Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323930363a3a2f34382d3438203d3e203631373736.roa
File:                     323830343a313932633a323930363a3a2f34382d3438203d3e203631373736.roa (raw, json)
Hash identifier:          zOZzfW75vJ1Euyt/xF42VWj+3/gjHVBBbfYERzrGng8=
Subject key identifier:   BD:88:1B:82:B0:04:61:D6:2A:7C:30:54:01:4E:3C:4F:4F:3B:5C:F5
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       7FECBF187A31D9F953A09BD814DD2D360C287EF2
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323930363a3a2f34382d3438203d3e203631373736.roa
Signing time:             Fri 19 Jul 2024 14:05:25 +0000
ROA not before:           Fri 19 Jul 2024 14:00:25 +0000
ROA not after:            Fri 18 Jul 2025 14:05:25 +0000
asID:                     61776
IP address blocks:        2804:192c:2906::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ec:bf:18:7a:31:d9:f9:53:a0:9b:d8:14:dd:2d:36:0c:28:7e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Jul 19 14:00:25 2024 GMT
            Not After : Jul 18 14:05:25 2025 GMT
        Subject: CN=BD881B82B00461D62A7C3054014E3C4F4F3B5CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:ef:90:d2:8c:3c:72:b9:b6:6d:3e:5e:1d:
                    29:87:2f:89:4b:b4:2f:69:81:16:a0:c2:a7:47:fe:
                    f1:c3:b5:d4:2d:ca:b3:df:70:2e:8d:75:d3:83:e4:
                    65:77:c5:3d:12:76:e5:8e:e4:42:0b:2b:dd:1e:fa:
                    6f:89:dc:74:e2:c8:f1:da:28:c0:54:e1:07:e0:47:
                    d0:f5:dc:da:21:60:9d:3b:21:22:9b:31:09:3f:7e:
                    67:fd:e1:b0:9c:7f:08:5d:53:b4:d0:93:eb:44:dd:
                    9f:5c:cf:26:e0:ab:9d:8b:01:2d:76:15:45:d8:61:
                    f4:2c:0a:9e:e8:16:1d:32:63:0e:11:24:9c:0b:72:
                    09:61:6e:a9:b5:9a:a3:88:49:fd:90:78:4b:f3:40:
                    9b:cd:ee:bc:dd:6f:ef:79:c0:53:0f:96:79:ff:08:
                    8e:64:f3:ff:29:ea:11:2d:dc:70:63:85:54:31:46:
                    d7:6a:46:e6:6e:5c:20:a8:51:1a:e8:de:ad:ae:26:
                    ba:94:f4:97:7a:f6:3a:21:af:4d:ba:9a:b4:93:7a:
                    21:54:6d:a9:27:8a:7c:98:2f:1a:4d:8e:ba:e5:49:
                    d2:f9:b5:d0:75:fa:c0:2d:13:a4:7c:1e:69:be:77:
                    ea:5e:59:11:f1:d6:f0:3e:97:6f:bf:31:30:85:37:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:88:1B:82:B0:04:61:D6:2A:7C:30:54:01:4E:3C:4F:4F:3B:5C:F5
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a323930363a3a2f34382d3438203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2906::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:dc:c4:af:5f:9a:ba:8c:31:38:6e:aa:ca:f9:7d:e2:b9:ca:
         a2:d0:c8:f3:61:bd:45:4b:2a:3c:0d:35:e4:57:f1:08:42:43:
         d2:6e:f1:06:39:dc:83:0e:84:30:78:89:cb:7c:88:63:9d:c0:
         d6:cc:0d:4d:53:8d:3e:fb:6f:85:c4:e7:4c:43:e2:ed:e7:13:
         9e:18:03:29:96:32:07:1e:2f:cf:bb:80:e5:a7:c2:ff:2a:b3:
         15:74:04:86:b3:c0:2c:0d:a6:9a:4e:16:5c:06:4a:d5:47:c0:
         c7:0f:ce:52:be:86:5f:c8:47:39:fe:47:cf:ad:b0:3b:3e:f1:
         28:44:c4:6d:26:f1:dd:a2:2b:4a:24:bb:a7:19:37:77:a1:78:
         f7:f2:8b:2e:c0:41:10:53:96:2e:50:37:a5:ac:5f:29:02:c1:
         ba:fc:b8:f4:5b:bf:45:1f:7b:6b:64:70:ab:31:f8:b1:02:57:
         12:b3:94:8c:43:31:ba:19:bf:19:fd:9a:af:fe:27:ed:1e:4a:
         98:9e:ff:b5:bd:bb:b7:14:df:b6:23:a1:a8:57:22:58:9f:77:
         c3:00:13:e9:5c:df:e5:f1:08:fe:2b:3d:03:23:4e:3a:cd:2f:
         bf:68:1b:da:92:3f:59:fa:2c:8d:0b:60:4a:57:5f:19:2a:74:
         d6:66:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 09:40:34 2024 by rpki-client on console-ams.rpki-client.org