Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa
File:                     323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa (raw, json)
Hash identifier:          8cs/Llcqejn1VI8XZGmo11MrHikRLpgFUY27iwH76Rc=
Subject key identifier:   8B:E0:4A:3B:3C:AD:4D:0C:52:DC:19:FB:D9:EF:E6:17:9E:D7:47:B2
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       11BF1597A99D763600084D4B8650E8648A54FF20
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa
Signing time:             Fri 19 Jul 2024 14:05:26 +0000
ROA not before:           Fri 19 Jul 2024 14:00:26 +0000
ROA not after:            Fri 18 Jul 2025 14:05:26 +0000
asID:                     61776
IP address blocks:        2804:192c:2800::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bf:15:97:a9:9d:76:36:00:08:4d:4b:86:50:e8:64:8a:54:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Jul 19 14:00:26 2024 GMT
            Not After : Jul 18 14:05:26 2025 GMT
        Subject: CN=8BE04A3B3CAD4D0C52DC19FBD9EFE6179ED747B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:c7:53:89:01:d6:49:5e:33:ad:ec:d6:01:
                    27:8e:51:4a:60:fe:91:85:6e:02:a4:7a:0e:77:e9:
                    82:65:92:47:16:ac:b6:7c:23:d7:aa:49:7d:a8:46:
                    f6:35:a4:22:6c:12:9d:e3:99:e8:07:6d:c3:6f:d9:
                    fd:86:59:a6:2e:17:7e:ee:5d:f8:4c:3c:36:e5:70:
                    3a:1d:1e:2a:ab:95:40:aa:56:4c:76:94:2f:21:ed:
                    2e:3b:28:99:66:1a:a0:4d:a3:bf:51:5e:5e:d0:9b:
                    10:88:5e:d3:0b:4d:0f:07:4d:6b:4b:e9:d3:36:ba:
                    ca:e8:e1:d7:8c:ed:1a:e5:36:4a:aa:fb:66:89:f5:
                    15:f3:b3:41:21:ef:a9:be:9a:3b:b1:68:6d:09:b2:
                    d0:ad:0f:bb:ff:c6:9a:06:e7:fc:e8:0d:56:07:c7:
                    fb:c3:e3:91:d2:02:8b:b8:7e:02:37:bb:ad:d2:5a:
                    43:b3:71:d7:13:a9:ba:bd:b2:69:65:b2:0e:f7:b5:
                    47:40:02:07:46:ea:0e:a2:26:0d:30:f4:1f:80:51:
                    bd:db:2a:8b:00:cc:ff:e6:97:13:8c:c4:64:44:68:
                    8d:11:1a:53:1c:ab:05:96:3e:84:87:6f:18:a1:d4:
                    9f:51:c2:b8:a7:84:ab:a3:2a:11:32:65:3e:8d:a9:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:4A:3B:3C:AD:4D:0C:52:DC:19:FB:D9:EF:E6:17:9E:D7:47:B2
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         16:81:cd:48:e3:30:99:15:cb:50:f2:5a:13:4a:f5:2d:60:f6:
         af:a4:0a:e0:41:a4:17:5c:32:ea:5f:31:b6:03:f6:f2:f6:84:
         f3:09:07:b9:9b:11:48:bf:3f:fd:00:57:ac:28:43:f0:19:31:
         55:d8:c0:98:20:dd:71:45:d0:3f:8b:de:f5:2b:23:72:80:ec:
         d6:9a:6b:2a:56:08:95:ec:60:75:12:b0:68:3d:b9:7e:f5:fa:
         49:31:b3:a0:03:33:e3:12:e3:4e:47:d5:ae:b3:9d:84:82:77:
         ae:43:d0:cf:0c:23:99:39:05:cb:5c:d9:cc:c3:99:6d:45:6c:
         6c:1d:fb:d8:98:62:d8:1d:ae:90:9b:cc:4c:d9:1c:9a:40:6e:
         fb:cd:3d:71:37:53:03:41:88:5c:5e:37:5c:dc:fd:2e:e4:2b:
         29:8d:af:5c:0c:68:31:7e:38:20:e8:78:70:bf:65:00:c8:e3:
         01:9a:5a:c7:44:d9:d7:4b:ef:d8:ea:9c:b9:e1:a8:6f:a4:19:
         b6:8d:98:e7:a5:9d:4b:6e:72:d7:6a:11:d2:f2:7e:ab:3c:66:
         66:9f:79:64:27:43:64:94:27:5a:30:dd:83:d1:65:67:cc:c8:
         89:c8:a2:df:a2:40:57:1f:49:7f:50:a0:bb:5d:68:46:68:9d:
         a6:7d:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 17:50:30 2024 by rpki-client on console-fra.rpki-client.org