Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133342e302f32332d3233203d3e20323632343933.roa
File:                     3137302e38322e3133342e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          RgZNMa2XGpxO8KqoQhz/NXNgD1TolSwwQDiEi1BEFbc=
Subject key identifier:   9D:E0:59:3D:3C:CB:6E:D3:03:95:1A:9D:18:DC:C1:89:9A:70:27:C9
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       7A8BE6EF25B8C010505D1D4F562E1A0AF30599A2
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133342e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:50 +0000
ROA not before:           Mon 09 Sep 2024 14:59:50 +0000
ROA not after:            Mon 08 Sep 2025 15:04:50 +0000
asID:                     262493
IP address blocks:        170.82.134.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8b:e6:ef:25:b8:c0:10:50:5d:1d:4f:56:2e:1a:0a:f3:05:99:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:50 2024 GMT
            Not After : Sep  8 15:04:50 2025 GMT
        Subject: CN=9DE0593D3CCB6ED303951A9D18DCC1899A7027C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:73:0f:e7:9d:0a:1d:3c:29:3b:ba:21:2f:
                    3d:7c:8d:a3:eb:bf:8a:5b:e2:cf:ea:7b:dd:7a:0f:
                    77:ce:10:19:bf:da:c0:38:4f:55:10:b1:1b:00:00:
                    c2:fc:49:1d:2b:71:fe:71:76:81:4b:c8:99:94:af:
                    fb:77:27:63:7a:90:7e:0f:98:f9:99:1e:d1:ea:d3:
                    69:bb:2c:d2:58:f7:9a:0e:97:5d:04:12:98:5c:23:
                    2d:e1:a3:50:88:1f:4f:d3:da:5f:9b:c4:7f:2c:a4:
                    c7:53:0f:24:7d:e6:7a:28:60:e0:45:ad:1a:96:1a:
                    c3:63:a6:1c:db:9f:0a:d5:88:54:23:8c:c5:9f:5a:
                    44:c3:04:6b:48:29:cb:4a:93:3d:88:d1:11:f5:99:
                    26:af:67:1f:9c:fc:4c:84:9a:93:7b:8f:a6:d3:2d:
                    38:04:bb:26:99:e0:14:7e:62:00:66:9f:22:8a:7b:
                    6f:3d:fa:71:9b:45:c6:16:7f:05:85:83:10:c3:0d:
                    c9:41:7f:00:bd:92:29:63:b7:59:f8:11:cd:e3:48:
                    ee:67:6d:17:a1:c7:0e:70:a9:da:31:fb:32:4a:d1:
                    c1:d1:68:33:cd:30:6e:2c:17:36:3e:8e:14:22:ce:
                    2f:6e:c8:d3:3d:f4:5f:a7:e2:0e:c0:8b:cf:3f:4a:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E0:59:3D:3C:CB:6E:D3:03:95:1A:9D:18:DC:C1:89:9A:70:27:C9
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133342e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:cf:58:1f:f8:6e:e8:0e:f2:00:03:45:60:88:d5:fd:67:
         89:16:59:e6:23:cf:f7:92:00:ea:b1:ba:41:24:b2:d0:92:2e:
         a7:0d:a8:b3:f2:00:4a:1f:91:70:cf:52:e7:f8:ec:93:90:60:
         68:ca:64:55:0a:d9:c6:e1:e3:e9:6d:0c:8e:59:14:72:a9:f8:
         ed:bc:33:bc:bc:ca:8d:f5:1d:ac:fc:6d:fb:f7:9c:f3:5e:e1:
         1b:4b:14:bc:61:5e:19:64:8d:8b:f5:fb:82:bc:4c:37:42:26:
         c2:30:e8:c6:d0:e1:ce:a4:50:c8:e4:22:fe:3a:d9:4d:cb:9d:
         77:d8:67:22:67:7e:bb:47:a2:d3:3f:ac:c4:37:62:94:30:f1:
         67:b5:18:50:f0:cd:55:72:10:4f:42:7f:47:90:31:48:91:a6:
         5c:42:b3:10:47:76:ab:2e:d7:da:22:a3:4e:46:6b:fe:96:6f:
         46:fa:ce:47:71:0c:46:e2:65:62:ea:d2:15:b0:5e:76:7a:5f:
         31:23:5b:08:0f:ba:98:72:92:c9:47:a9:3d:27:a6:c3:a9:d8:
         1b:45:c3:d2:c9:fa:71:33:21:1a:52:a5:75:7d:6d:07:a5:b7:
         15:c1:c9:e8:49:b4:87:a1:23:41:d0:71:b2:ad:15:40:b3:49:
         7c:0d:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org