Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          RLvaMIhiJB0KsPu1hx2n4Abnna2ZvBlHkViW0RZmbEw=
Subject key identifier:   75:B5:B2:1F:0B:A9:12:72:67:12:AC:A5:9D:2C:EA:BF:17:76:61:12
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       3B4D12C367C3C68892095F9B861F4B3093BE5CC5
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        2804:fec:4000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4d:12:c3:67:c3:c6:88:92:09:5f:9b:86:1f:4b:30:93:be:5c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=75B5B21F0BA912726712ACA59D2CEABF17766112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:fd:37:6f:71:93:f1:f1:09:50:75:64:23:
                    68:df:9f:84:10:43:65:ac:49:2e:9d:29:06:5a:1d:
                    12:53:f4:de:b2:6b:61:13:ad:ab:9a:41:5e:2a:ae:
                    ff:d9:18:6c:85:0a:d5:ac:3a:96:a6:66:38:09:49:
                    04:87:7f:7a:be:68:6f:00:38:b8:d8:17:ff:bc:db:
                    e5:5a:4c:42:3f:cc:43:a7:bd:6e:1a:5d:ea:a4:14:
                    a8:9c:50:b6:f7:d1:3e:cc:55:32:02:52:79:99:80:
                    c2:8e:61:4f:af:5a:9d:fa:ff:14:fd:84:b0:a3:db:
                    8a:30:e7:05:90:be:75:62:13:38:a7:d1:4a:36:16:
                    6b:62:ca:ec:53:aa:d7:b7:20:d8:79:df:cc:ab:ae:
                    22:0e:53:4c:cc:5b:5d:e5:fc:30:41:2d:c6:f2:f8:
                    64:47:57:96:22:aa:fe:e3:b1:e3:cc:00:15:90:b4:
                    ec:04:df:55:36:bd:24:f6:5b:15:49:d7:5a:fa:5e:
                    d5:48:6e:52:88:9a:08:d4:94:2e:60:63:35:16:1f:
                    08:0b:91:dc:8a:41:57:c9:72:60:ed:65:86:0f:56:
                    af:71:3c:77:b1:80:16:a2:3a:c6:71:ca:24:86:fd:
                    96:bc:56:a7:3b:5f:d9:15:73:d1:8e:78:bb:89:43:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:B2:1F:0B:A9:12:72:67:12:AC:A5:9D:2C:EA:BF:17:76:61:12
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:a1:1f:1d:0a:b0:4d:78:ea:ee:b5:be:3b:51:26:6b:9a:
         dc:0b:b0:87:97:be:14:71:7f:60:d2:c8:8e:62:e0:98:aa:58:
         ab:21:00:de:d2:4e:e6:a7:1f:ad:f2:bf:17:6b:02:8b:56:ea:
         4c:46:fb:bb:53:f2:24:12:59:36:cb:b4:19:90:5d:f1:a4:ad:
         d2:10:85:5b:ff:f7:25:35:36:68:c0:8b:d7:52:f5:c1:f3:f1:
         15:6e:b2:da:a9:7a:c2:90:72:3d:2e:b8:66:d6:5b:7b:32:45:
         2a:47:80:df:eb:8e:08:26:ec:c4:3e:a8:ba:09:96:ea:9b:99:
         2c:06:8a:4a:4d:65:ee:4f:e9:9a:38:3d:0d:8b:59:58:dc:9c:
         8d:e6:3a:e5:07:f3:70:7c:4b:b1:f4:6f:f9:bc:53:fa:b0:1a:
         2d:24:14:a2:a3:79:4c:65:9c:33:a4:12:7d:0a:14:b7:65:73:
         4a:50:6c:86:54:9e:9c:39:15:13:e8:17:26:41:5c:29:8d:f9:
         94:dd:33:35:e2:a1:3b:82:4c:28:36:e5:eb:5b:52:b9:45:fb:
         00:7e:29:33:05:9e:6c:46:06:5c:03:22:95:88:85:4a:14:37:
         ef:6a:37:f1:97:77:ad:97:6f:7d:84:c5:4b:12:72:51:91:8c:
         63:f0:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org