Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa
File:                     323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa (raw, json)
Hash identifier:          qzGOiVZSK7UYHNJQukH6AJfZ+xtaL0jJhHpBKFRwuTM=
Subject key identifier:   32:E4:C1:DC:47:26:DA:55:2C:BD:F2:F6:86:EC:31:C6:F9:20:56:94
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       0B522288EBC2AA5FD6FF65F97D0784DC38292738
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:49 +0000
ROA not before:           Mon 09 Sep 2024 14:59:49 +0000
ROA not after:            Mon 08 Sep 2025 15:04:49 +0000
asID:                     262493
IP address blocks:        2804:fec:d500::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:52:22:88:eb:c2:aa:5f:d6:ff:65:f9:7d:07:84:dc:38:29:27:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:49 2024 GMT
            Not After : Sep  8 15:04:49 2025 GMT
        Subject: CN=32E4C1DC4726DA552CBDF2F686EC31C6F9205694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:5f:08:fc:0d:88:f2:94:e4:91:05:e8:87:
                    4a:b2:7c:2b:6d:1c:f9:e9:ad:42:69:a3:51:62:4b:
                    0e:12:70:42:86:b2:d7:9e:a7:89:7f:b4:b9:49:4e:
                    d5:d6:6e:10:07:cd:43:52:ec:ee:36:4d:bf:0f:df:
                    6f:f3:e1:c2:12:2c:91:0a:ef:e9:d1:2d:74:04:d0:
                    e2:49:41:59:ac:ed:a1:97:6e:2d:c8:55:db:78:18:
                    85:ef:5d:ca:12:9e:9f:44:80:36:88:41:9e:12:8c:
                    6b:95:60:34:52:d3:b1:ef:f9:db:c1:bd:6d:85:44:
                    d0:8d:6c:bc:81:fb:65:6a:22:d0:88:89:90:79:05:
                    44:b5:38:aa:1d:3b:af:8f:e1:e0:bb:cb:11:18:7a:
                    31:13:46:25:1b:cb:65:48:33:77:d6:78:95:9f:fd:
                    16:7c:82:19:89:44:0b:5d:e7:d3:62:5e:30:fd:bf:
                    20:5b:75:89:c4:ef:29:ff:ae:ca:bb:16:cb:47:71:
                    1e:a8:bb:8f:43:43:aa:6a:39:50:84:e3:b2:50:b0:
                    06:d8:d4:53:3f:60:1f:f9:d5:d4:61:fa:88:36:24:
                    57:13:b6:b7:13:f0:ea:76:f3:43:ca:f4:58:66:85:
                    99:0f:20:57:3a:68:43:7d:c5:34:45:46:c7:50:ff:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:C1:DC:47:26:DA:55:2C:BD:F2:F6:86:EC:31:C6:F9:20:56:94
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643530303a3a2f34302d3430203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:62:34:db:bd:8a:57:42:da:e8:46:c3:cd:03:16:04:11:b3:
         3e:d8:80:a7:94:68:1f:33:cc:c1:61:93:09:4d:af:e9:00:02:
         da:10:9f:d0:70:90:7c:1d:91:5e:c3:09:2a:b0:d6:3c:d7:05:
         cf:e2:b7:89:8d:0c:10:fd:9e:e0:af:dd:be:2c:c6:5b:4d:25:
         65:86:3c:6c:12:18:54:57:e4:40:77:b6:21:2a:91:6b:f8:91:
         38:b6:76:77:b1:07:52:71:b8:50:32:05:ca:c1:2c:96:3e:d6:
         8a:fa:ff:8a:02:f9:af:6f:00:4f:b2:37:5d:9d:21:8a:23:15:
         87:d2:a1:3d:62:39:a6:9f:3a:a7:04:e8:e6:dd:57:87:79:94:
         ad:39:28:34:3f:c1:f7:00:d3:de:6c:07:71:39:8a:d5:63:98:
         9b:39:32:8e:9f:0c:74:fb:d5:aa:ec:8c:7e:e9:be:a6:9d:cc:
         4c:24:be:ea:50:02:66:3e:72:cf:9d:1c:13:c8:04:6e:06:b5:
         a2:10:d0:fa:0f:5a:0d:07:b7:c5:2d:7b:73:ba:24:3a:be:1a:
         90:9c:95:4e:0d:07:fc:1b:07:f4:eb:23:3e:19:31:d0:b2:62:
         01:24:30:ff:53:7d:c3:d3:fb:e2:9b:e5:2c:35:48:5a:14:a3:
         64:91:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org