Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a393030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a393030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          sJ3qIrVVOjF3kybvsWciL+i2u+Fbibnk0d4lYqrTZJw=
Subject key identifier:   00:A4:A0:3D:D7:0E:48:2D:E2:26:68:CA:D9:2E:3A:59:B2:99:15:36
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       4AB0A2E02A2308617061313E4261BE12FFAD7E29
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a393030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        2804:fec:9000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:a2:e0:2a:23:08:61:70:61:31:3e:42:61:be:12:ff:ad:7e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=00A4A03DD70E482DE22668CAD92E3A59B2991536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:3f:65:c4:34:ad:b9:8c:c7:3f:ee:97:e6:
                    67:f9:7e:42:63:0d:2c:ab:9f:67:2f:31:c0:44:b7:
                    95:73:1d:e9:90:70:24:f3:eb:f6:46:07:57:83:ca:
                    2a:6b:48:a4:95:65:a9:27:5b:3a:58:76:26:f7:b6:
                    ea:06:32:9b:e0:14:4b:2e:76:2e:f7:87:4d:1c:90:
                    d0:94:b4:e1:4c:8c:d0:a4:76:a2:9b:9a:33:4c:f7:
                    64:79:7d:f7:d6:70:8f:a7:27:14:c2:5b:8d:5b:64:
                    92:91:fb:a6:d5:59:42:2c:eb:ae:fb:fa:dc:04:7a:
                    cf:ef:50:e8:b5:7e:ed:fc:56:1c:96:22:c0:d7:b4:
                    c1:49:da:a8:18:b6:a2:22:d1:79:88:a1:57:ca:28:
                    ae:c5:d3:9f:16:bd:00:dd:f7:84:49:e0:b5:5b:ea:
                    78:ba:45:32:12:aa:0a:33:f8:5d:05:d4:a8:aa:e8:
                    70:4a:dc:09:42:cd:4c:07:13:01:36:5f:e5:6e:01:
                    0b:87:9d:bf:ec:28:fc:8b:2a:06:83:eb:9a:be:31:
                    c1:a1:72:63:75:1f:1d:ec:be:b8:b8:8d:3a:48:85:
                    73:c2:02:52:8d:95:de:81:4c:d6:c3:cc:c8:6d:e0:
                    c6:fd:d8:ad:e7:15:f5:c4:0d:b9:06:22:69:eb:18:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:A0:3D:D7:0E:48:2D:E2:26:68:CA:D9:2E:3A:59:B2:99:15:36
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a393030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:db:37:a1:a7:d9:2e:46:f7:0d:05:02:66:11:a1:54:2c:
         e1:3c:05:13:1a:dc:ab:5b:fe:f1:c0:98:8a:30:38:c5:46:64:
         36:d7:01:ab:21:01:31:61:26:3a:6e:d5:8b:00:e2:8d:77:eb:
         dd:ab:d4:b0:5f:6d:67:6f:26:05:fc:3f:83:0c:84:14:49:d3:
         27:96:e4:91:3d:d3:db:7e:ed:61:0e:90:34:91:64:3f:85:77:
         b6:57:63:8a:f2:11:ed:df:22:6b:d3:1e:a1:cc:34:e3:9a:de:
         ec:d3:61:c6:d0:e7:30:63:e2:9e:16:df:f5:27:4a:af:ab:8d:
         70:f3:0b:2a:96:d0:48:f1:a8:69:08:44:a2:90:97:30:c8:79:
         9d:a7:98:dd:7d:6c:b3:97:78:8f:ee:05:46:23:ec:43:db:35:
         5b:5c:ca:05:9e:9f:dd:f2:3b:59:4a:47:ba:18:62:16:23:12:
         bb:be:f3:12:6d:94:28:8d:fb:51:f7:11:14:90:5f:7c:71:50:
         2b:42:52:c1:35:19:eb:41:b5:6a:f7:04:12:d6:59:c4:b9:22:
         33:2d:cc:bf:a0:ed:a0:32:51:72:d2:da:8d:88:07:cc:4f:17:
         86:32:6f:87:c7:13:c6:dc:01:b4:37:24:78:b8:56:b5:01:ea:
         4b:9b:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org