Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (raw, json)
Hash identifier:          71EjaT9Z2dXIxNrO3b/ht2LGXRkIbw33x30Y1bMiGbo=
Subject key identifier:   1D:BD:48:2F:B8:32:A0:48:E6:65:51:0A:45:29:7D:94:EC:C7:1E:44
Certificate issuer:       /CN=5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651
Certificate serial:       44EFC9C0AB9F9ABE0DCD29F40A0A70C9E57AF79C
Authority key identifier: 5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
Signing time:             Wed 07 Aug 2024 19:31:28 +0000
ROA not before:           Wed 07 Aug 2024 19:26:28 +0000
ROA not after:            Wed 06 Aug 2025 19:31:28 +0000
asID:                     263026
IP address blocks:        2804:a28::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ef:c9:c0:ab:9f:9a:be:0d:cd:29:f4:0a:0a:70:c9:e5:7a:f7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651
        Validity
            Not Before: Aug  7 19:26:28 2024 GMT
            Not After : Aug  6 19:31:28 2025 GMT
        Subject: CN=1DBD482FB832A048E665510A45297D94ECC71E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:c1:5b:d1:b2:ec:5c:b8:59:02:fb:b1:aa:
                    6e:bc:b1:d6:54:3d:8b:97:d9:c9:8f:ac:8b:a0:49:
                    f4:d4:b0:2d:2e:b2:8c:71:6e:da:4a:f5:2b:88:bd:
                    29:97:c0:e7:60:bc:47:1e:43:2d:03:34:b7:1b:71:
                    c2:e8:3e:a9:38:29:f7:9e:12:8a:c6:62:ba:f7:19:
                    7d:bc:b2:5b:0e:aa:07:65:22:29:54:64:4d:3c:23:
                    11:f8:33:5d:95:14:d7:b4:5e:97:8c:80:bc:5b:3b:
                    1d:1e:6c:9d:49:1d:bb:31:ba:d9:ab:e8:ca:4d:d6:
                    92:d8:aa:46:e6:b0:97:a1:a4:a6:83:bc:6b:75:07:
                    c5:a3:b1:f1:22:e9:41:c7:83:78:c2:00:1d:c7:28:
                    a5:6a:74:97:d5:0a:8f:09:c6:27:4d:ef:a4:2f:31:
                    bd:d2:00:e1:ab:b8:1d:26:c0:d1:17:23:65:60:49:
                    a9:86:d2:33:fd:e2:0f:e3:63:5c:e6:57:7e:5b:ff:
                    2b:39:4e:aa:90:d1:24:21:9a:d4:3d:27:a6:b8:1d:
                    50:2d:d3:d3:f0:12:16:3d:51:8e:1e:d2:61:9f:73:
                    ed:4c:f1:cc:14:f5:33:ec:f8:24:ac:f1:14:f7:0c:
                    6a:ff:ab:1e:45:76:ee:cd:96:1a:18:53:ff:17:24:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:48:2F:B8:32:A0:48:E6:65:51:0A:45:29:7D:94:EC:C7:1E:44
            X509v3 Authority Key Identifier:
                keyid:5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:ee:ae:19:dc:62:5f:b7:e8:26:5f:02:e8:29:47:39:63:62:
         4f:d0:31:22:e3:6c:88:ca:ef:13:86:8a:c2:a8:63:2c:c9:fe:
         ab:f4:c3:f8:e7:3a:60:e1:2d:d2:e5:66:86:34:34:89:40:d0:
         44:fe:00:4d:e6:bc:78:07:b8:eb:d2:93:a0:f9:21:11:2c:f8:
         ab:17:fe:0b:e5:f2:de:81:69:3b:fa:49:76:7c:49:1c:c5:77:
         15:62:3e:8d:1c:de:4f:64:3d:48:92:72:d6:68:56:e9:24:c2:
         67:a7:44:26:3d:b4:04:89:78:94:ad:5b:5c:db:84:dc:e6:4d:
         ad:ac:a9:56:79:b4:67:25:8a:3e:4e:cb:94:1d:5d:65:32:f8:
         39:3a:ca:46:9b:46:31:e8:dc:de:4c:2d:11:c3:ac:f7:20:27:
         d6:5e:f4:cd:82:33:92:00:ca:e5:26:29:00:59:8b:81:7d:d4:
         99:e7:94:b5:4c:69:f8:3b:d5:9d:c6:d1:88:d9:00:51:fd:b1:
         c7:f3:82:60:14:e1:a4:42:93:93:7a:7c:de:1c:69:8c:2d:e7:
         b2:0b:4a:fb:22:af:95:47:be:e8:a3:5b:f8:1d:7c:e6:6e:91:
         56:9f:20:b4:d3:23:2e:83:05:75:4d:16:d4:4c:09:af:75:bb:
         9d:0c:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org