:a2:83:34:50:13:72:0e:
                    94:75:ed:bc:26:72:34:4c:38:8a:70:ea:90:bf:f7:
                    c3:49:7e:7a:cb:2a:8d:6b:46:ee:e4:c2:e9:75:ec:
                    ce:25:a9:61:e4:a9:80:7c:9f:c4:92:bc:53:ef:6b:
                    2a:51:f3:5a:ec:fe:c8:04:b0:2e:89:a2:a3:7c:10:
                    db:65:2e:5f:e0:18:05:71:5c:6c:61:5f:96:15:37:
                    2d:fa:aa:c8:5f:cd:1d:05:80:21:03:ce:94:1f:2b:
                    af:9d:f8:b1:35:4b:ce:26:f4:7a:4d:85:f5:82:83:
                    55:e5:45:4e:d3:cb:4d:01:dc:1d:30:ad:a6:18:b2:
                    db:1f:e4:62:1d:8a:9d:55:ee:3e:0f:40:6f:d0:a2:
                    aa:b8:56:ed:94:dc:aa:dd:6e:6b:55:1a:3c:fc:a6:
                    5c:55:e5:d3:dc:d2:a0:d2:a9:03:c0:60:47:60:83:
                    84:76:1a:8b:f2:64:53:73:c2:d3:ba:39:f4:d8:dc:
                    24:a8:fb:3b:ed:d6:92:79:b2:57:9a:8a:af:66:b0:
                    89:24:f6:ae:f6:3c:2b:4e:6a:fd:4c:35:dd:97:d9:
                    93:3a:fc:c4:81:79:39:63:71:57:ff:ce:ae:8e:d3:
                    9f:e9:fd:07:d6:5e:19:82:04:43:55:d5:a5:ce:1c:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:36:81:FB:9A:42:94:9F:0E:F8:F1:7B:BE:70:C2:F3:7D:8E:51:D6
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:57:24:3b:7c:24:75:b4:bb:be:30:2d:6b:e1:97:ee:8b:ac:
         11:05:42:48:3b:1c:05:71:d8:c7:9b:58:d5:4d:75:4a:be:57:
         a8:31:a6:94:0f:ae:52:f4:40:09:5e:14:a2:02:ef:b8:7a:d0:
         7c:a1:a0:7c:a6:47:4f:dd:d4:f3:30:a0:38:9c:13:1d:02:79:
         4a:ce:25:4d:86:65:ea:51:76:44:cb:e0:78:24:ea:3d:6a:60:
         92:c6:df:04:34:fe:7e:1d:c0:8d:87:d5:24:f2:90:ca:b8:19:
         15:83:88:35:f6:0d:62:42:76:8c:e0:e2:54:87:32:29:e0:be:
         d2:d6:c7:15:72:23:82:77:da:fe:91:23:9e:2a:6d:8e:a4:75:
         ee:1f:9c:59:09:c9:c0:d0:76:17:ba:e0:9c:be:7e:9f:2f:e3:
         8b:64:d9:71:8e:8c:d8:78:f5:13:63:e8:3c:f5:3d:9b:b7:0e:
         63:a9:87:c8:20:f0:4e:07:70:c0:27:a1:23:21:18:ce:a2:65:
         41:06:5f:36:45:ed:c2:ee:c8:0e:99:59:f8:77:59:ef:79:39:
         ca:5a:03:56:90:b3:5f:9d:35:fe:b7:b1:0a:99:33:17:d5:94:
         7e:f8:25:d2:da:c7:0e:7e:2e:7d:ea:4a:16:29:8b:32:f0:ff:
         ed:97:80:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYrr9w1AdF43PUxzBCgrTu4U/EjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMjZaFw0yNTA3MzAyMjI1MjZaMDMxMTAvBgNV
BAMTKDU5MzY4MUZCOUE0Mjk0OUYwRUY4RjE3QkJFNzBDMkYzN0Q4RTUxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNL8zAWBFooM0UBNyDpR17bwm
cjRMOIpw6pC/98NJfnrLKo1rRu7kwul17M4lqWHkqYB8n8SSvFPvaypR81rs/sgE
sC6JoqN8ENtlLl/gGAVxXGxhX5YVNy36qshfzR0FgCEDzpQfK6+d+LE1S84m9HpN
hfWCg1XlRU7Ty00B3B0wraYYstsf5GIdip1V7j4PQG/Qoqq4Vu2U3KrdbmtVGjz8
plxV5dPc0qDSqQPAYEdgg4R2GovyZFNzwtO6OfTY3CSo+zvt1pJ5sleaiq9msIkk
9q72PCtOav1MNd2X2ZM6/MSBeTljcVf/zq6O05/p/QfWXhmCBENV1aXOHD+XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWTaB+5pClJ8O+PF7vnDC832OUdYwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATI5eAwDQYJKoZIhvcNAQELBQADggEBAClXJDt8
JHW0u74wLWvhl+6LrBEFQkg7HAVx2MebWNVNdUq+V6gxppQPrlL0QAleFKIC77h6
0HyhoHymR0/d1PMwoDicEx0CeUrOJU2GZepRdkTL4Hgk6j1qYJLG3wQ0/n4dwI2H
1STykMq4GRWDiDX2DWJCdozg4lSHMingvtLWxxVyI4J32v6RI54qbY6kde4fnFkJ
ycDQdhe64Jy+fp8v44tk2XGOjNh49RNj6Dz1PZu3DmOph8gg8E4HcMAnoSMhGM6i
ZUEGXzZF7cLuyA6ZWfh3We95OcpaA1aQs1+dNf63sQqZMxfVlH74JdLaxw5+Ln3q
ShYpizLw/+2XgGY=
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org