Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          zvEctB+iCKsfXuZpyHtaeqR+mUdC7cqYMK1KaGYo26Q=
Subject key identifier:   CD:30:41:FE:09:35:49:FA:23:0E:E4:21:A0:B7:05:83:24:37:FF:5E
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       3EEA41ADEADA2E2F3A15000286D4EA9454648698
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:21 +0000
ROA not before:           Wed 03 Apr 2024 18:26:21 +0000
ROA not after:            Wed 02 Apr 2025 18:31:21 +0000
asID:                     264247
IP address blocks:        2804:24e4::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ea:41:ad:ea:da:2e:2f:3a:15:00:02:86:d4:ea:94:54:64:86:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:21 2024 GMT
            Not After : Apr  2 18:31:21 2025 GMT
        Subject: CN=CD3041FE093549FA230EE421A0B705832437FF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:13:ec:78:dc:bd:53:e6:ec:11:3e:5a:ba:
                    2c:ec:ca:d4:23:4c:ec:7b:de:db:c2:ad:06:79:de:
                    be:64:d7:b0:0c:35:52:7c:2c:68:de:9d:43:82:29:
                    2b:8b:c4:16:57:9e:7e:0f:7f:50:15:21:fe:f1:5e:
                    02:90:22:8a:de:be:5a:22:96:99:9e:f2:b5:44:34:
                    2a:fb:8e:80:c4:57:ff:53:f1:77:a9:cf:ca:91:e5:
                    b3:5e:37:61:22:f6:22:96:80:47:27:ea:a8:0d:f6:
                    81:5d:3d:1b:18:59:49:70:53:d2:a1:ee:5d:06:78:
                    03:a5:6d:b7:73:29:b3:c8:f7:c6:11:89:3d:d3:86:
                    21:45:41:d9:62:6c:76:13:4e:53:7f:73:28:52:0c:
                    c2:fa:4c:b9:b8:8e:bb:54:52:bf:d2:e4:b7:d7:2d:
                    62:0c:8c:1a:a4:67:19:51:fb:6a:5e:a2:ad:c7:41:
                    64:af:b0:37:ce:73:c8:ee:29:5d:30:9c:d1:93:db:
                    ba:de:72:b2:87:26:7d:75:c1:4f:e1:86:36:78:10:
                    ec:4d:e4:24:f6:46:d1:36:da:ca:23:f3:35:09:05:
                    86:25:6a:b8:41:5f:16:82:7f:29:f6:e5:05:7a:9c:
                    93:42:51:a0:c0:b5:ce:af:ff:97:17:b2:7b:5c:f4:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:41:FE:09:35:49:FA:23:0E:E4:21:A0:B7:05:83:24:37:FF:5E
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:22:59:23:cc:dc:c1:5f:3d:64:e7:31:db:2a:4f:43:4d:f0:
         7a:36:2d:ea:df:c9:65:a9:51:fb:f2:09:88:35:05:69:ff:f0:
         95:93:98:97:09:5c:cf:95:bc:e5:ab:d0:b0:04:2a:69:78:45:
         e3:15:30:14:35:d5:15:e5:ea:b9:a6:72:bb:f1:1c:75:4d:10:
         61:fa:65:d7:af:43:50:f6:2b:6f:72:17:00:65:b9:45:5d:ce:
         f4:cd:32:b3:25:1f:bb:47:7e:f5:05:57:c7:8b:df:5c:9f:a3:
         c5:13:9c:14:e4:23:35:a2:15:65:aa:9a:b2:2c:78:02:74:40:
         bb:46:28:c4:aa:03:8b:13:07:8a:8b:c0:61:a1:18:8b:dd:65:
         2e:a5:46:e1:51:4a:e3:5e:3b:32:70:5c:b9:6c:44:0a:13:56:
         b4:dc:34:43:5b:f8:28:4c:c4:01:b4:7e:9c:b6:04:5f:5c:80:
         f1:0e:bc:51:33:df:da:40:da:f6:a6:0b:6b:fe:e9:78:fa:c8:
         86:71:10:bc:6f:55:ef:0f:45:40:9e:d5:35:9a:eb:37:a3:53:
         03:23:f2:89:73:57:95:74:a4:69:0f:36:24:72:3a:f6:0a:7a:
         87:f3:0e:16:24:5a:d3:87:ea:e2:fd:e7:0b:96:86:99:46:76:
         ab:bb:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 23:44:29 2024 by rpki-client on console-ams.rpki-client.org