Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a613030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a613030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          /yV1NmUAKahzoWOD/LRLX/mvPp0U0YONqxBei1JWu4Y=
Subject key identifier:   A0:5F:A7:A5:33:73:A0:06:4F:54:3B:37:B0:A7:32:6C:EA:AC:8B:6C
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       54814CCC82028C85306188239A11193837BAD33E
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a613030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:20 +0000
ROA not before:           Wed 03 Apr 2024 18:26:20 +0000
ROA not after:            Wed 02 Apr 2025 18:31:20 +0000
asID:                     264247
IP address blocks:        2804:24e4:a000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:81:4c:cc:82:02:8c:85:30:61:88:23:9a:11:19:38:37:ba:d3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:20 2024 GMT
            Not After : Apr  2 18:31:20 2025 GMT
        Subject: CN=A05FA7A53373A0064F543B37B0A7326CEAAC8B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:f8:c7:39:63:af:95:fb:a5:b0:8f:53:8c:
                    fe:43:3c:07:ab:fe:ff:59:e7:8c:6d:0a:0b:f4:7a:
                    ec:60:19:dc:42:8f:f6:4d:4b:2e:57:ba:c8:a8:56:
                    58:11:85:ea:ce:6d:87:89:2d:9d:90:a8:6d:62:21:
                    36:3a:30:ad:45:45:2a:3a:d5:d4:21:c6:bd:26:42:
                    42:35:78:fe:36:44:d7:c5:2f:a6:7c:59:54:30:5f:
                    74:3d:5a:7d:ae:8b:c2:b7:88:44:c4:15:e7:7c:86:
                    32:de:c2:63:12:ef:5e:92:c2:cf:25:cc:7f:5d:7f:
                    b5:25:26:43:ef:a3:ef:63:7b:7e:e5:f1:57:0a:6d:
                    ae:0a:4e:4e:14:3c:28:bf:4a:c0:dd:ad:04:4d:ae:
                    f2:b9:de:b4:b2:88:78:0c:ea:a2:74:77:9f:8f:13:
                    50:1f:1a:9b:41:08:e0:e0:d2:27:3c:3f:df:e6:8e:
                    9f:1c:bc:37:b3:25:43:7e:1a:19:25:8a:42:e3:2a:
                    d4:79:db:3a:2b:68:98:65:3a:4b:44:a0:61:0a:fb:
                    35:98:59:b2:ae:03:ec:53:89:b2:31:cc:01:93:ed:
                    1a:ea:6e:e4:03:2b:86:67:12:ad:06:48:dc:b8:8e:
                    e6:f7:1c:38:9b:33:f3:81:e9:06:f5:f1:a3:22:9b:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5F:A7:A5:33:73:A0:06:4F:54:3B:37:B0:A7:32:6C:EA:AC:8B:6C
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a613030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:39:50:2a:a3:92:ae:db:aa:83:99:c4:4d:f6:d0:1d:4c:
         f0:d8:cb:26:69:46:05:0d:f9:e2:4f:3f:0a:d4:69:80:a6:b9:
         57:c1:a9:b2:bd:4d:4b:0d:23:6a:b6:9d:32:47:fe:cb:0a:5c:
         6d:90:7a:97:1c:5c:6c:f0:8b:0e:18:26:2f:68:7a:fb:b1:2a:
         9f:db:56:f5:c0:14:38:c9:d8:d1:bf:74:f9:49:db:c1:57:ea:
         96:04:5d:1e:00:05:cf:9b:8d:40:53:03:b6:7c:d9:26:ac:fb:
         a9:c8:5b:f7:eb:6f:aa:1c:f4:6e:ec:e6:75:5b:f8:9e:dd:1d:
         a4:ca:56:1b:1b:65:a6:f0:90:67:91:d0:30:ab:21:89:49:ef:
         f8:28:61:45:fd:b3:81:c0:6d:d5:38:1f:72:4c:fe:98:5c:2c:
         e4:e3:a3:a5:93:1f:ec:a0:80:c5:34:54:02:42:55:73:fd:32:
         81:62:cb:3f:db:08:94:df:ab:cc:85:31:4e:c7:e8:b8:09:8d:
         a3:90:64:0c:89:68:b5:ce:d1:d8:58:72:21:eb:36:6e:7d:b2:
         ac:c8:ce:73:fc:6a:e9:aa:87:e9:5c:5d:60:b2:85:55:4c:64:
         3b:7b:28:c9:ce:b1:7d:f4:c3:ee:a5:b1:f1:6e:32:36:33:90:
         ed:50:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----