Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          4b9iUXYGQmdW4AIlRrRjNHVBBtmNhvQHyN7n3oFZx4Y=
Subject key identifier:   60:97:D4:6A:EA:D7:73:97:31:3A:52:A4:1E:13:01:85:D6:32:E7:F0
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       666CDA0D9D4E0DC42DA80263DE59E33C0551889A
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:24 +0000
ROA not before:           Wed 03 Apr 2024 18:26:24 +0000
ROA not after:            Wed 02 Apr 2025 18:31:24 +0000
asID:                     264247
IP address blocks:        2804:24e4:8000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6c:da:0d:9d:4e:0d:c4:2d:a8:02:63:de:59:e3:3c:05:51:88:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:24 2024 GMT
            Not After : Apr  2 18:31:24 2025 GMT
        Subject: CN=6097D46AEAD77397313A52A41E130185D632E7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:5f:19:7a:50:55:34:f9:a8:4c:4b:12:11:
                    5f:63:e2:a5:65:59:26:11:fb:02:6c:ad:3a:d9:8b:
                    65:37:ec:73:38:8b:e1:83:55:f3:b0:ec:99:65:00:
                    0f:97:f0:44:da:ba:22:f6:94:7b:be:c7:19:ec:48:
                    43:b5:d2:3c:e3:4a:ad:68:a1:44:2a:06:92:e9:55:
                    7b:6e:77:fc:c8:64:3f:3f:29:5a:d9:6e:30:71:59:
                    01:87:c4:f4:30:ae:7b:c6:fb:62:8a:87:a3:9a:fc:
                    df:55:0b:02:83:96:14:7a:6f:b6:e7:84:c6:0a:28:
                    6b:e2:25:d3:ce:0f:6f:28:3a:d9:02:5f:3a:c6:9b:
                    89:78:f0:0b:37:32:dc:45:71:32:34:db:52:a5:c1:
                    11:78:3e:d2:63:1d:53:2f:d4:20:f6:36:f5:c3:fc:
                    b6:c7:d3:6d:c1:13:70:ed:ee:bd:d2:34:d7:1a:d0:
                    70:92:b3:63:f7:0b:cf:f0:9f:48:ef:50:9e:7c:da:
                    3f:f1:5a:a3:38:f6:63:f8:c0:51:62:da:00:82:63:
                    72:d1:0a:51:4f:d0:82:f7:ba:62:d9:6f:1c:cf:81:
                    1a:8b:61:1b:44:8d:8c:5d:e9:b5:ff:cf:20:31:da:
                    86:ef:7e:01:9f:24:60:8f:53:6b:cc:46:b6:51:67:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:97:D4:6A:EA:D7:73:97:31:3A:52:A4:1E:13:01:85:D6:32:E7:F0
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:ce:14:da:b1:d2:e4:dc:fa:ec:35:e1:fd:54:8e:11:f6:
         c2:ed:d9:0a:6a:1e:a2:72:be:c7:22:88:3c:85:ed:29:dd:ed:
         3f:9f:ff:63:ed:e2:68:60:d7:b4:22:57:7e:96:69:b6:bd:01:
         53:4d:c2:c6:df:24:0b:0a:a7:ea:91:01:f7:a0:9f:52:46:ca:
         ec:35:17:1b:78:bf:f5:f3:25:d0:69:4d:14:c9:4d:fd:1b:61:
         23:01:d0:f9:52:b4:47:77:76:7f:71:57:2a:3c:bd:1f:b6:cc:
         d2:bf:15:f7:c1:14:a0:34:6a:fd:b0:7f:4d:35:e1:f5:68:f8:
         11:94:46:7b:04:82:0a:34:37:a8:c3:60:8d:51:fb:cd:c1:59:
         0e:01:39:53:b9:2a:85:f6:3e:87:fd:e8:01:9b:3c:29:c4:f0:
         a7:4a:94:bd:0b:cc:8f:71:5b:9a:99:09:a3:e8:f7:90:16:2e:
         11:9b:6f:e8:eb:10:ad:69:a3:18:03:ee:49:f4:f7:d4:4a:19:
         8d:84:a4:1d:d8:12:95:ad:a1:52:99:9c:65:ee:50:79:ed:fd:
         e0:a8:e8:79:ea:44:8c:50:8f:55:83:12:56:70:5e:b2:f9:07:
         21:a5:33:a1:5f:5d:03:29:d9:fb:7d:04:8a:27:c0:df:83:c7:
         98:d4:3d:35
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZmzaDZ1ODcQtqAJj3lnjPAVRiJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNDA0MDMxODI2MjRaFw0yNTA0MDIxODMxMjRaMDMxMTAvBgNV
BAMTKDYwOTdENDZBRUFENzczOTczMTNBNTJBNDFFMTMwMTg1RDYzMkU3RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAi18ZelBVNPmoTEsSEV9j4qVl
WSYR+wJsrTrZi2U37HM4i+GDVfOw7JllAA+X8ETauiL2lHu+xxnsSEO10jzjSq1o
oUQqBpLpVXtud/zIZD8/KVrZbjBxWQGHxPQwrnvG+2KKh6Oa/N9VCwKDlhR6b7bn
hMYKKGviJdPOD28oOtkCXzrGm4l48As3MtxFcTI021KlwRF4PtJjHVMv1CD2NvXD
/LbH023BE3Dt7r3SNNca0HCSs2P3C8/wn0jvUJ582j/xWqM49mP4wFFi2gCCY3LR
ClFP0IL3umLZbxzPgRqLYRtEjYxd6bX/zyAx2obvfgGfJGCPU2vMRrZRZ4FjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYJfUaurXc5cxOlKkHhMBhdYy5/AwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJOSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCiU84U2rHS5Nz67DXh/VSOEfbC7dkKah6icr7HIog8he0p3e0/n/9j7eJo
YNe0Ild+lmm2vQFTTcLG3yQLCqfqkQH3oJ9SRsrsNRcbeL/18yXQaU0UyU39G2Ej
AdD5UrRHd3Z/cVcqPL0ftszSvxX3wRSgNGr9sH9NNeH1aPgRlEZ7BIIKNDeow2CN
UfvNwVkOATlTuSqF9j6H/egBmzwpxPCnSpS9C8yPcVuamQmj6PeQFi4Rm2/o6xCt
aaMYA+5J9PfUShmNhKQd2BKVraFSmZxl7lB57f3gqOh56kSMUI9VgxJWcF6y+Qch
pTOhX10DKdn7fQSKJ8Dfg8eY1D01
-----END CERTIFICATE-----