Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          N/v/UrcCHxTTADkpnUH6ItLwVQKcPbIoVzcCYYErkFE=
Subject key identifier:   75:2C:9A:55:8B:9C:D7:BC:E5:72:88:18:91:A4:76:A6:C1:DF:26:95
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       0D9F0060FC407706B383A57E68CFE61BDFB4E2BB
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:49 +0000
ROA not before:           Mon 09 Sep 2024 14:59:49 +0000
ROA not after:            Mon 08 Sep 2025 15:04:49 +0000
asID:                     262493
IP address blocks:        2804:fec:c248::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:00:60:fc:40:77:06:b3:83:a5:7e:68:cf:e6:1b:df:b4:e2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:49 2024 GMT
            Not After : Sep  8 15:04:49 2025 GMT
        Subject: CN=752C9A558B9CD7BCE572881891A476A6C1DF2695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:7f:ce:32:4d:d9:14:3e:e3:d1:ea:65:94:
                    99:c4:4a:8d:f1:4b:26:66:e5:57:b1:15:67:c1:2f:
                    06:35:fd:0d:4f:23:32:f6:8a:e3:01:09:18:7d:1d:
                    65:30:0a:00:d6:65:4c:11:77:59:55:c2:2e:70:4f:
                    7d:3f:84:fb:ea:9c:7b:85:ee:b2:25:58:2e:0b:e5:
                    f1:e2:1d:6e:1c:5a:f3:f9:79:cd:fc:6a:a9:be:30:
                    ac:d5:d5:d4:5a:f7:c9:76:4d:c3:d4:0e:9f:b0:f1:
                    ff:8d:41:ff:f8:75:85:ac:5b:ba:a4:c4:37:61:3e:
                    0b:c2:f1:6d:c7:4e:ef:d1:c4:ea:77:f3:68:a4:ac:
                    74:c0:95:39:f2:f1:96:85:af:9e:75:13:46:d4:14:
                    2b:2e:1a:7e:e5:a5:4b:9e:ef:ae:66:bf:31:bc:9d:
                    8c:2f:02:46:29:91:ae:f7:cc:b0:58:ff:d8:cc:80:
                    9b:c3:92:84:f6:2a:84:01:6b:4d:8f:ee:d8:c0:26:
                    80:3f:5b:aa:94:56:8a:b5:a0:4f:21:b9:97:fa:ab:
                    b6:8d:09:3e:d3:33:53:2f:51:27:97:03:05:c7:9d:
                    a5:18:cd:26:cd:58:6d:72:d7:3c:78:2d:08:83:e7:
                    c2:d1:69:58:52:1a:23:f4:17:20:d2:1b:20:fc:48:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2C:9A:55:8B:9C:D7:BC:E5:72:88:18:91:A4:76:A6:C1:DF:26:95
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633234383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c248::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:0d:bd:26:d2:59:26:11:d7:50:0c:36:9d:25:c2:8b:ac:
         48:9f:cb:da:24:29:3b:bc:4b:be:3e:32:90:0e:8e:9f:db:61:
         fb:28:4c:77:85:52:0c:2f:d0:b8:99:89:50:8e:69:e0:89:68:
         68:05:d3:3c:c0:25:7d:54:0f:93:09:44:f8:55:c1:ba:79:37:
         3d:10:8d:1d:fb:d4:57:ef:59:18:1f:f9:03:dd:28:24:e7:2e:
         5f:8b:43:0e:5a:a1:cc:0d:9f:32:d9:8e:79:19:6f:7e:b0:a6:
         23:d7:3b:a4:0d:11:52:fd:d0:12:70:e4:b5:d7:3f:98:09:ab:
         b1:00:45:5c:1a:bc:d9:5d:f8:3b:c1:8d:13:a7:64:4e:6c:59:
         cf:28:ea:b8:76:fd:01:7a:06:8a:1d:42:98:9d:c5:97:fc:82:
         01:a1:25:96:12:a9:f5:b7:df:56:27:70:22:c5:7a:c5:bb:72:
         2b:b4:b4:f4:7a:3c:da:f0:96:ab:1e:47:5c:fc:3e:a6:10:2a:
         12:93:0b:cc:cd:c5:4d:44:6b:0d:64:e0:94:c4:06:75:e7:af:
         6b:52:c0:da:0c:4e:24:7d:2e:60:af:4b:43:76:5a:88:93:45:
         8d:5e:ab:92:16:19:dd:98:b4:ad:4d:8a:b4:56:a1:41:c1:a9:
         b4:b6:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org