Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33322d3438203d3e203631373736.roa
File:                     323830343a313932633a3a2f33322d3438203d3e203631373736.roa (raw, json)
Hash identifier:          c4lFRuYXkhssOA20R7bkLrPrxyT1f0DvZiPvwDDDnOA=
Subject key identifier:   BA:06:14:24:E6:61:7C:16:12:6F:C4:57:A4:3A:18:02:10:BD:6B:F7
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       13A41270F40AAF41561E70784AB995F0071E159F
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33322d3438203d3e203631373736.roa
Signing time:             Thu 04 Apr 2024 00:34:29 +0000
ROA not before:           Thu 04 Apr 2024 00:29:29 +0000
ROA not after:            Thu 03 Apr 2025 00:34:29 +0000
asID:                     61776
IP address blocks:        2804:192c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a4:12:70:f4:0a:af:41:56:1e:70:78:4a:b9:95:f0:07:1e:15:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Apr  4 00:29:29 2024 GMT
            Not After : Apr  3 00:34:29 2025 GMT
        Subject: CN=BA061424E6617C16126FC457A43A180210BD6BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f1:ea:13:6e:2b:98:43:c4:46:2c:b2:e0:80:
                    8b:eb:53:95:da:34:05:aa:a5:e3:c4:f6:54:46:7f:
                    bc:8c:84:82:8e:d7:01:df:09:4e:2a:ae:47:4e:ca:
                    b5:85:d8:51:12:72:f1:12:54:33:65:c9:ec:3f:99:
                    56:79:fe:10:a4:28:d8:72:aa:45:28:f2:f0:b5:83:
                    4c:e9:a6:69:ef:4c:45:45:43:8b:10:18:19:3d:50:
                    51:af:57:3f:db:2c:f8:6f:88:10:f8:f8:15:36:fa:
                    10:5c:7d:b5:0a:af:4b:b6:19:99:a8:4e:2e:e9:6e:
                    6f:6e:b2:4d:78:cf:13:99:85:e1:af:3f:1a:b6:a0:
                    07:36:51:8a:5b:72:35:cc:36:83:9d:98:cd:5d:8d:
                    ca:14:83:bf:4d:a2:8a:26:85:59:64:ab:39:a3:93:
                    13:29:f6:8a:ba:2f:22:d3:3c:ad:78:75:74:32:91:
                    c3:a3:c5:7f:d4:71:99:fb:99:c8:23:0d:bf:d6:9f:
                    ee:02:ea:1e:0c:02:2b:95:2b:65:87:e3:b8:f8:35:
                    58:06:76:cc:09:36:97:99:d5:28:af:fd:1f:82:bf:
                    35:e8:56:61:16:a5:97:0b:0c:69:0a:f1:de:de:d6:
                    71:25:d6:2e:9b:ca:1d:5e:08:14:92:e3:7e:12:51:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:14:24:E6:61:7C:16:12:6F:C4:57:A4:3A:18:02:10:BD:6B:F7
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33322d3438203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:87:6d:75:5b:28:fc:9e:1d:d0:be:a5:67:80:2c:ef:11:8a:
         16:02:47:a9:b4:ec:ce:be:9c:63:04:12:fc:f3:61:56:26:24:
         af:c6:ab:c6:34:f9:71:67:ed:b2:d2:b4:67:23:20:e9:dd:af:
         1d:ea:34:d5:54:94:d2:d9:6d:ed:d3:6f:cc:6f:9a:be:82:23:
         75:55:47:60:55:99:e0:9c:bc:f9:70:c9:33:9b:f9:c7:3c:b9:
         9c:44:c8:42:fe:c3:30:6c:6a:17:5a:03:03:6a:95:22:ea:a0:
         9b:4b:b3:93:33:32:ca:93:d9:87:79:1e:cc:09:ba:71:36:6d:
         94:5f:fd:0b:45:cc:12:15:39:85:84:63:9b:93:e3:41:ae:75:
         ba:0d:5e:ba:83:cf:6e:7c:5e:21:5c:9f:e7:24:50:ba:20:b1:
         84:29:bc:15:27:55:c0:54:55:2a:ab:a0:b4:ed:06:7e:15:c1:
         f0:69:94:1e:29:11:c2:af:f2:78:c2:b1:62:ad:e6:8a:a2:4e:
         5e:b5:75:d7:ae:af:0a:6d:ef:0d:db:b2:fa:e2:ca:e8:49:65:
         0e:3d:81:2f:3d:07:15:dd:a1:5a:3f:27:d6:b9:11:e9:f1:db:
         8f:3f:71:3c:a6:63:ff:37:06:0c:45:f9:a8:f9:7c:29:c4:97:
         4f:cd:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 18:50:14 2024 by rpki-client on console-fra.rpki-client.org