Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa
File:                     3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          CLZZrPznfgKhFOgPM4QQh/dGlqHt5fC9bftKR9G/eWY=
Subject key identifier:   55:2A:4C:12:9F:EF:F5:F5:CC:04:EA:29:5E:6E:BF:AA:1D:3E:3E:BF
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       3DD9F0011598FFA0FDA95E3198950303E9BA8341
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        138.255.217.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d9:f0:01:15:98:ff:a0:fd:a9:5e:31:98:95:03:03:e9:ba:83:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=552A4C129FEFF5F5CC04EA295E6EBFAA1D3E3EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:0c:7c:e1:c3:69:2b:1d:0c:de:dc:f6:13:
                    12:c1:c8:00:81:be:90:f2:33:00:1f:c3:8b:c1:f8:
                    b2:0c:08:e4:10:43:04:f1:58:76:20:cd:ea:a9:04:
                    bf:89:f2:9b:8c:2f:85:4d:04:8c:fc:24:47:0e:22:
                    31:80:48:c3:28:b7:75:a5:a0:51:a4:f9:cc:78:bd:
                    b0:c3:e5:8c:6e:8d:ad:a8:e8:22:8f:7b:11:e3:cf:
                    84:17:4a:a4:15:92:2a:2c:4b:4d:4b:47:c8:5d:45:
                    ce:3b:e9:8e:3d:43:ab:c2:e6:e4:ef:28:3f:4a:46:
                    5d:85:c2:c4:c6:44:3a:52:19:a4:3e:0a:52:9f:02:
                    53:04:21:7f:d7:77:56:fc:fe:84:3e:64:79:8a:00:
                    39:bf:b9:09:ab:c2:3a:30:5c:96:3b:ab:33:ad:66:
                    66:5e:67:d1:00:01:6b:7b:38:c0:06:64:b2:04:96:
                    96:85:2b:81:38:28:c0:0d:bb:4d:98:b2:0a:04:c5:
                    db:6f:f9:94:53:d9:8b:1b:dc:02:d8:db:de:c8:77:
                    ce:3c:ff:5a:5a:ee:fe:a3:3b:11:84:a8:43:9a:35:
                    17:1a:5f:20:b4:c6:33:97:c5:70:ab:8c:1b:78:ed:
                    f3:09:1c:e6:16:74:dc:8c:8b:6b:05:6b:38:67:da:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:4C:12:9F:EF:F5:F5:CC:04:EA:29:5E:6E:BF:AA:1D:3E:3E:BF
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:de:de:74:92:d4:63:98:3d:ec:56:60:3d:7b:39:5a:0b:
         ff:9d:87:ba:ba:65:11:84:08:10:76:6f:2f:e7:bd:aa:4e:39:
         c0:e5:7f:6e:20:c7:af:db:1a:fe:59:4e:3c:c8:3d:df:77:ef:
         4c:7a:23:5a:ac:ef:0b:2a:ed:94:f3:b1:78:99:5b:1b:97:f0:
         5b:28:f4:ba:50:66:8c:1e:e4:f8:46:64:b8:24:ec:05:4a:fe:
         28:e6:95:0e:b3:97:86:63:55:6c:58:a1:35:31:84:92:31:89:
         2c:1d:fa:7a:13:e5:a5:3f:1c:a8:01:47:2a:25:8c:d6:1f:6f:
         ba:c4:e5:dd:cb:9e:a4:df:8b:04:a1:14:e4:4e:78:9d:e4:87:
         8c:76:83:26:da:58:2e:05:1c:5f:8e:80:fb:da:55:eb:9c:89:
         b4:37:fc:f7:7f:41:b1:fb:7f:8a:aa:b6:29:f8:d8:89:48:f5:
         db:01:df:27:85:bd:51:3a:c6:2d:77:2c:52:ec:9c:d0:70:48:
         a2:2a:9d:4b:7c:9e:ee:80:68:e4:f2:77:e1:36:4b:f6:eb:1f:
         38:89:c5:9a:cf:ed:f2:48:78:ce:64:2b:d0:42:b0:81:ab:95:
         aa:9f:13:7f:70:eb:36:0c:24:72:85:61:5e:f7:92:d9:7f:ac:
         c4:23:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org