Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa
File:                     3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          AGsEaU2CLD9Up/TcAeFRIGL5b8gzIj7lk0MhwSkiY64=
Subject key identifier:   13:39:65:9A:34:51:5B:19:C2:DF:08:0A:B7:55:96:55:48:63:9B:2E
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       0C2F003AF1EE62C15371A7603376D08EFE89B98D
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:54 +0000
ROA not before:           Mon 09 Sep 2024 14:59:54 +0000
ROA not after:            Mon 08 Sep 2025 15:04:54 +0000
asID:                     262493
IP address blocks:        168.121.150.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2f:00:3a:f1:ee:62:c1:53:71:a7:60:33:76:d0:8e:fe:89:b9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:54 2024 GMT
            Not After : Sep  8 15:04:54 2025 GMT
        Subject: CN=1339659A34515B19C2DF080AB755965548639B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:4f:c5:a3:3d:9f:b2:8c:c9:d5:89:26:b2:
                    89:8b:bd:65:2d:04:bc:00:ae:3f:4c:b6:42:2d:2b:
                    a2:a1:a5:25:5e:da:27:ff:f1:fe:68:09:a9:8a:8f:
                    42:a1:98:f8:21:29:26:c9:b9:2a:13:d3:23:f5:3a:
                    ed:f2:eb:b0:8e:f8:43:18:e1:d9:b5:3e:a8:02:9e:
                    f4:60:f7:4f:7d:fc:43:46:2f:c9:20:44:6d:be:f4:
                    1a:7a:59:ca:2f:ca:05:3a:e2:a0:4f:a7:6c:a1:72:
                    cf:4d:01:20:2d:4e:86:9c:9c:55:07:b0:7a:96:94:
                    a4:78:15:5d:06:94:ef:4b:84:ea:67:51:82:9f:19:
                    ac:80:46:27:28:21:ac:99:80:26:09:12:ba:8d:40:
                    d3:55:1e:b8:77:59:69:74:12:bf:b5:b6:31:c9:34:
                    5d:34:7a:fc:06:44:6f:9a:b2:53:eb:13:80:a3:84:
                    cc:ed:f4:69:c2:71:77:41:90:41:bd:d4:5c:eb:49:
                    b0:7a:11:58:34:3b:d5:08:82:f8:45:6e:fa:37:29:
                    71:11:da:e3:60:e6:52:63:73:c1:8f:12:a3:ca:f1:
                    47:41:57:6a:5a:f8:36:8d:7c:50:8f:58:82:44:ff:
                    47:d8:bc:d6:5d:77:bb:b4:dd:02:53:6e:6c:c5:63:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:39:65:9A:34:51:5B:19:C2:DF:08:0A:B7:55:96:55:48:63:9B:2E
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:3d:89:c3:ca:6a:0a:28:c9:9e:e1:a1:e0:b7:85:1f:fc:
         56:a3:2c:b3:42:57:4c:06:dd:5f:f8:9b:5e:40:ce:84:33:bc:
         8f:13:94:c2:58:d0:59:98:50:f9:4f:54:8d:78:98:81:cb:a3:
         89:04:aa:27:b7:2a:9b:97:d5:af:91:95:64:91:1e:c9:84:3b:
         0e:49:58:96:0d:89:80:db:1a:40:7a:f8:f3:f9:0d:33:ba:c3:
         24:27:2a:b9:ee:30:d6:70:5b:bd:06:3f:a4:83:42:84:8f:8c:
         ee:c1:4b:ef:12:c8:ff:63:11:bf:16:da:0e:61:2b:7f:47:d7:
         c1:48:da:0b:03:df:7a:76:38:15:66:62:6a:7a:bc:0c:87:d6:
         3b:7b:2d:8d:e7:25:f0:a0:0e:e3:db:8b:82:a5:0c:1e:d7:5a:
         f7:4f:af:86:be:50:4a:47:eb:c8:89:67:a7:fa:47:6b:24:fe:
         18:36:1f:a7:a2:72:ab:e1:72:e2:68:8a:8e:44:2c:f4:5c:22:
         2b:9e:d4:e5:7d:ca:b1:23:7b:46:54:57:c4:b9:e5:28:40:18:
         1d:17:f1:f5:45:c8:77:26:2d:c3:6a:81:2f:aa:91:e0:6b:05:
         03:09:6b:74:3d:88:dc:b6:30:0b:d9:98:c8:c2:15:63:35:4e:
         f1:e4:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org