Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          UmvH2pt2GmpMNksC12LRITPL/CoUffcnZ86odwNqKy4=
Subject key identifier:   D1:36:84:36:DD:53:99:F3:76:EC:05:3F:A6:FB:57:82:F9:0F:61:63
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       15E9A8103BC5A8E9C37012CE6B8E38C287C38A03
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:51 +0000
ROA not before:           Mon 09 Sep 2024 14:59:51 +0000
ROA not after:            Mon 08 Sep 2025 15:04:51 +0000
asID:                     262493
IP address blocks:        2804:fec::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e9:a8:10:3b:c5:a8:e9:c3:70:12:ce:6b:8e:38:c2:87:c3:8a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:51 2024 GMT
            Not After : Sep  8 15:04:51 2025 GMT
        Subject: CN=D1368436DD5399F376EC053FA6FB5782F90F6163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:7d:39:d1:7b:07:de:59:6f:35:98:2a:3e:
                    d2:aa:72:0e:ec:3e:16:d5:ed:14:cf:cc:b5:7a:f0:
                    b3:94:c3:22:69:93:1e:9c:f1:b1:52:ca:90:0b:37:
                    03:75:24:26:ad:02:0d:0f:20:58:f8:f6:cf:5e:da:
                    83:b6:62:9e:57:32:f6:a4:e9:d6:1e:df:30:73:01:
                    fb:17:25:23:b2:aa:e5:93:af:59:be:56:54:a4:08:
                    26:66:8f:87:5b:6b:70:1e:2d:97:b5:55:55:e3:80:
                    09:44:de:9b:e8:70:d5:42:f4:3a:81:c2:3b:37:2c:
                    18:db:bc:75:78:c0:38:e2:6f:09:db:cb:6a:04:a9:
                    95:70:70:23:7b:5d:6a:78:72:29:99:00:70:04:a4:
                    df:6b:3c:76:89:63:8a:05:81:08:e3:ad:f6:ad:a6:
                    0c:65:af:e2:91:80:c8:20:be:e0:04:17:4d:b4:c6:
                    35:9f:b7:28:3d:f0:5d:e9:4f:74:0b:11:3c:62:25:
                    ea:13:84:59:5e:06:d7:2a:87:59:0c:46:f7:d1:0b:
                    c6:38:a3:20:39:ed:5f:ab:8b:8d:1d:08:94:28:46:
                    9e:17:f9:f7:2e:bb:a3:a7:2d:cc:a8:7e:39:68:c9:
                    9e:d9:1f:fd:fa:ef:f1:bc:8e:00:75:fb:9c:92:38:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:84:36:DD:53:99:F3:76:EC:05:3F:A6:FB:57:82:F9:0F:61:63
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:90:ec:b4:51:22:56:27:4c:b5:09:7b:21:4f:fb:20:9d:
         93:48:59:30:e2:03:20:15:b5:52:ce:30:10:ed:fb:6b:69:07:
         a1:68:59:b2:3c:b7:57:ae:59:5d:85:c4:1a:cf:b1:1a:98:8d:
         fa:29:f4:29:27:f1:d2:88:4b:3f:84:c4:d2:1f:e4:af:94:9a:
         69:39:e4:b9:74:5e:c4:c6:15:ca:05:a1:7e:4a:77:97:af:cc:
         e2:04:e3:79:b5:b8:50:15:d9:21:e6:b0:85:a4:db:40:89:a6:
         1f:58:41:d7:a2:73:d0:1f:3e:5f:ce:b7:36:cb:87:1f:26:9a:
         24:9e:5a:94:24:2f:1f:41:d3:31:b2:27:f3:e0:f0:93:2e:71:
         68:6c:87:0d:35:0c:6b:64:ca:fe:fe:41:4b:41:15:5e:de:d7:
         bb:65:f7:71:80:15:80:77:ad:45:e1:23:3e:ac:5c:c8:05:ca:
         b6:a6:72:f8:17:79:15:f5:d4:19:5b:b5:25:0d:f2:34:f8:5a:
         61:fe:ce:d9:69:e9:ed:f3:7a:64:f5:77:5e:84:70:ca:56:a2:
         f9:07:65:91:1f:f6:37:c2:78:30:cd:22:3d:46:15:7e:b5:08:
         ed:6f:15:a4:cf:7b:1b:96:c8:19:2b:2a:a4:51:ae:92:a5:45:
         1d:15:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org