Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa
File:                     323830343a323663343a3a2f33322d313238203d3e20323633383535.roa (raw, json)
Hash identifier:          z2bsWqnhUkq2laQ67IbuTabsGhzZfmHx3ZSClPtaybg=
Subject key identifier:   5F:5C:1F:1B:44:D6:C3:F9:2E:7E:79:E2:C1:1C:C2:59:11:04:6D:2F
Certificate issuer:       /CN=435F07EA00073886381C39126AB1AE280041F253
Certificate serial:       0A77F7BA03A9D08703B4273B47267966BF586264
Authority key identifier: 43:5F:07:EA:00:07:38:86:38:1C:39:12:6A:B1:AE:28:00:41:F2:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F07EA00073886381C39126AB1AE280041F253.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa
Signing time:             Thu 04 Apr 2024 20:42:37 +0000
ROA not before:           Thu 04 Apr 2024 20:37:37 +0000
ROA not after:            Thu 03 Apr 2025 20:42:37 +0000
asID:                     263855
IP address blocks:        2804:26c4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:f7:ba:03:a9:d0:87:03:b4:27:3b:47:26:79:66:bf:58:62:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F07EA00073886381C39126AB1AE280041F253
        Validity
            Not Before: Apr  4 20:37:37 2024 GMT
            Not After : Apr  3 20:42:37 2025 GMT
        Subject: CN=5F5C1F1B44D6C3F92E7E79E2C11CC25911046D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:1c:95:b7:c3:a2:ac:49:99:b0:6c:86:44:
                    2f:78:64:f5:58:77:1a:29:47:d8:d7:21:60:2c:83:
                    b7:72:fb:64:dd:70:f2:cb:c4:27:b3:da:72:a6:b9:
                    cd:c7:7f:08:f0:33:2e:fe:1f:7c:53:34:6f:40:68:
                    bf:4c:75:e7:91:d5:41:ff:5d:5f:67:89:2e:a1:98:
                    02:a1:75:60:98:00:cb:a2:3c:17:19:aa:ff:ed:42:
                    84:0f:eb:e2:0c:5c:44:35:7f:7e:29:3e:32:cc:ca:
                    c3:60:96:cf:31:64:23:c9:07:95:5e:e9:cd:d1:1b:
                    9e:f1:bb:67:91:e1:1a:51:ce:de:85:c7:2f:9e:5e:
                    3d:0b:73:e7:50:94:1e:a7:4e:1d:72:63:d5:4d:3c:
                    00:48:7f:d1:d3:8a:18:1a:09:19:50:be:8c:90:59:
                    a2:e1:45:0a:f6:4e:8c:8a:77:9e:a3:3a:9f:f4:26:
                    4d:6d:91:06:64:1d:66:52:a5:37:de:c1:c1:88:99:
                    e4:d5:84:d5:c9:c2:cc:d5:9c:15:ed:c6:3a:9f:45:
                    fb:fd:18:8d:58:43:b8:a2:20:64:88:c3:07:d9:f3:
                    dd:8f:96:2c:df:32:05:7a:69:44:5d:b9:3d:3b:6f:
                    a3:fc:7d:41:34:e9:11:31:da:86:fb:f6:38:ca:e0:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:1F:1B:44:D6:C3:F9:2E:7E:79:E2:C1:1C:C2:59:11:04:6D:2F
            X509v3 Authority Key Identifier:
                keyid:43:5F:07:EA:00:07:38:86:38:1C:39:12:6A:B1:AE:28:00:41:F2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1/435F07EA00073886381C39126AB1AE280041F253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F07EA00073886381C39126AB1AE280041F253.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/1/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:c0:34:24:28:53:76:68:67:23:bc:e0:1d:be:de:bb:7c:ac:
         69:0c:84:b5:5d:26:55:24:6d:79:bb:22:bd:39:b1:5f:4c:71:
         1e:9b:5e:5c:62:aa:73:aa:e0:be:49:20:87:d8:61:40:3c:d1:
         e8:1d:de:cc:08:27:d4:81:09:bd:f0:1b:63:cf:31:87:73:43:
         67:c0:3a:c0:f2:2f:de:4a:97:c5:a2:f8:20:8b:9b:97:db:b3:
         88:c8:52:fb:0f:2f:89:43:5c:15:db:0e:0c:0f:ca:ea:0b:9c:
         3b:71:28:79:73:6e:c9:93:8a:1e:eb:5d:da:2d:a5:c1:9d:0d:
         47:0c:dd:e3:05:db:79:13:fe:92:f0:c0:6f:fc:04:d7:29:5d:
         23:6a:7c:33:43:17:0e:4e:36:56:dc:f8:93:17:c5:fc:41:7a:
         ca:ab:eb:05:cb:26:69:f6:ab:e6:49:f4:4b:51:e4:11:3e:c1:
         81:8f:e0:5d:1a:f1:5c:41:ba:e7:d4:3a:6b:35:5d:bd:05:8a:
         b0:cc:9f:25:65:f6:c1:06:d9:ac:8c:04:45:c3:0b:7d:ee:24:
         af:75:fd:cf:82:c3:b2:6c:dc:41:09:7c:61:4b:02:20:5c:f3:
         d2:25:18:8e:d1:25:9d:ae:f3:46:cd:b8:63:d6:7d:84:ce:6a:
         bb:1b:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 21:56:04 2024 by rpki-client on console-fra.rpki-client.org