Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          TdR+Tmdw3w3V/CxTUOu4iF2eiROnQbjMPDc2Im2tBAM=
Subject key identifier:   94:3D:E2:70:D1:26:B8:F3:64:59:2D:FC:16:32:D5:94:00:11:1A:F8
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       76056FA1FC28EB7F3CEE7C27E80386365AD3B16B
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:20 +0000
ROA not before:           Wed 03 Apr 2024 18:26:20 +0000
ROA not after:            Wed 02 Apr 2025 18:31:20 +0000
asID:                     264247
IP address blocks:        2804:24e4:b000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:05:6f:a1:fc:28:eb:7f:3c:ee:7c:27:e8:03:86:36:5a:d3:b1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:20 2024 GMT
            Not After : Apr  2 18:31:20 2025 GMT
        Subject: CN=943DE270D126B8F364592DFC1632D59400111AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:ca:a2:8b:f5:f0:da:50:14:58:d6:88:0f:
                    69:86:c3:fd:10:4b:e9:a8:aa:62:b9:6a:17:f2:43:
                    09:36:e8:18:0e:89:c9:40:7e:a7:a3:e1:ec:73:cc:
                    fc:f9:4f:80:40:df:eb:08:6a:48:32:b3:6c:96:fb:
                    36:f0:02:54:df:97:89:31:3f:d2:81:fb:cb:68:ca:
                    b9:d6:78:49:5a:3a:b8:13:ed:59:26:15:5a:00:6a:
                    dd:81:1c:9f:af:bd:60:43:7c:52:5b:41:79:95:5e:
                    a1:94:16:27:07:a6:9e:98:db:6e:35:9c:cf:63:87:
                    f5:ae:d4:c6:88:8e:3f:1b:50:0f:50:d6:9c:dc:62:
                    dd:ff:fb:0d:ff:b4:86:db:32:9c:c2:47:dd:d0:99:
                    45:ce:1f:a3:86:e3:99:9f:b5:4d:0b:a8:98:40:de:
                    09:22:c8:c0:94:30:24:59:03:3d:85:b4:48:97:08:
                    30:f0:8c:48:0a:9b:17:0e:1f:8c:91:e3:c8:ae:d4:
                    fc:45:24:5e:07:b1:e6:ec:f2:1f:a0:e7:66:c8:44:
                    53:35:aa:2f:d1:b6:9e:7d:dd:59:77:96:24:13:c1:
                    9b:74:1f:33:f4:4d:29:72:4c:54:94:e1:42:91:b4:
                    94:10:ca:0a:19:6c:f9:c7:4d:82:d6:52:cb:46:a9:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3D:E2:70:D1:26:B8:F3:64:59:2D:FC:16:32:D5:94:00:11:1A:F8
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:53:40:de:14:29:25:a2:3c:a8:4d:19:34:09:28:eb:4f:4c:
         66:87:14:ad:23:34:9c:c6:b3:3e:50:e4:bf:98:ac:59:77:3f:
         a1:3c:e4:9c:7d:e1:f1:b6:cb:9a:9c:7a:8f:7c:74:bf:f2:69:
         c1:cd:af:16:39:3d:8a:8e:0e:87:2a:df:2a:d3:81:04:76:ab:
         16:de:75:45:bb:47:4f:a5:3e:b3:f6:74:fe:c6:b6:70:37:da:
         fb:79:74:49:bd:e8:2e:30:1b:92:6e:ae:20:06:0d:81:7a:f0:
         ce:fa:b0:4c:fd:38:a8:33:bf:2f:dd:d0:40:b0:66:84:f6:dc:
         89:5c:c1:77:a0:e6:3b:e8:0a:02:83:d4:ca:a0:2d:64:65:38:
         41:f5:12:52:cc:84:00:de:c4:38:6e:36:a5:a7:b6:33:c7:eb:
         7c:93:43:16:0a:1f:66:44:65:e8:50:14:85:2f:47:1b:ef:a5:
         dd:6a:b3:97:52:1f:8b:5a:bb:2e:61:26:6b:3e:14:14:17:4e:
         2d:85:54:73:e3:a2:72:cc:b3:76:6d:10:0d:f7:65:f1:15:39:
         bd:b3:5e:b4:ad:f4:15:7c:1e:b2:29:88:ab:6c:d5:b8:46:df:
         3f:49:56:59:06:5e:ef:31:9e:20:9e:85:92:3d:e8:2f:2b:33:
         79:d6:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----