Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          zeWvUMYRF3ZBftezFMlDpV3LVZyWhWhs76ZdB1yRNF0=
Subject key identifier:   CD:33:CC:27:46:0F:D5:BE:CF:6D:41:60:EF:A3:F0:0E:7F:74:E1:F6
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       41823D28BB338D1B14E7150AF856EACBF0FD7444
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Fri 19 Jul 2024 14:05:26 +0000
ROA not before:           Fri 19 Jul 2024 14:00:26 +0000
ROA not after:            Fri 18 Jul 2025 14:05:26 +0000
asID:                     61776
IP address blocks:        2804:192c:2000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:82:3d:28:bb:33:8d:1b:14:e7:15:0a:f8:56:ea:cb:f0:fd:74:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Jul 19 14:00:26 2024 GMT
            Not After : Jul 18 14:05:26 2025 GMT
        Subject: CN=CD33CC27460FD5BECF6D4160EFA3F00E7F74E1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:ba:13:50:f2:51:df:fb:7f:25:1c:0a:d6:
                    ae:24:4a:66:d1:28:99:60:f1:be:fa:66:11:0b:eb:
                    9c:76:60:32:17:11:6e:77:34:01:10:9f:86:cc:fb:
                    ed:79:a8:b3:03:00:e8:80:39:c4:de:03:6b:d1:2e:
                    64:c6:11:03:5f:15:4e:5a:c9:28:9b:51:4c:46:fd:
                    7a:35:58:79:86:73:01:25:d5:ab:55:9f:4f:46:8b:
                    73:22:b3:31:c4:da:0c:2f:04:d7:b1:44:2f:65:9d:
                    0e:cd:32:e0:df:c5:f7:72:59:a8:59:0f:3f:01:d4:
                    3e:73:4e:c8:cf:8c:3a:9c:b2:ff:4a:c9:33:19:59:
                    2f:8d:ce:a0:f1:c1:19:8e:5e:a6:3b:f9:e7:55:bb:
                    e2:69:c5:24:18:c0:75:a7:65:eb:25:00:71:cf:fc:
                    d5:6e:28:b2:d3:c1:98:a6:60:d0:66:bf:a4:47:bb:
                    55:7e:8e:18:53:c9:13:e4:21:a6:62:94:bd:06:bd:
                    73:a3:5c:e1:95:00:67:6c:30:2d:24:a9:24:5c:e4:
                    88:cf:73:6b:0f:4c:bc:90:0a:db:16:34:60:16:ab:
                    69:77:03:6a:32:5c:66:af:af:31:41:25:93:4e:d9:
                    f9:40:dd:a6:dc:c4:19:73:0d:38:7e:ef:e8:b4:95:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:33:CC:27:46:0F:D5:BE:CF:6D:41:60:EF:A3:F0:0E:7F:74:E1:F6
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:c3:20:fc:63:58:58:14:3e:28:1a:fa:0f:b7:8e:a5:24:
         73:23:b3:f9:c8:5a:6a:4c:4f:08:35:12:ad:5c:ab:12:c5:41:
         12:16:f4:63:49:f7:58:11:78:1b:89:61:62:4b:b9:aa:8a:36:
         50:1f:97:30:0e:03:45:27:ab:0c:11:3a:97:ee:b2:4a:1b:61:
         25:19:f7:80:2b:32:f7:e9:ce:f5:87:db:46:4c:27:0c:2e:3c:
         44:9a:26:8a:35:af:f7:bf:4d:07:3e:0c:cd:4a:02:f1:3a:87:
         86:a0:02:e6:2b:75:fd:8c:8a:2c:7c:e4:e1:fe:39:e0:9b:d9:
         21:3e:87:04:b6:ca:7c:8f:b6:61:00:73:d2:16:be:26:46:b2:
         2a:9a:61:86:91:1d:e2:e4:0b:57:56:a4:5e:cb:02:b6:16:12:
         4b:45:f2:1b:bc:e7:c6:20:e0:08:73:ab:45:91:62:ad:4d:95:
         d7:4d:46:09:01:af:6d:37:2c:2e:78:6f:30:1e:16:df:f3:8e:
         a2:1d:69:94:58:6e:9f:9b:2b:3b:92:23:fe:41:84:99:ab:ce:
         0d:3a:1d:7c:aa:5f:8a:c5:ca:f8:b0:4d:4b:42:f3:2e:fb:d6:
         04:80:0c:81:f8:03:e2:d7:d0:9f:cb:9a:e5:32:e9:01:07:2f:
         b3:2d:f8:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQYI9KLszjRsU5xUK+Fbqy/D9dEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDQjVCOTUwMUU4MzVBQkUzMzQ1MjE0OUYxNzc1NEE1
MUNFMzZBNDAeFw0yNDA3MTkxNDAwMjZaFw0yNTA3MTgxNDA1MjZaMDMxMTAvBgNV
BAMTKENEMzNDQzI3NDYwRkQ1QkVDRjZENDE2MEVGQTNGMDBFN0Y3NEUxRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33LoTUPJR3/t/JRwK1q4kSmbR
KJlg8b76ZhEL65x2YDIXEW53NAEQn4bM++15qLMDAOiAOcTeA2vRLmTGEQNfFU5a
ySibUUxG/Xo1WHmGcwEl1atVn09Gi3MiszHE2gwvBNexRC9lnQ7NMuDfxfdyWahZ
Dz8B1D5zTsjPjDqcsv9KyTMZWS+NzqDxwRmOXqY7+edVu+JpxSQYwHWnZeslAHHP
/NVuKLLTwZimYNBmv6RHu1V+jhhTyRPkIaZilL0GvXOjXOGVAGdsMC0kqSRc5IjP
c2sPTLyQCtsWNGAWq2l3A2oyXGavrzFBJZNO2flA3abcxBlzDTh+7+i0lf2tAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzTPMJ0YP1b7PbUFg76PwDn904fYwHwYDVR0j
BBgwFoAUEMtblQHoNavjNFIUnxd1SlHONqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMS8xMENCNUI5NTAxRTgzNUFCRTMzNDUyMTQ5RjE3NzU0QTUxQ0UzNkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQ0I1Qjk1MDFFODM1QUJF
MzM0NTIxNDlGMTc3NTRBNTFDRTM2QTQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzEv
MzIzODMwMzQzYTMxMzkzMjYzM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBksIDANBgkqhkiG9w0BAQsFAAOC
AQEAmtTDIPxjWFgUPiga+g+3jqUkcyOz+chaakxPCDUSrVyrEsVBEhb0Y0n3WBF4
G4lhYku5qoo2UB+XMA4DRSerDBE6l+6yShthJRn3gCsy9+nO9YfbRkwnDC48RJom
ijWv979NBz4MzUoC8TqHhqAC5it1/YyKLHzk4f454JvZIT6HBLbKfI+2YQBz0ha+
JkayKpphhpEd4uQLV1akXssCthYSS0XyG7znxiDgCHOrRZFirU2V101GCQGvbTcs
LnhvMB4W3/OOoh1plFhun5srO5Ij/kGEmavODTodfKpfisXK+LBNS0LzLvvWBIAM
gfgD4tfQn8ua5TLpAQcvsy34Fw==
-----END CERTIFICATE-----
Generated at Sat Aug 31 17:50:30 2024 by rpki-client on console-fra.rpki-client.org