Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
File:                     3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          dNBL0h9GenuVNLeDC8bIjpqUnpfgenXOb7sg5dt/EUk=
Subject key identifier:   96:B4:E1:4B:BA:FC:14:64:F2:D7:87:A4:A6:5B:C4:EF:FF:59:C8:13
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       5CA7D1DFD8773CBC256A9C52B5EEAD0E2C76FEE5
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:35 +0000
ROA not before:           Wed 31 Jul 2024 22:20:35 +0000
ROA not after:            Wed 30 Jul 2025 22:25:35 +0000
asID:                     28165
IP address blocks:        200.229.228.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a7:d1:df:d8:77:3c:bc:25:6a:9c:52:b5:ee:ad:0e:2c:76:fe:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:35 2024 GMT
            Not After : Jul 30 22:25:35 2025 GMT
        Subject: CN=96B4E14BBAFC1464F2D787A4A65BC4EFFF59C813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:58:f6:20:85:84:9e:83:87:6c:58:29:2d:
                    ad:b0:5f:9b:7d:ae:65:a1:de:31:93:b5:87:41:1e:
                    8a:de:a2:89:d8:1c:5c:35:bc:dd:9c:18:8b:ab:76:
                    a6:09:a9:c0:e2:e0:24:dc:73:c8:49:7b:54:0a:b1:
                    c4:49:cc:63:05:22:da:45:8e:8e:58:25:5e:bd:4c:
                    71:40:3a:b4:fd:3f:24:c3:3a:71:68:2a:35:79:f3:
                    ba:09:fe:b8:52:69:0e:42:c6:17:ce:ca:48:2f:d0:
                    db:41:77:46:c2:c3:81:fa:98:ff:45:c5:02:60:a1:
                    ff:4f:48:36:c5:40:e0:87:51:fe:6c:c7:d8:03:e9:
                    e3:b1:3d:c9:48:bd:23:ff:70:b2:71:ea:73:ed:79:
                    6d:5d:36:4d:d3:9b:da:11:ea:20:14:04:f5:f9:f9:
                    90:5f:2e:31:b4:05:87:c7:e9:6e:7d:c8:50:8e:82:
                    bb:b7:33:c7:84:c9:4d:ea:b4:b9:d5:a5:f3:4b:24:
                    46:b6:47:8c:50:e8:b6:6b:40:c4:97:22:d1:a5:84:
                    45:a6:1a:50:06:be:62:9f:e6:82:f2:8a:8d:6d:b1:
                    71:3c:6e:ac:76:c8:83:f8:04:e6:81:5c:e9:31:ae:
                    b0:c9:56:dc:d1:70:12:9e:e6:c7:e6:9c:72:b3:59:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B4:E1:4B:BA:FC:14:64:F2:D7:87:A4:A6:5B:C4:EF:FF:59:C8:13
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:dd:e3:fd:ba:c0:92:f7:67:46:6d:db:a3:46:ca:28:ca:
         ab:b2:f5:93:2c:19:71:4c:2b:1c:ee:3e:e8:8c:54:0f:65:1d:
         1d:b0:d4:d1:f8:66:91:d3:bd:88:b0:fb:77:b1:2d:84:72:25:
         73:1c:a1:8f:3a:8f:88:a8:2b:ec:86:68:5a:1b:70:40:3a:35:
         19:59:03:84:e2:dd:4c:84:95:43:88:3a:ea:34:26:48:94:e6:
         8e:58:ac:32:36:c7:98:e9:5d:76:66:3e:39:d1:8f:b5:2e:a2:
         d7:d2:50:97:f9:aa:53:83:49:d7:50:1d:77:0e:fb:95:6d:c2:
         55:31:72:30:5c:94:e3:bf:5e:26:e4:9f:d2:a3:08:47:84:3c:
         f9:9b:6c:e0:a6:e9:a0:77:4c:02:7f:cd:dd:5d:1b:01:cf:0e:
         76:89:83:44:45:4b:b1:fa:c7:ae:dd:1c:be:f5:bc:0a:b8:53:
         ab:4d:4c:44:49:49:1a:d9:1a:f8:62:76:15:27:31:99:35:fa:
         fc:ed:1c:17:3d:2e:1c:38:e3:d8:ea:fb:a0:96:10:a6:5a:84:
         96:9b:e5:27:04:6e:21:69:04:5d:35:14:c8:32:cd:6d:31:9f:
         5c:42:03:dc:a2:66:9f:a1:b9:51:c3:1e:b4:ba:20:a3:91:5e:
         aa:69:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org