Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          79VVb3ZWPD1OX5SgGbny8XpVWADeczIrYRmG+B/iepM=
Subject key identifier:   30:D5:99:71:92:65:C0:0C:BE:DC:66:4D:AE:AF:14:C0:B3:7C:C9:05
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       425D7B27BB503D6BCFFAB3EED18954CBF7A44884
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        2804:fec:71::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5d:7b:27:bb:50:3d:6b:cf:fa:b3:ee:d1:89:54:cb:f7:a4:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=30D599719265C00CBEDC664DAEAF14C0B37CC905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:e7:41:34:fb:93:3f:d1:7e:21:c6:22:83:
                    a3:ac:8d:bb:91:79:4c:9f:d2:f3:f4:ce:fc:0f:8b:
                    7b:b4:64:ad:7f:96:3b:f9:8e:b0:3a:69:3e:ff:4c:
                    ec:dd:20:bd:d4:05:9d:04:d2:e4:eb:68:eb:72:3b:
                    62:f1:a5:32:e7:4d:ef:20:0a:d9:65:52:6b:8f:7b:
                    4d:c9:12:25:44:85:28:68:a8:01:b9:34:9b:40:10:
                    a7:1a:2f:a5:8d:27:2b:00:e3:ef:0a:a9:af:44:49:
                    62:90:ee:65:dd:3a:fd:cf:2f:36:6d:e5:f9:0d:17:
                    cf:80:76:00:38:45:95:90:1f:a6:eb:2b:e6:6d:63:
                    5c:2d:a5:53:24:11:13:af:37:6c:43:ea:a5:a4:1f:
                    2d:58:a2:47:d1:80:9b:ad:ae:c0:f5:6a:f8:c4:ed:
                    c2:13:8b:19:06:f3:7d:4c:bd:58:cb:02:d9:09:ce:
                    f6:40:76:3a:f8:61:ea:2d:04:69:7b:1e:b4:29:d2:
                    1a:95:e3:a4:ac:93:08:e7:8d:2a:bc:9f:f0:75:ef:
                    68:12:29:a9:68:a5:df:59:ba:6c:e4:56:72:a2:61:
                    62:1a:b3:19:f3:8f:1b:d3:a7:04:1e:61:81:4f:72:
                    cd:b5:a6:13:54:3e:d4:47:3f:c9:b9:ea:f2:d5:12:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D5:99:71:92:65:C0:0C:BE:DC:66:4D:AE:AF:14:C0:B3:7C:C9:05
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:fd:eb:58:93:33:30:14:3e:3f:c7:a8:da:84:f3:07:6d:fc:
         d1:e3:4d:cb:9c:95:64:61:bc:63:e1:b7:53:67:54:f0:75:b4:
         36:fb:a3:ad:f5:d8:08:e5:ae:3d:13:fa:71:1f:6d:c2:6d:25:
         59:d6:f6:1c:62:d7:dc:d3:9f:8c:8d:5a:a0:cc:25:b0:f2:cb:
         15:0c:98:09:30:93:c0:9f:bd:38:55:96:98:25:60:03:1d:5e:
         67:57:82:59:40:39:a3:bb:a8:bd:d0:b4:e4:5f:d9:41:65:eb:
         3c:1f:c4:c7:0f:22:3c:a6:f4:bd:d0:e9:25:67:1d:cd:d8:d5:
         54:a3:c3:76:e8:72:d5:8b:8d:e1:91:7c:09:9c:11:88:f0:b6:
         4b:83:6c:38:f3:33:93:6b:ee:e2:a3:16:fc:cd:47:7d:33:4f:
         0c:c7:5a:76:ed:2f:4f:0a:79:43:4a:b0:0c:83:9c:ba:5b:15:
         f1:fa:f2:61:37:69:c2:a4:ed:ed:c2:be:fc:55:2a:67:c8:ee:
         69:52:f3:8f:52:a2:11:67:bf:d8:21:b8:8a:af:a2:ac:53:6b:
         37:6d:26:ed:c3:a8:26:a5:3c:bc:46:21:60:d9:9f:d1:3f:84:
         d6:60:a4:38:9c:f8:55:a4:d2:95:8e:9d:fc:a4:7c:90:dd:a4:
         ad:63:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org