Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa
File:                     3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          8zTEflZoJj0LetNf2eIAoYmgNsT/T1Awq8zxzyHKsLw=
Subject key identifier:   BD:0A:3A:FD:74:54:4D:B0:C0:DC:8B:97:24:96:27:44:B2:62:37:AF
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       0CE51D385ED83215187E123BA6735AD8782CC431
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:41 +0000
ROA not before:           Wed 31 Jul 2024 22:20:41 +0000
ROA not after:            Wed 30 Jul 2025 22:25:41 +0000
asID:                     28165
IP address blocks:        200.229.232.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e5:1d:38:5e:d8:32:15:18:7e:12:3b:a6:73:5a:d8:78:2c:c4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:41 2024 GMT
            Not After : Jul 30 22:25:41 2025 GMT
        Subject: CN=BD0A3AFD74544DB0C0DC8B9724962744B26237AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:78:95:ab:f0:a3:ce:00:9c:5f:7c:16:c8:
                    51:55:b6:2b:0f:c5:ef:92:5c:5e:1c:5b:65:04:e9:
                    4a:6f:f5:91:f0:ec:35:30:81:61:b5:ca:ed:ef:3e:
                    a3:a3:f6:cf:93:7a:81:9c:25:fb:f5:10:e4:47:39:
                    2d:8b:9a:f2:bb:2e:8e:f0:75:84:e7:88:cf:16:92:
                    d8:32:85:c0:98:db:05:f5:af:1a:3a:6e:06:c5:46:
                    09:a1:69:20:3d:ae:4e:3a:34:77:e1:16:2b:2e:fb:
                    dc:b4:59:c4:a0:eb:78:29:87:5c:57:db:57:25:bd:
                    54:fc:36:b7:93:7a:ae:af:b8:dd:91:90:22:c6:c2:
                    4a:85:72:39:d0:51:67:ea:0f:a6:f6:e4:cc:5c:b8:
                    2d:87:bf:1f:47:10:7d:6d:a0:d1:bb:d7:90:46:70:
                    0a:3c:98:49:51:89:6f:52:e1:91:fa:00:5f:ad:d3:
                    2e:f8:0a:0e:8b:94:a7:d5:39:2f:3d:62:d0:47:48:
                    5d:d9:83:1a:28:c9:b2:7a:d0:c1:ed:a9:f3:14:45:
                    b7:42:6f:ad:06:f0:4c:5f:9e:1c:24:41:7a:61:df:
                    ac:a3:7d:fd:d7:e0:6f:c2:c6:ec:79:25:34:e5:4a:
                    65:b2:ec:8d:a5:72:3c:b1:fb:67:1a:a7:51:1e:e4:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0A:3A:FD:74:54:4D:B0:C0:DC:8B:97:24:96:27:44:B2:62:37:AF
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:82:33:e9:b9:d9:90:cd:fe:3c:42:f6:0f:86:7d:30:60:30:
         68:12:af:6a:e9:75:7e:e0:3d:ae:ce:a1:3b:f4:f8:66:4a:1a:
         bc:8a:d4:58:d6:38:f1:9d:69:f4:57:fb:89:33:3f:db:5e:ee:
         f9:63:87:40:ad:47:c4:b8:a3:1e:68:26:f4:3d:6b:ef:20:b1:
         c8:4f:b6:ff:f3:f2:60:1c:9c:2e:06:dc:73:9e:29:ae:6c:21:
         9b:f2:0e:a2:4a:c4:27:ad:b4:4d:51:8e:31:8e:04:0e:f6:f5:
         28:71:ea:80:d3:51:be:e3:04:33:30:fd:ca:ed:a1:5c:f3:e8:
         f0:a3:7f:ac:a9:eb:d6:8e:d1:7f:74:f0:13:38:88:ce:57:24:
         03:5e:40:e7:ab:2a:b0:df:0f:12:aa:9e:1b:0b:39:41:19:92:
         26:92:74:d2:81:e1:1f:5b:59:40:9c:b9:bc:83:b0:0c:da:89:
         8e:cf:c0:e5:09:4c:87:a9:7f:4a:00:71:c6:81:7a:65:3d:be:
         5c:7a:24:68:2b:54:66:93:7b:b8:03:63:ee:38:ce:bf:4d:a2:
         f5:b7:cc:7a:10:f9:7d:4d:03:5d:c5:31:dd:24:92:a5:64:14:
         9c:3f:2b:1e:7f:a2:41:70:dc:3f:54:50:d5:1f:ee:c5:f9:08:
         ec:b3:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org