Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          kJRDoDDpuocZ1BDIGXIRJqSf2cirufNATQU6G6xMFFk=
Subject key identifier:   71:1B:BB:01:E0:F4:03:04:7B:28:58:04:27:85:3C:2A:39:33:D0:5F
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       18B51F7306D354AAB6A1170976B69A2DE84BD357
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
Signing time:             Fri 19 Jul 2024 14:05:25 +0000
ROA not before:           Fri 19 Jul 2024 14:00:25 +0000
ROA not after:            Fri 18 Jul 2025 14:05:25 +0000
asID:                     61776
IP address blocks:        2804:192c::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b5:1f:73:06:d3:54:aa:b6:a1:17:09:76:b6:9a:2d:e8:4b:d3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Jul 19 14:00:25 2024 GMT
            Not After : Jul 18 14:05:25 2025 GMT
        Subject: CN=711BBB01E0F403047B28580427853C2A3933D05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:93:0a:c7:2b:45:7d:19:f8:1a:4e:c7:78:
                    91:36:e3:bd:d8:68:2e:0f:7b:c1:5c:a0:89:c0:49:
                    bb:7b:11:4d:ca:fc:75:29:11:b4:04:5a:e1:6e:d7:
                    67:2c:1a:90:24:89:7f:e3:aa:69:bc:dd:d6:6f:7e:
                    07:fd:31:61:e4:ae:eb:35:7f:e2:b2:a0:e4:3f:65:
                    20:3e:3a:64:38:bb:ee:8d:96:ad:a5:f5:28:b2:0a:
                    49:54:68:b8:f4:f2:42:1d:b7:d9:1e:80:4d:03:6d:
                    96:ed:06:f3:cb:2d:80:60:78:f9:77:a9:88:b4:c1:
                    b1:ee:40:92:1b:2b:a6:4e:00:1b:71:1b:c3:80:32:
                    5b:3b:5e:b4:3b:31:e7:76:7f:a1:80:ac:11:be:ab:
                    57:1a:ee:72:e7:9c:6c:15:4b:2a:ee:db:72:5b:9e:
                    ff:5c:7e:5d:be:fb:90:c4:b9:69:cd:da:dd:9d:fb:
                    b9:40:e1:0f:db:a7:a2:5f:ed:e4:e1:9d:a2:f4:c1:
                    eb:59:66:c4:3a:24:45:79:b5:93:d6:a8:7f:ae:77:
                    af:a0:0d:b4:3d:07:22:fd:c8:58:2e:7e:ec:87:6c:
                    cb:9b:9d:ca:bf:3d:da:de:0d:af:ae:03:22:8c:c8:
                    1b:45:27:ab:75:17:fe:22:da:77:10:29:cc:05:86:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1B:BB:01:E0:F4:03:04:7B:28:58:04:27:85:3C:2A:39:33:D0:5F
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/323830343a313932633a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:ae:ac:6c:11:ce:3a:61:01:d7:1f:15:aa:2d:d4:e0:ca:0d:
         ad:15:7a:a2:c5:ae:c6:20:75:fd:b9:c7:16:94:a4:38:78:9a:
         00:2b:79:4d:41:50:74:6c:86:48:53:b2:fd:0b:27:a3:a8:f9:
         68:36:f2:e5:c7:a3:08:db:d2:d6:0b:17:82:c6:dc:4d:43:f6:
         00:78:26:c7:24:80:20:bd:13:1c:c6:0b:d5:37:cd:ed:d3:b1:
         c5:ee:33:10:12:fb:76:13:5c:be:dd:1a:15:74:1f:86:3c:4c:
         d7:ab:1f:4a:e4:20:d8:35:e4:4a:f6:9d:98:f4:d1:dc:af:50:
         b9:46:37:29:0c:49:84:51:35:bf:80:3d:87:7c:ff:f2:47:48:
         e5:07:8d:4a:8e:ad:15:3a:d9:d6:5a:16:4a:5e:c6:9d:75:04:
         6c:0d:17:d5:dd:ee:71:8c:21:60:72:9c:af:5e:7d:d3:5b:d4:
         94:2a:b0:f8:21:ee:45:8c:fa:ee:84:20:f2:24:8c:f1:08:d3:
         47:89:d0:df:d1:a5:95:5f:2a:24:24:ef:d6:d9:a3:b3:00:39:
         d4:2d:87:d0:6b:6d:fd:39:57:6f:d7:5d:c8:d2:ba:f9:f9:7c:
         ec:5a:ce:6d:68:34:bc:d8:3d:2b:5b:17:3e:00:10:33:ce:b5:
         e5:c8:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 17:58:30 2024 by rpki-client on console-ams.rpki-client.org