Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa
File:                     3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa (raw, json)
Hash identifier:          Ev2Z4fFRtONAH9c1LL/yh3sBOvKT1qFesnmnc+du4j0=
Subject key identifier:   32:03:B2:A6:60:B6:2C:88:0E:87:3D:1D:5C:AA:92:67:D3:84:F9:89
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       18C81B921DA91075D900DAAD6149B5E204682CCC
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:20 +0000
ROA not before:           Wed 03 Apr 2024 18:26:20 +0000
ROA not after:            Wed 02 Apr 2025 18:31:20 +0000
asID:                     264247
IP address blocks:        138.118.32.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:1b:92:1d:a9:10:75:d9:00:da:ad:61:49:b5:e2:04:68:2c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:20 2024 GMT
            Not After : Apr  2 18:31:20 2025 GMT
        Subject: CN=3203B2A660B62C880E873D1D5CAA9267D384F989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:e8:9e:ab:a8:5d:6d:c6:13:e5:84:9c:1d:
                    2b:49:6d:06:d9:73:a8:db:a3:85:b7:b3:00:dd:18:
                    ba:0f:6f:49:44:66:b0:40:86:04:8a:a3:66:7f:10:
                    fe:c2:72:1c:9e:9c:2d:4e:c3:48:9c:30:cf:2c:9d:
                    ad:c7:94:d4:b1:03:d2:da:10:06:dd:25:a9:a6:3b:
                    09:10:2f:fb:f8:de:79:3c:8c:af:5a:6b:e7:b7:2a:
                    99:55:c1:1a:f4:ff:66:55:9d:aa:12:8b:67:69:13:
                    c7:18:83:1c:6d:9d:52:33:86:77:10:0b:ae:a3:05:
                    88:c9:df:11:de:1e:2c:a3:26:1b:39:62:86:b1:8e:
                    52:cf:3a:5d:62:22:45:b9:aa:59:b9:47:23:ba:31:
                    64:fa:7f:e6:84:67:64:07:c9:6d:9a:3f:24:67:ce:
                    ee:95:d7:5d:cb:55:70:5d:b7:13:3b:67:e9:b5:e1:
                    f0:fd:b7:2b:32:ac:5e:0d:16:bc:14:85:e8:2e:1a:
                    3b:28:c0:21:ed:7e:86:38:e7:4c:21:a0:e7:a7:b3:
                    21:72:e0:1f:96:0e:2b:2e:d3:35:05:7d:06:09:a9:
                    03:2b:84:e4:01:25:b3:d4:af:33:1a:72:ea:97:0f:
                    ae:37:dd:4b:b6:dd:ec:9c:bf:2c:ab:fc:01:ff:36:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:B2:A6:60:B6:2C:88:0E:87:3D:1D:5C:AA:92:67:D3:84:F9:89
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:87:dc:59:6e:61:00:8a:a4:1b:f2:c0:80:94:c5:4f:96:ca:
         cc:05:be:a3:b1:02:3c:8a:d0:11:ff:d9:c7:3d:a5:ac:b1:83:
         9c:29:24:de:45:b6:b1:33:6b:d8:13:4a:d2:be:80:c0:b0:24:
         60:d0:67:30:80:f2:36:de:f5:97:c2:f6:e2:55:39:27:0b:df:
         da:50:01:fa:5d:db:af:58:f7:48:0f:7c:8e:5a:0d:a4:3e:c1:
         84:b5:e1:51:ac:34:81:b1:ee:87:8b:02:98:c1:e8:e7:cc:e0:
         47:59:3d:16:2a:ca:bf:bf:3a:68:6e:f6:5d:02:01:ab:5a:fa:
         99:0e:db:f3:0b:ef:ee:a4:b9:93:a1:31:0e:38:6f:81:33:66:
         66:7d:e3:58:28:64:f5:a6:15:e0:87:ce:ae:e4:66:b5:9b:7c:
         4a:8c:34:56:92:b1:25:e4:65:ed:1c:e2:24:b3:7d:57:85:58:
         bc:84:3e:e9:da:06:2b:51:ee:12:7b:a0:d7:0c:43:fb:d7:cc:
         93:ff:1a:24:ec:0b:b7:26:1f:ce:6e:aa:2e:28:b3:51:a4:35:
         ad:db:30:14:68:eb:9f:15:3e:33:ee:87:ec:db:f0:d4:d7:f0:
         0a:3f:a9:c7:1f:5f:af:90:34:04:c2:0c:09:7e:ed:b2:ea:91:
         08:63:3c:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGMgbkh2pEHXZANqtYUm14gRoLMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNDA0MDMxODI2MjBaFw0yNTA0MDIxODMxMjBaMDMxMTAvBgNV
BAMTKDMyMDNCMkE2NjBCNjJDODgwRTg3M0QxRDVDQUE5MjY3RDM4NEY5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbNOieq6hdbcYT5YScHStJbQbZ
c6jbo4W3swDdGLoPb0lEZrBAhgSKo2Z/EP7CchyenC1Ow0icMM8sna3HlNSxA9La
EAbdJammOwkQL/v43nk8jK9aa+e3KplVwRr0/2ZVnaoSi2dpE8cYgxxtnVIzhncQ
C66jBYjJ3xHeHiyjJhs5YoaxjlLPOl1iIkW5qlm5RyO6MWT6f+aEZ2QHyW2aPyRn
zu6V113LVXBdtxM7Z+m14fD9tysyrF4NFrwUheguGjsowCHtfoY450whoOensyFy
4B+WDisu0zUFfQYJqQMrhOQBJbPUrzMacuqXD6433Uu23eycvyyr/AH/NtVfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMgOypmC2LIgOhz0dXKqSZ9OE+YkwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzEzMzM4MmUzMTMxMzgyZTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdiAwDQYJKoZIhvcNAQELBQADggEBABqH3Flu
YQCKpBvywICUxU+WyswFvqOxAjyK0BH/2cc9payxg5wpJN5FtrEza9gTStK+gMCw
JGDQZzCA8jbe9ZfC9uJVOScL39pQAfpd269Y90gPfI5aDaQ+wYS14VGsNIGx7oeL
ApjB6OfM4EdZPRYqyr+/Omhu9l0CAata+pkO2/ML7+6kuZOhMQ44b4EzZmZ941go
ZPWmFeCHzq7kZrWbfEqMNFaSsSXkZe0c4iSzfVeFWLyEPunaBitR7hJ7oNcMQ/vX
zJP/GiTsC7cmH85uqi4os1GkNa3bMBRo658VPjPuh+zb8NTX8Ao/qccfX6+QNATC
DAl+7bLqkQhjPCg=
-----END CERTIFICATE-----
Generated at Mon Sep 23 23:44:29 2024 by rpki-client on console-ams.rpki-client.org