Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa
File:                     3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          EmdIrf0kB2iclfuv+usO0LWo8M76kBWDFee152DjCcc=
Subject key identifier:   3C:5F:98:E8:A8:83:1F:32:2B:03:54:A8:B7:F6:55:66:D1:BA:B7:34
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       153746E46633042B3FF9D3525A1078A4ED3642E6
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        168.121.148.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:46:e4:66:33:04:2b:3f:f9:d3:52:5a:10:78:a4:ed:36:42:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=3C5F98E8A8831F322B0354A8B7F65566D1BAB734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fc:60:dd:37:5a:3b:de:09:39:f4:d0:56:47:
                    c4:af:32:45:51:cc:5e:8d:1a:a7:0b:86:00:56:e3:
                    77:f5:6e:5d:a3:4e:41:d4:cb:c4:10:fd:57:96:48:
                    4a:ab:a3:de:f1:a5:cf:09:72:2f:b8:e2:48:bb:15:
                    6c:33:49:c3:4a:a9:79:80:85:01:b7:a6:21:34:43:
                    97:e8:2b:91:fc:9b:f9:ec:e5:99:43:8c:69:86:84:
                    81:5e:2d:ab:b2:1f:c4:20:28:b1:6e:1c:a4:66:76:
                    46:f0:32:4b:14:38:55:7c:90:e0:3d:fc:9c:fc:1c:
                    e3:c2:7d:94:57:5e:8b:d5:84:df:03:1d:0e:4e:60:
                    fa:c4:40:24:14:81:9d:bf:93:48:86:80:30:ec:df:
                    90:4c:52:ba:5e:bd:8c:23:0b:9c:fb:b9:38:d2:cb:
                    c3:5f:d4:83:c9:23:0f:fe:ac:6d:2a:a5:14:ec:b8:
                    69:c9:9c:df:8e:41:98:f7:ea:0d:5d:7e:c8:2f:b8:
                    ba:23:a4:fd:21:b8:3c:15:04:69:3f:13:18:28:c4:
                    43:23:e6:9e:e5:39:d2:11:ed:b7:ca:6b:9c:44:64:
                    13:6b:b9:87:04:33:67:b3:c8:50:d8:61:e2:82:69:
                    90:a8:87:4d:99:6b:b6:64:8e:a1:76:42:eb:8c:13:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:98:E8:A8:83:1F:32:2B:03:54:A8:B7:F6:55:66:D1:BA:B7:34
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:45:12:90:57:dc:bb:dd:0b:34:8d:ef:09:02:c9:3b:b9:22:
         d2:54:0a:97:4d:f3:b2:09:e3:ef:dc:7b:09:d8:aa:89:f7:c9:
         c8:9b:3d:91:38:29:9a:4e:10:e1:19:cd:07:6a:ca:1b:7e:2e:
         11:2e:c2:4f:06:4c:b0:e4:4e:42:1f:90:df:b8:ad:e2:3d:77:
         b6:83:3b:7a:95:e8:a7:5d:c6:2e:30:17:22:8c:46:09:f6:ec:
         bc:62:42:5c:39:ad:a8:5d:20:95:76:34:26:0f:a6:ec:57:9b:
         4c:84:e8:39:39:84:0e:cf:0d:0c:e3:20:2e:86:29:6a:2f:a4:
         c9:69:20:ad:4a:fb:0e:b2:84:7f:dc:57:a4:6a:7b:dd:b7:14:
         9b:87:f6:36:e6:35:21:44:81:54:b2:bf:35:f9:83:29:82:b3:
         f2:bf:33:0d:89:2c:65:15:90:9a:4d:7a:5f:c9:01:60:1b:e0:
         7d:fd:85:0d:4a:a4:64:f3:2a:87:11:37:e1:a4:f4:9c:5a:65:
         64:05:20:f3:6a:3c:8e:f3:9c:b3:73:7d:73:4e:77:d3:24:b3:
         10:3a:01:a0:ce:3a:cc:16:23:33:a6:83:d0:12:6f:af:41:e6:
         c9:14:bd:44:45:f2:9b:13:72:6d:eb:93:33:1a:72:0c:13:cd:
         62:51:c4:0a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFTdG5GYzBCs/+dNSWhB4pO02QuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI2NDE5NjhGNTRFMTZGNEE2RTcyQjFGMjQzQTc2MDI1
NTgyMUQ3RTAeFw0yNDA5MDkxNDU5NTJaFw0yNTA5MDgxNTA0NTJaMDMxMTAvBgNV
BAMTKDNDNUY5OEU4QTg4MzFGMzIyQjAzNTRBOEI3RjY1NTY2RDFCQUI3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/GDdN1o73gk59NBWR8SvMkVR
zF6NGqcLhgBW43f1bl2jTkHUy8QQ/VeWSEqro97xpc8Jci+44ki7FWwzScNKqXmA
hQG3piE0Q5foK5H8m/ns5ZlDjGmGhIFeLauyH8QgKLFuHKRmdkbwMksUOFV8kOA9
/Jz8HOPCfZRXXovVhN8DHQ5OYPrEQCQUgZ2/k0iGgDDs35BMUrpevYwjC5z7uTjS
y8Nf1IPJIw/+rG0qpRTsuGnJnN+OQZj36g1dfsgvuLojpP0huDwVBGk/ExgoxEMj
5p7lOdIR7bfKa5xEZBNruYcEM2ezyFDYYeKCaZCoh02Za7ZkjqF2QuuME25zAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPF+Y6KiDHzIrA1Sot/ZVZtG6tzQwHwYDVR0j
BBgwFoAUC2QZaPVOFvSm5ysfJDp2AlWCHX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8wQjY0MTk2OEY1NEUxNkY0QTZFNzJCMUYyNDNBNzYwMjU1ODIxRDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCNjQxOTY4RjU0RTE2RjRB
NkU3MkIxRjI0M0E3NjAyNTU4MjFEN0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzQzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAah5lDANBgkqhkiG9w0BAQsFAAOCAQEAdkUS
kFfcu90LNI3vCQLJO7ki0lQKl03zsgnj79x7CdiqiffJyJs9kTgpmk4Q4RnNB2rK
G34uES7CTwZMsOROQh+Q37it4j13toM7epXop13GLjAXIoxGCfbsvGJCXDmtqF0g
lXY0Jg+m7FebTIToOTmEDs8NDOMgLoYpai+kyWkgrUr7DrKEf9xXpGp73bcUm4f2
NuY1IUSBVLK/NfmDKYKz8r8zDYksZRWQmk16X8kBYBvgff2FDUqkZPMqhxE34aT0
nFplZAUg82o8jvOcs3N9c0530ySzEDoBoM46zBYjM6aD0BJvr0HmyRS9REXymxNy
beuTMxpyDBPNYlHECg==
-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org