Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          NbR9+B7hNXuJknBcv440c+wg7Fc4nLO6ANbJHU9xX+c=
Subject key identifier:   D8:6A:FD:81:17:E9:F9:5F:90:4F:56:A5:EC:93:EE:62:FB:F7:B2:62
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       030E7BFD0BDF433AD2EA6223A814582A25296F87
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:27 +0000
ROA not before:           Wed 31 Jul 2024 22:20:27 +0000
ROA not after:            Wed 30 Jul 2025 22:25:27 +0000
asID:                     28165
IP address blocks:        200.229.224.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0e:7b:fd:0b:df:43:3a:d2:ea:62:23:a8:14:58:2a:25:29:6f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:27 2024 GMT
            Not After : Jul 30 22:25:27 2025 GMT
        Subject: CN=D86AFD8117E9F95F904F56A5EC93EE62FBF7B262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:00:58:8f:cb:b5:59:76:e5:21:8a:f7:c6:
                    4a:c9:05:08:35:48:17:53:6c:0c:91:75:76:3e:f3:
                    51:56:98:68:59:08:26:56:33:a7:86:6a:86:4d:a5:
                    5b:b8:28:1d:f6:9d:dc:cf:c8:2a:bf:4b:e1:9c:f3:
                    8c:a5:32:d8:b6:95:99:cd:f7:f2:07:50:f5:6b:0b:
                    01:0d:fa:1f:fe:13:82:10:f4:ff:90:4d:e7:6e:ee:
                    39:64:46:25:ad:fc:0f:54:ea:2f:b9:29:c9:77:31:
                    d8:29:d2:d4:37:7a:48:6d:fe:67:43:b3:03:4c:59:
                    31:d0:ab:e7:16:92:32:2a:9b:7b:c0:b9:69:e1:78:
                    89:8a:e9:90:5b:e1:d4:2b:f3:d8:49:78:ad:96:10:
                    e2:5b:58:89:7a:1c:57:91:e1:ed:5e:90:9d:89:a3:
                    80:bf:a9:72:a3:2b:66:00:e6:60:28:52:13:f5:5b:
                    a3:cd:72:60:b9:f2:f7:f8:6c:5b:48:2e:cb:57:76:
                    0a:47:f7:59:e7:8b:26:65:bf:34:5f:2c:20:8a:f8:
                    d6:fd:bb:8c:bc:93:ae:4a:ab:f2:d8:72:17:1c:b0:
                    98:f3:e5:92:b4:ab:30:59:12:55:62:60:b8:8b:89:
                    0f:a6:35:cc:55:a0:2c:9d:50:74:6b:67:41:11:47:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6A:FD:81:17:E9:F9:5F:90:4F:56:A5:EC:93:EE:62:FB:F7:B2:62
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:0d:95:68:6b:0d:1d:81:5a:7b:ae:58:2a:66:70:b9:6d:
         86:a3:ac:70:d7:59:ca:54:61:3f:a9:9e:7d:76:2b:1a:f0:62:
         f2:51:fd:ea:b1:c4:c7:34:3b:c3:07:4a:2a:b8:99:cd:65:c7:
         f7:36:f8:de:d9:d3:f7:35:45:2e:bf:ff:d9:77:52:2e:78:c6:
         b5:70:33:09:c2:9f:44:65:12:1a:43:46:c2:42:b5:c9:6a:55:
         e8:9c:ee:6f:42:4f:76:d9:ca:c9:d8:5a:a0:c5:6e:1d:ef:9e:
         3b:a9:96:fb:15:83:6b:9d:c1:36:6e:b6:bf:12:fc:2a:68:11:
         eb:a4:16:37:5b:58:81:f1:54:8a:b1:8c:09:dc:5d:e2:c6:86:
         b9:9f:e0:39:a0:05:03:d8:6c:62:cb:c4:a6:7d:a0:49:9e:23:
         1d:e3:15:96:76:48:9d:30:bb:de:1b:fa:47:07:68:6c:c1:bc:
         37:65:c1:d9:6e:7c:dd:ec:2c:30:5e:99:15:0e:99:8a:d5:d0:
         ca:e0:58:cd:db:fd:97:82:30:83:ac:15:b9:81:65:fb:16:7b:
         9a:12:72:aa:23:6d:6d:09:c5:f5:6a:4a:48:19:55:09:5b:3c:
         01:3a:e3:d4:21:91:41:12:f7:4d:a8:8f:91:2f:f9:72:31:45:
         40:c0:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org