Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          6iTz78vJIEL/ZvN8E/vm2OZ+GXg/DJnhb+hfCfRSbw0=
Subject key identifier:   1A:0A:F3:FD:0E:B1:1A:25:85:CE:2E:8B:F7:74:19:4C:71:E5:89:AD
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       30596A97196C83E36420D4001A470FE921D3012C
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:54 +0000
ROA not before:           Mon 09 Sep 2024 14:59:54 +0000
ROA not after:            Mon 08 Sep 2025 15:04:54 +0000
asID:                     262493
IP address blocks:        2804:fec:c348::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:59:6a:97:19:6c:83:e3:64:20:d4:00:1a:47:0f:e9:21:d3:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:54 2024 GMT
            Not After : Sep  8 15:04:54 2025 GMT
        Subject: CN=1A0AF3FD0EB11A2585CE2E8BF774194C71E589AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:69:f4:7c:68:c7:98:1f:08:87:68:c7:51:
                    9c:35:46:9d:31:6f:ea:5a:3e:b9:bd:9f:00:b2:5d:
                    c6:9f:a1:e2:a7:97:ea:8a:68:b4:ad:e2:7c:07:0d:
                    e8:b3:5f:32:1c:31:a3:77:fc:67:87:c2:1e:3d:e8:
                    9a:76:e4:96:a7:56:a7:4f:c0:76:73:cc:f5:86:6f:
                    83:68:9e:ae:9f:a3:2e:c0:9e:76:98:b3:de:c8:43:
                    ea:38:ae:c0:02:64:79:cc:3d:ac:b3:fe:05:d1:96:
                    d2:00:69:ef:7e:81:97:49:b5:d1:09:cb:21:63:ac:
                    de:d8:2e:0e:e9:10:c3:25:ce:67:9a:c1:74:4f:a6:
                    68:50:64:bf:53:cf:ee:1d:09:e5:59:14:77:b9:09:
                    94:1d:80:32:60:41:24:8d:5c:d3:e1:31:73:fd:4c:
                    b3:31:a1:3f:f4:1b:12:76:c1:bc:bb:2c:3c:58:8e:
                    fb:81:58:1b:bd:d0:0d:84:a2:d2:b2:ba:22:2b:ac:
                    f7:fb:70:2c:69:40:ff:d2:f6:bb:8b:59:33:90:ea:
                    b7:95:c8:15:bf:a1:d2:d9:e8:bf:01:30:75:32:2f:
                    7a:a1:8a:bd:ad:66:76:5e:72:3f:6a:d6:a2:99:ae:
                    c2:30:13:bb:68:b8:55:2e:fb:92:a4:25:f4:96:d6:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0A:F3:FD:0E:B1:1A:25:85:CE:2E:8B:F7:74:19:4C:71:E5:89:AD
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c348::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:4d:58:5b:e3:ef:49:ca:b6:51:43:22:29:1d:58:2d:44:3b:
         69:61:e7:07:3e:d6:24:a6:bf:8b:24:76:71:64:4d:25:12:0e:
         ac:0a:89:2d:06:09:05:50:38:ab:4e:06:c5:da:a3:02:18:20:
         c9:94:17:6a:bf:26:6f:52:19:a3:21:35:99:1f:42:86:d5:01:
         c8:aa:7d:82:ed:e5:e5:05:07:58:42:a4:e8:f2:70:35:3f:51:
         d5:a3:05:00:5b:c4:de:cb:7c:4b:7a:db:0b:18:b1:98:b5:4e:
         81:1b:37:3f:13:44:69:bb:3b:6f:4c:80:cc:ea:be:d6:44:e1:
         7a:f3:72:a3:38:af:1e:72:a8:e5:9e:1d:96:20:4b:b8:97:e2:
         37:5b:f2:ac:78:d8:91:f5:96:44:60:9e:a1:2f:f8:a0:6b:05:
         f8:c4:1a:6e:70:e1:49:90:12:9f:50:e4:4c:a2:72:1c:e3:5d:
         99:81:db:0d:c2:5a:41:a8:3a:b8:6b:83:49:ba:30:69:76:cb:
         25:9b:f5:df:99:8e:30:0e:c6:12:2e:71:1a:bb:6d:2e:f5:85:
         2b:79:c5:dd:07:28:32:c0:00:bf:4c:96:83:d7:3e:13:cc:fd:
         8d:58:68:ad:a9:48:24:75:82:25:98:81:eb:4e:ec:5c:7a:88:
         64:5d:cb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org