Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          oiyOSymhcplSew5TW40N8ilJIwiQh03rtkDtvl4kVbA=
Subject key identifier:   A7:F8:FE:D3:CF:86:56:9B:81:26:AF:A6:4E:AA:14:A6:EE:70:11:8E
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       0A88B3639D0E7BA7F3C031B4D489FE70E2B835A6
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:50 +0000
ROA not before:           Mon 09 Sep 2024 14:59:50 +0000
ROA not after:            Mon 08 Sep 2025 15:04:50 +0000
asID:                     262493
IP address blocks:        2804:fec:2000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:88:b3:63:9d:0e:7b:a7:f3:c0:31:b4:d4:89:fe:70:e2:b8:35:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:50 2024 GMT
            Not After : Sep  8 15:04:50 2025 GMT
        Subject: CN=A7F8FED3CF86569B8126AFA64EAA14A6EE70118E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:98:6a:5e:84:bd:43:5e:5d:7a:d9:ac:08:28:
                    ed:e8:dd:c9:43:fb:e4:81:9d:5e:c1:8c:a6:58:dc:
                    62:1c:d5:ec:d5:cb:92:49:06:00:e1:c2:9f:d2:05:
                    c1:d6:d7:fc:8e:3f:eb:4b:a0:cd:2e:e3:e7:6f:ae:
                    9e:79:9a:8b:4e:cb:10:c2:7a:b6:d4:bf:68:b8:fa:
                    3d:da:8b:83:0f:fd:00:b4:31:d4:b6:fa:94:05:be:
                    0d:0f:d0:b2:27:44:a4:7c:16:92:0b:54:0b:38:97:
                    82:78:2f:9b:50:b6:e2:3d:37:1f:81:c0:d4:db:a2:
                    0c:95:71:a0:ef:1d:62:18:81:01:30:e4:cb:47:33:
                    1a:bf:66:51:62:cb:7d:81:d1:63:dd:ae:b2:4f:08:
                    b2:6e:0b:1e:2c:51:e5:e4:fe:fb:46:3d:2f:9e:10:
                    2a:0a:37:49:c0:e3:b5:fb:3b:89:c8:b3:5c:58:37:
                    f0:d5:b3:5c:0b:c6:f4:d9:0a:6f:c3:be:88:6c:55:
                    f3:a0:e5:64:33:53:21:cd:39:1f:1c:13:3d:92:33:
                    8d:16:25:5d:5f:67:b6:5d:80:5f:3d:09:82:78:20:
                    13:4b:52:dd:0a:c0:68:43:c5:d5:6d:de:2a:d2:d6:
                    ae:e1:df:66:3c:e0:e3:66:c0:99:25:99:00:7e:f5:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F8:FE:D3:CF:86:56:9B:81:26:AF:A6:4E:AA:14:A6:EE:70:11:8E
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:6c:f4:a9:86:d3:ce:55:ac:89:9b:b9:19:e3:32:2a:4e:
         cd:c3:98:8f:2f:e7:d6:5d:d3:be:00:35:2f:89:ff:32:71:47:
         cf:11:14:39:26:8f:41:09:f1:49:4a:2b:29:b1:32:8c:13:67:
         55:2f:9a:af:90:00:fa:41:9d:0e:53:e8:a1:ac:33:26:9d:c3:
         bf:f8:3c:c9:71:dc:31:e3:d5:13:8e:cb:ad:f2:85:b7:ea:db:
         ad:b5:72:7a:e6:e2:cb:6d:4c:ec:2f:c7:b5:e0:46:67:66:d0:
         df:d6:8c:57:6f:eb:6b:04:b7:d0:25:91:1f:e8:66:a8:6e:3b:
         0f:78:2e:e6:12:68:ae:bc:2f:5c:ee:7e:29:52:49:e2:55:60:
         24:60:b9:46:4c:2c:d6:8e:07:7d:e1:0e:65:28:81:6b:e2:4c:
         d1:a2:cd:64:c9:64:b6:e1:55:7d:68:59:ee:10:df:2d:1d:f4:
         b8:0b:2c:d0:bd:4a:7c:8f:bb:19:ea:4a:97:e1:a8:88:20:89:
         9a:48:05:66:16:e0:2d:f4:b5:eb:6d:c8:94:f1:33:20:27:ad:
         b3:12:95:af:15:a6:f3:ab:f2:26:a0:18:6e:18:7f:82:92:14:
         c7:3d:54:d7:df:ef:ce:29:9c:05:14:09:9f:b6:dc:f6:13:90:
         70:0a:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org