Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          U/KlrmEVnHZu3QXv62CV1gmd4m669FIhvvLZdCjKXo4=
Subject key identifier:   C2:FF:54:A9:ED:C3:CC:8C:9A:28:CC:DA:C5:47:61:43:A9:88:28:4F
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       61A173548450D5A8128F6B4B612B8D7ECDC39D08
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:34 +0000
ROA not before:           Wed 31 Jul 2024 22:20:34 +0000
ROA not after:            Wed 30 Jul 2025 22:25:34 +0000
asID:                     28165
IP address blocks:        200.229.224.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a1:73:54:84:50:d5:a8:12:8f:6b:4b:61:2b:8d:7e:cd:c3:9d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:34 2024 GMT
            Not After : Jul 30 22:25:34 2025 GMT
        Subject: CN=C2FF54A9EDC3CC8C9A28CCDAC5476143A988284F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:7e:25:de:4a:42:c6:25:a3:96:7a:3d:94:
                    10:11:56:7a:48:c8:91:44:6f:e7:43:79:cc:0d:c3:
                    23:26:30:b1:b8:33:1f:5c:e0:f7:89:14:34:07:14:
                    03:c5:ab:55:8f:ad:72:03:bf:e1:76:4f:bf:20:79:
                    69:87:85:9a:d4:0c:2d:4c:a9:5f:f7:ee:63:a2:b4:
                    f1:fb:20:4b:1e:1c:68:64:7f:d4:9e:63:de:35:2d:
                    12:bf:4c:e7:78:6b:93:9c:77:e1:85:e4:e2:f4:b1:
                    df:6f:28:a0:de:cd:5b:ae:3c:55:59:a3:68:14:09:
                    64:31:4a:f4:d4:a4:7b:fb:99:c9:89:25:10:2f:5a:
                    37:c9:98:28:97:17:80:54:e0:60:08:1d:8d:5e:b7:
                    3c:a1:4c:e7:66:e9:26:22:82:b1:b1:2e:a9:b5:3e:
                    ed:66:5a:2d:50:69:7e:c3:e3:19:01:b0:f4:e3:99:
                    92:11:a0:98:ac:68:09:84:d2:af:5d:44:d4:66:3d:
                    c7:b7:61:11:d9:34:7a:2e:4c:bc:b7:1a:56:2a:83:
                    f5:8d:dd:eb:46:2f:ee:aa:f8:f4:68:4b:cb:6b:b6:
                    a0:d3:b2:a3:9a:01:92:af:25:bb:d6:cf:76:54:65:
                    03:df:8b:6a:93:a1:a4:a4:83:f3:22:64:26:50:3d:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FF:54:A9:ED:C3:CC:8C:9A:28:CC:DA:C5:47:61:43:A9:88:28:4F
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:3e:40:72:3c:34:2f:cc:4c:9c:85:89:e7:3d:f1:51:be:7e:
         e2:c1:c1:f8:cd:da:71:b6:cd:99:dd:47:31:9a:5f:3d:b5:5a:
         88:dd:91:52:bd:40:4c:92:a4:2e:63:67:0e:72:08:2a:44:d9:
         4a:7b:51:43:eb:4d:56:ae:1e:8a:fa:8d:b3:8f:f8:40:4a:a1:
         09:e4:38:bc:b0:f4:e2:82:b0:b5:c9:8b:d7:1c:9f:9a:8f:58:
         d1:d8:5a:31:5d:2a:8f:53:4d:96:26:fb:de:18:78:f5:8c:b7:
         45:b1:9f:bf:9d:fa:a7:ea:f7:8e:97:91:0d:27:85:48:2c:4c:
         d7:87:46:2a:df:87:b0:e2:c2:c8:91:58:03:ab:48:55:2a:b4:
         2c:98:d1:39:97:ba:0e:b1:38:84:76:e9:55:0f:08:89:48:a1:
         1c:05:7a:a9:4f:4d:72:b0:01:ef:cc:0b:3d:62:5c:1b:c6:92:
         2d:10:75:74:b9:53:07:e2:ae:e9:a2:ab:32:76:a3:b3:a4:50:
         e2:41:15:e0:b7:88:62:7f:27:97:de:6d:ce:4b:c4:61:75:79:
         45:e3:92:2f:30:f2:c9:87:77:bf:13:c2:0b:4c:7a:ea:f5:0b:
         73:e3:2c:39:69:9e:c6:a6:e4:0c:0c:22:08:6f:34:e1:08:ab:
         29:41:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org