Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33322d3332203d3e203631373736.roa
File:                     323830343a313932633a3a2f33322d3332203d3e203631373736.roa (raw, json)
Hash identifier:          GkKa3P/0vV599VZC3cU2Ogswgz3ee/vq+mdH14gvo4M=
Subject key identifier:   87:38:8E:7B:15:66:FA:B1:2A:AE:E7:D4:B3:C3:8D:75:33:79:B4:97
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       0F4596B8FBCEA2CD43C455D68D624542026CD6D2
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33322d3332203d3e203631373736.roa
Signing time:             Fri 19 Jul 2024 14:05:25 +0000
ROA not before:           Fri 19 Jul 2024 14:00:25 +0000
ROA not after:            Fri 18 Jul 2025 14:05:25 +0000
asID:                     61776
IP address blocks:        2804:192c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:45:96:b8:fb:ce:a2:cd:43:c4:55:d6:8d:62:45:42:02:6c:d6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Jul 19 14:00:25 2024 GMT
            Not After : Jul 18 14:05:25 2025 GMT
        Subject: CN=87388E7B1566FAB12AAEE7D4B3C38D753379B497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:8b:72:6e:9e:9a:48:01:e6:68:4a:73:1a:
                    ee:1a:0a:df:1c:35:7c:0c:20:63:a8:2b:5e:85:e0:
                    53:b0:2f:c4:86:61:b2:cd:80:ef:59:80:5f:03:7a:
                    e7:84:dd:61:39:74:b3:95:d2:78:5d:03:45:de:ae:
                    cd:96:98:ec:15:0d:49:80:86:e8:ea:97:a0:72:6a:
                    c8:26:65:6e:78:10:56:69:b2:4b:99:3e:7d:ac:3e:
                    49:d7:16:2f:df:30:be:c6:08:82:10:9b:e5:d3:b7:
                    75:44:2a:b1:29:69:7e:04:44:36:0f:96:d3:60:dd:
                    f5:e3:4b:ac:4d:29:31:f5:3e:2e:09:e9:c2:67:18:
                    d3:4e:ed:c7:eb:d5:a8:7f:ec:fa:89:fe:29:eb:93:
                    0e:23:ce:3d:14:fa:45:72:e0:0a:19:82:1d:cc:e3:
                    3d:5c:6a:ac:37:89:2e:31:84:64:fa:a2:b6:d6:5f:
                    a2:14:3b:c5:6a:44:bf:0f:55:be:19:63:61:c2:a9:
                    78:de:97:e7:0c:b4:06:b4:a9:f7:f5:cc:5b:89:bd:
                    0c:a6:c5:e4:e5:15:89:d4:48:3f:2f:a5:81:7a:67:
                    9d:38:03:56:6a:9b:74:69:14:55:61:6d:61:5c:10:
                    83:5b:3e:8d:10:51:3d:a3:70:b9:16:cf:df:5c:bd:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:8E:7B:15:66:FA:B1:2A:AE:E7:D4:B3:C3:8D:75:33:79:B4:97
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33322d3332203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:93:6b:63:db:2b:a9:0c:66:89:56:89:fc:00:96:6e:8f:b2:
         48:93:ad:1c:03:47:b5:7d:5a:c9:1a:12:90:0e:65:e8:67:4f:
         b4:0f:ba:ac:57:d8:54:4e:de:80:a4:22:02:ae:74:3c:c3:62:
         92:22:da:de:4c:d0:7a:87:1b:a6:ef:db:7c:6f:44:85:b8:a0:
         92:40:28:15:af:46:1c:1a:24:2e:7e:bc:fb:84:20:15:83:45:
         75:f9:57:84:88:96:bf:87:0b:14:98:4c:5f:81:47:71:86:68:
         b3:28:1a:c5:8d:fc:0f:2f:ac:42:c8:08:5a:65:cc:8d:99:d1:
         7c:fd:ea:ef:8d:3f:a5:c2:c1:e3:52:67:26:74:0d:82:e9:00:
         47:40:d3:6e:e0:82:58:d1:22:e1:a9:6d:03:d6:db:c2:92:3b:
         02:af:f2:45:64:3a:e2:6e:52:9f:8b:9a:48:9e:a6:4b:47:6b:
         09:72:2a:06:30:62:da:ca:44:76:47:87:48:25:6f:74:67:a4:
         d6:7b:48:fe:e8:7e:10:dc:1c:36:8b:a1:73:fc:58:d3:14:0e:
         99:10:02:50:3e:7e:10:c6:f7:22:82:86:67:9c:42:4c:d3:73:
         8e:bf:4f:31:4d:d9:09:71:d9:a7:38:1e:f1:64:1a:04:9a:c5:
         d5:3c:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 17:50:30 2024 by rpki-client on console-fra.rpki-client.org