Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa
File:                     323830343a373734633a3a2f33322d313238203d3e20323731313639.roa (raw, json)
Hash identifier:          gN0cq8uNGy7y49xWwoEzuV4O8dIDwezQ2btr/iiKfTU=
Subject key identifier:   96:DC:3A:1E:B5:39:9E:FF:1A:2F:7B:13:01:F0:3E:FA:4F:D0:68:BE
Certificate issuer:       /CN=88924B7890A5341810CD86D1137AE868EC14EDA9
Certificate serial:       109CB28FEF1806E669C13BFFCC9565B8A957BD2E
Authority key identifier: 88:92:4B:78:90:A5:34:18:10:CD:86:D1:13:7A:E8:68:EC:14:ED:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88924B7890A5341810CD86D1137AE868EC14EDA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa
Signing time:             Thu 19 Sep 2024 18:25:02 +0000
ROA not before:           Thu 19 Sep 2024 18:20:02 +0000
ROA not after:            Thu 18 Sep 2025 18:25:02 +0000
asID:                     271169
IP address blocks:        2804:774c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9c:b2:8f:ef:18:06:e6:69:c1:3b:ff:cc:95:65:b8:a9:57:bd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88924B7890A5341810CD86D1137AE868EC14EDA9
        Validity
            Not Before: Sep 19 18:20:02 2024 GMT
            Not After : Sep 18 18:25:02 2025 GMT
        Subject: CN=96DC3A1EB5399EFF1A2F7B1301F03EFA4FD068BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:88:63:0c:3d:48:8b:72:17:bf:4f:fa:f8:
                    2c:15:f6:c5:6f:97:0e:f7:3e:a7:03:90:cc:0d:bc:
                    ff:87:b1:c0:62:ab:68:4a:62:4b:18:f8:f6:89:eb:
                    a5:92:a5:82:cf:6a:ab:90:ad:91:6f:69:67:f3:24:
                    42:03:cd:eb:9b:c9:ef:f0:10:bd:29:76:f0:c8:ff:
                    32:92:70:86:14:b0:9a:91:9d:5f:36:2e:90:66:4f:
                    a2:58:a1:c8:d5:14:d2:9d:33:b2:8e:30:b1:bf:c9:
                    57:23:25:32:4c:1f:fc:ca:84:03:9d:96:e6:7e:54:
                    88:73:f7:42:29:ce:3c:4f:fd:f9:5f:3c:95:3a:5b:
                    36:c6:11:06:e0:ff:e6:6c:c7:20:8a:9f:a2:b5:0d:
                    8f:b5:76:d9:59:08:4f:9a:35:7e:9a:46:39:ab:86:
                    89:f4:2f:ea:c4:9b:c9:1a:0f:9a:9d:44:c4:e9:88:
                    22:9f:3c:c6:fe:3f:72:6c:62:78:3d:56:8b:1b:a4:
                    4e:ff:47:9e:75:87:c9:01:6b:66:7c:aa:b7:87:9c:
                    60:85:43:97:34:9c:77:9f:98:a4:ed:2f:eb:ef:44:
                    b5:73:cd:84:43:a3:44:50:8e:f7:e5:40:48:bc:02:
                    eb:da:e7:cc:e0:ab:43:30:a4:40:8a:31:89:01:d7:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DC:3A:1E:B5:39:9E:FF:1A:2F:7B:13:01:F0:3E:FA:4F:D0:68:BE
            X509v3 Authority Key Identifier:
                keyid:88:92:4B:78:90:A5:34:18:10:CD:86:D1:13:7A:E8:68:EC:14:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/88924B7890A5341810CD86D1137AE868EC14EDA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88924B7890A5341810CD86D1137AE868EC14EDA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:0b:6c:06:61:57:fc:89:c5:18:3f:31:4d:f1:cb:91:c6:0b:
         e1:88:1f:f2:ec:48:7b:ec:76:22:41:12:b3:08:a2:41:ea:1d:
         28:da:f8:5a:5b:24:7d:91:e8:c6:55:4e:3d:ca:25:9a:b2:12:
         85:f9:a6:2e:6d:08:07:e7:fc:27:68:1b:4e:08:1d:b8:20:a8:
         c9:aa:23:a7:f2:27:67:aa:a8:a7:39:f6:e3:53:1b:89:c0:22:
         49:ef:a2:aa:51:33:73:d5:0f:76:62:59:4d:37:e7:c2:38:12:
         57:6e:22:4a:4b:7b:ea:f7:7d:08:4c:de:86:4c:1a:46:a7:5b:
         5b:44:c3:c3:3d:75:d4:c0:e0:71:76:b7:e7:a5:f7:e4:93:31:
         34:3c:74:fb:4b:d4:6f:07:71:ba:0a:cf:f3:22:88:fa:e0:b7:
         bb:37:83:2b:ff:ae:e4:0b:f2:d6:5a:73:2e:10:32:de:b8:63:
         05:06:20:4b:aa:46:79:45:dc:76:7b:55:5d:45:14:da:df:2f:
         23:29:cf:1e:5c:9d:10:0f:05:63:d2:21:32:2e:28:84:03:a4:
         44:0e:f0:32:57:7c:0c:51:40:98:0e:93:2b:1e:5c:4c:7e:2d:
         b1:d1:fd:06:6d:05:42:4b:6c:69:42:72:68:31:a6:cb:26:a0:
         ae:d1:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:19 2024 by rpki-client on console-ams.rpki-client.org