Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a313030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a313030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          xjXY7+OK4RrGoZFrE8BEGKapdijVkVuIj9vhwZZsz2U=
Subject key identifier:   E0:9F:EF:CE:C0:42:FB:11:36:F6:DA:D4:7E:FB:23:E5:4D:AC:4B:0F
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       490C4ADE0876135CF289BEF846C5434CB4B2BDD0
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a313030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        2804:fec:1000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0c:4a:de:08:76:13:5c:f2:89:be:f8:46:c5:43:4c:b4:b2:bd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=E09FEFCEC042FB1136F6DAD47EFB23E54DAC4B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:7e:a7:eb:b9:a1:3b:4a:83:29:ba:57:72:
                    c1:71:e8:65:e5:7c:b4:9c:cb:b7:8d:a9:a7:c9:1d:
                    25:1a:60:07:f9:67:da:a6:a7:0f:02:4d:0a:24:18:
                    ba:a4:6f:0e:c5:65:ba:d7:a9:3b:29:7b:19:36:36:
                    34:6c:f7:da:e7:1e:ea:41:4c:6a:0f:c3:8b:6f:d2:
                    74:68:41:12:23:73:57:5d:ce:d3:13:0d:af:9d:af:
                    1c:44:9e:7a:df:7b:43:53:af:be:16:9e:f4:41:8d:
                    1b:7c:2b:6a:1c:1f:74:70:f0:13:b9:0d:e9:aa:7c:
                    92:06:00:09:9a:90:28:b0:9c:13:7c:61:5e:80:9c:
                    fa:2f:9a:1c:ee:61:f0:02:a1:b5:a3:59:6e:62:a0:
                    4b:80:66:2c:36:e5:0e:4e:54:89:84:04:79:35:3d:
                    e5:53:fe:88:7a:82:c5:71:64:0b:d2:85:20:63:0e:
                    60:40:3e:e4:53:e5:ca:bd:4a:45:15:40:fc:33:35:
                    25:b2:14:7f:43:e8:85:9b:c8:85:91:e5:4f:a8:8d:
                    52:2a:77:f0:d4:d2:0e:d7:49:c6:d6:6a:14:80:f2:
                    30:c3:69:1f:c2:0d:50:1f:70:bc:bf:ef:25:e9:14:
                    18:93:05:c9:94:fd:ab:57:00:3b:6b:cb:a9:c1:a9:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9F:EF:CE:C0:42:FB:11:36:F6:DA:D4:7E:FB:23:E5:4D:AC:4B:0F
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a313030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:16:a6:78:9c:7d:13:97:07:ce:45:ad:26:df:6a:d9:82:
         2a:48:0a:79:5d:43:06:c3:59:89:54:26:09:57:bb:ab:42:1b:
         2b:b4:d4:4a:63:19:13:8c:81:65:7c:d4:2b:93:e1:dc:29:49:
         26:d4:63:37:0c:b3:11:fc:fb:eb:c0:aa:3e:af:7f:1a:ba:a5:
         b9:6a:6f:ba:11:3d:ea:61:27:d8:ed:81:66:7d:cf:f3:a6:d8:
         89:b6:74:4f:d7:31:5d:68:c0:33:ca:a7:bf:7b:d7:ff:f6:bd:
         00:23:5e:b4:7f:cb:4f:51:57:bc:10:f5:9f:eb:4c:a5:97:6a:
         ab:ab:01:61:0c:8e:d8:28:68:67:7c:64:15:3b:7f:d6:2c:09:
         e7:20:f6:a0:0b:84:e5:23:2f:41:3f:37:8a:6e:bf:e5:42:51:
         40:31:b7:a7:99:9a:03:e9:a4:76:3d:67:49:4d:9a:c3:34:0a:
         b9:b1:d5:8d:b9:1c:1d:82:3c:aa:4c:3d:b4:6e:51:7f:ff:1e:
         36:11:95:d6:19:2c:94:fd:2b:94:e9:a0:ed:e6:8c:3c:27:8e:
         e0:7d:92:94:ff:2a:a3:ec:e2:b0:1e:9c:31:f1:bf:bd:c4:0d:
         5f:75:6a:05:6c:27:43:42:c6:fd:9a:4b:95:9b:b5:ae:29:e7:
         b5:6e:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org