Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          gm2CpVoStzftbx+Rdfe4eU49qrfByQdS0lEMR4snLjQ=
Subject key identifier:   CD:7A:4E:3C:10:07:3B:F1:8A:23:16:34:95:B4:A9:26:2A:EC:A6:4A
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       632073C2C544EDF3FDE8335C432543C9059AF773
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:49 +0000
ROA not before:           Mon 09 Sep 2024 14:59:49 +0000
ROA not after:            Mon 08 Sep 2025 15:04:49 +0000
asID:                     262493
IP address blocks:        2804:fec:e000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:20:73:c2:c5:44:ed:f3:fd:e8:33:5c:43:25:43:c9:05:9a:f7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:49 2024 GMT
            Not After : Sep  8 15:04:49 2025 GMT
        Subject: CN=CD7A4E3C10073BF18A23163495B4A9262AECA64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:99:2b:48:29:dd:09:cb:f3:84:24:72:f7:
                    7b:c8:7d:1f:cf:7e:21:ee:d5:e4:f1:30:97:51:e1:
                    f4:2b:4d:0b:ee:1c:74:65:ed:23:73:4f:37:87:a7:
                    bb:7f:fe:23:33:e9:90:e4:c3:8b:b0:5b:f5:de:42:
                    0f:1e:b4:9b:f7:bd:c5:dd:41:98:06:a5:93:77:d2:
                    15:bd:c4:ec:21:87:ea:0a:8f:8b:35:53:83:45:08:
                    2c:a5:99:28:26:b4:9d:ed:6e:10:c3:2a:4a:60:01:
                    f2:58:40:68:68:1c:31:57:d3:67:99:f0:d4:cd:74:
                    05:76:36:4b:8c:ee:4a:24:76:2c:31:32:87:0f:3f:
                    cc:42:77:dc:8b:ff:55:39:39:4f:ea:b9:ce:63:e7:
                    b8:52:ff:69:97:ce:39:62:83:fc:ed:9e:e5:30:eb:
                    20:7b:e1:13:f3:6a:78:05:19:66:5c:d3:48:ce:21:
                    08:d5:b2:00:03:0a:7b:8b:17:59:7c:a1:e3:f2:23:
                    f4:6b:14:08:ff:45:ab:9d:ff:d2:1e:b0:1a:9c:a8:
                    95:3e:30:41:ca:38:65:5f:de:01:ff:27:0d:60:aa:
                    19:69:60:45:2e:45:b6:2e:5f:16:cd:21:53:79:f0:
                    b0:91:60:ce:60:b2:b3:e1:90:4a:ef:a3:1c:86:89:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:4E:3C:10:07:3B:F1:8A:23:16:34:95:B4:A9:26:2A:EC:A6:4A
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:4b:42:31:bc:f1:dd:c4:2b:fc:fc:42:60:35:ea:84:87:
         44:60:85:ef:ef:9a:ab:2f:73:b6:42:36:bd:15:ce:73:97:be:
         f9:f5:49:81:4f:e4:a9:41:15:d3:51:19:85:d2:3b:54:20:8f:
         e2:56:e3:6d:98:cc:f2:2d:cf:ef:4c:ec:2c:15:f5:31:2b:77:
         6e:1a:8c:0b:ec:f9:c0:52:17:7f:3f:71:28:af:2e:d8:ec:66:
         f2:30:80:84:28:a8:34:e8:5a:03:a6:c4:de:fd:0c:7d:05:b7:
         84:51:91:66:f7:25:78:2e:cc:9e:2c:e6:29:4c:d6:b8:b2:ed:
         ce:03:39:2a:2b:0c:c8:8f:c4:36:e2:e0:d8:dc:74:9a:e0:78:
         df:10:de:a2:12:b4:dd:f5:13:47:8d:d0:b2:fc:a0:ce:65:f9:
         6e:eb:3b:f4:3e:48:f3:25:26:01:23:16:06:ff:3e:a3:8a:92:
         3c:85:10:f4:0b:d1:a5:81:f0:83:40:12:5b:6d:90:7c:bb:8b:
         bc:c1:12:f6:73:82:d6:4d:92:80:d1:57:67:09:b0:9c:c5:5d:
         e7:f3:0b:f3:28:ec:1a:db:b1:e5:13:5b:60:c2:5d:a9:0d:87:
         45:d5:d9:2f:44:34:87:03:7a:c5:64:c0:2a:06:92:f7:ab:af:
         ef:37:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org