Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          gvovMIhu4RxdlJ5+qlgOhAMvUZLfNPgvX4MnLgnFkdw=
Subject key identifier:   A3:B7:42:4E:6E:B1:F9:33:20:52:0E:85:8D:20:3B:E5:95:EC:A3:F8
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       60133F3ADBD048D563D968A070C0574B7BB64962
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:21 +0000
ROA not before:           Wed 03 Apr 2024 18:26:21 +0000
ROA not after:            Wed 02 Apr 2025 18:31:21 +0000
asID:                     264247
IP address blocks:        2804:24e4:4000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:13:3f:3a:db:d0:48:d5:63:d9:68:a0:70:c0:57:4b:7b:b6:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:21 2024 GMT
            Not After : Apr  2 18:31:21 2025 GMT
        Subject: CN=A3B7424E6EB1F93320520E858D203BE595ECA3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:25:fc:8b:73:1a:49:6e:8d:9d:b7:a9:78:
                    0f:fe:29:73:ab:e2:0f:16:5d:40:77:41:d2:f7:75:
                    5c:0f:40:6c:62:7c:2f:04:4d:c7:48:ca:24:ec:45:
                    d7:0c:10:9f:48:d6:97:a2:b4:7c:d1:2c:bd:f2:3d:
                    86:2c:11:73:88:a1:00:ea:8e:22:59:47:80:9e:03:
                    f3:b4:bb:d8:21:b4:53:47:be:88:35:93:0a:47:98:
                    49:51:44:34:a1:df:cc:14:3d:62:df:80:9c:2a:8e:
                    17:41:29:10:3a:a8:fb:e6:47:5f:59:b9:71:eb:1a:
                    7a:73:b2:5b:fe:fd:d8:40:f2:c0:9a:9b:5d:9f:20:
                    a2:45:a1:ad:a6:c7:94:83:62:30:88:2c:f7:58:f7:
                    42:84:45:2a:ba:bf:8d:01:bc:45:16:e1:56:05:23:
                    3a:54:c9:3b:85:bf:37:59:c4:4d:ac:c6:32:bc:0a:
                    7f:01:0b:51:db:11:8a:f2:e4:e8:30:28:26:3f:9d:
                    e5:b1:5d:84:4a:fa:b2:27:14:db:ae:23:4e:c3:72:
                    c7:f3:19:d9:31:d0:45:1f:ee:10:25:a9:ff:b1:49:
                    80:82:70:09:f8:4b:fa:4d:17:5b:36:b0:f9:f9:20:
                    98:aa:aa:92:74:cc:01:51:18:85:68:1f:a3:6c:10:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B7:42:4E:6E:B1:F9:33:20:52:0E:85:8D:20:3B:E5:95:EC:A3:F8
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:ba:fd:79:d8:1d:c8:6c:da:39:58:36:ca:99:38:2a:00:76:
         8f:4b:5e:1e:8a:02:d2:97:c5:54:1a:ff:85:43:ae:f2:4f:b5:
         b7:0e:54:8c:1e:2d:b0:04:5f:ed:89:4f:23:01:ab:cd:c2:8e:
         eb:b6:17:97:cc:bf:38:71:df:e4:e1:41:fb:eb:2f:91:95:c8:
         88:43:f8:98:0e:4e:2e:2b:58:6d:57:55:a0:22:8e:d4:30:5e:
         58:6e:b2:29:79:f0:d5:df:47:0b:f3:7e:57:e7:7f:30:66:82:
         b2:be:91:e3:b3:71:6d:d8:c1:54:55:a1:f3:a4:37:b0:d2:1a:
         1f:90:63:df:61:02:d1:8f:e6:e5:99:16:7a:db:51:86:f2:bb:
         15:d9:42:e8:42:08:9a:09:36:6e:fc:e0:b3:c8:99:e1:5c:95:
         07:71:b4:41:a6:04:d1:03:34:21:71:39:5c:35:17:89:eb:6d:
         3c:fd:76:04:67:f4:1f:4e:e4:22:25:26:53:82:af:91:45:31:
         e3:11:75:a3:ff:a9:35:6e:54:8c:04:70:d3:50:e9:ac:05:3f:
         54:a5:83:e6:33:d0:1e:fb:c8:52:75:cb:7e:16:40:3a:d6:59:
         f2:a4:eb:25:59:19:02:6a:fe:41:0b:e0:04:ba:b9:19:7c:df:
         98:82:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 22:32:51 2024 by rpki-client on console-fra.rpki-client.org