Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          HCXtzZJbVL5GNb08RbmTE+j9NvU9NyYvY2nQYEcG4nc=
Subject key identifier:   CB:FD:04:8C:32:71:0D:8C:31:E3:36:41:67:08:EE:46:C9:05:87:77
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       7D68B78C5C02E53DA777E13CDA2E3890ADF97930
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:22 +0000
ROA not before:           Wed 03 Apr 2024 18:26:22 +0000
ROA not after:            Wed 02 Apr 2025 18:31:22 +0000
asID:                     264247
IP address blocks:        2804:24e4:c000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:68:b7:8c:5c:02:e5:3d:a7:77:e1:3c:da:2e:38:90:ad:f9:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:22 2024 GMT
            Not After : Apr  2 18:31:22 2025 GMT
        Subject: CN=CBFD048C32710D8C31E336416708EE46C9058777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:01:9a:d2:11:62:da:c1:46:53:d4:65:60:
                    d4:75:b8:46:4a:79:cb:ea:97:38:4f:21:0a:35:34:
                    76:a9:67:cf:e5:83:74:61:73:d6:82:28:3e:02:83:
                    63:64:4c:49:79:a0:73:0f:08:c5:4f:87:20:32:c3:
                    a0:1c:fe:b2:da:49:3b:b9:a8:56:07:e8:37:01:1e:
                    01:22:34:22:5f:88:67:7f:8a:73:9c:2b:2d:b2:73:
                    f6:be:9b:9f:67:da:2c:64:91:bb:a2:94:4b:0b:af:
                    dd:08:16:9d:4a:67:b9:9c:a9:47:56:2b:e8:a3:72:
                    c7:e6:5a:78:0e:31:67:c1:59:85:b1:cd:33:8e:13:
                    0b:3a:00:b8:ad:aa:b4:ef:bf:04:9a:03:7f:ff:ea:
                    a9:aa:a9:47:d7:19:a4:0c:b7:fa:33:c9:40:7e:cd:
                    6c:5f:60:0c:91:45:63:cc:ad:93:8d:2e:41:6c:a1:
                    31:f6:1b:04:0b:af:af:30:3b:f7:13:e8:c7:09:df:
                    f9:0b:f5:ab:1b:f4:9b:c6:d7:34:0b:c5:f9:cd:ec:
                    24:5b:59:e1:51:18:5f:5a:82:be:fc:b8:1b:72:f2:
                    12:8e:8b:7f:a7:01:c4:6e:3c:ff:c4:49:9e:1b:ce:
                    e4:ec:2f:7e:16:ec:c0:83:11:18:10:f5:10:cb:f6:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FD:04:8C:32:71:0D:8C:31:E3:36:41:67:08:EE:46:C9:05:87:77
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c5:51:bc:de:c3:04:4a:0f:bc:d7:46:98:bb:5c:78:33:58:00:
         11:c0:19:af:9d:88:ae:44:d7:2a:3a:9a:b3:c0:91:6a:d5:cc:
         69:aa:00:9f:f4:50:e6:c4:56:06:68:f5:52:41:0d:47:a9:fb:
         1e:0c:a0:08:9e:a4:0f:46:d4:22:1f:34:ee:bf:e4:92:ee:be:
         ce:59:80:dc:56:be:40:39:a2:0a:88:56:77:a0:06:97:69:b2:
         dd:0c:9c:16:8c:b4:bd:24:47:b9:32:c0:34:60:dd:77:59:52:
         c8:81:f7:7c:13:0f:bf:61:ca:9c:37:1e:e4:7d:7b:bf:ae:49:
         21:32:87:c8:65:2b:66:c4:ec:12:16:a0:e1:1c:c2:65:ca:b3:
         3e:f7:f9:66:0f:25:d7:19:e8:8e:ac:a0:5e:af:54:6a:f3:15:
         19:8f:92:c9:17:cf:9e:6b:43:47:e6:60:f9:d4:9e:7a:3a:7e:
         7f:62:5a:55:30:71:94:64:65:53:8f:33:5c:1f:70:76:eb:6e:
         d4:03:ca:30:0a:b8:a9:43:08:f7:f0:05:03:6c:cd:02:1c:79:
         5c:66:b1:e6:08:45:67:c0:9d:af:c2:2d:d6:77:f5:d7:03:b8:
         14:20:e1:4e:18:cf:60:c2:48:bc:ad:b9:0e:ac:23:4b:25:bd:
         1d:f2:6c:63
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfWi3jFwC5T2nd+E82i44kK35eTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNDA0MDMxODI2MjJaFw0yNTA0MDIxODMxMjJaMDMxMTAvBgNV
BAMTKENCRkQwNDhDMzI3MTBEOEMzMUUzMzY0MTY3MDhFRTQ2QzkwNTg3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XgGa0hFi2sFGU9RlYNR1uEZK
ecvqlzhPIQo1NHapZ8/lg3Rhc9aCKD4Cg2NkTEl5oHMPCMVPhyAyw6Ac/rLaSTu5
qFYH6DcBHgEiNCJfiGd/inOcKy2yc/a+m59n2ixkkbuilEsLr90IFp1KZ7mcqUdW
K+ijcsfmWngOMWfBWYWxzTOOEws6ALitqrTvvwSaA3//6qmqqUfXGaQMt/ozyUB+
zWxfYAyRRWPMrZONLkFsoTH2GwQLr68wO/cT6McJ3/kL9asb9JvG1zQLxfnN7CRb
WeFRGF9agr78uBty8hKOi3+nAcRuPP/ESZ4bzuTsL34W7MCDERgQ9RDL9oeLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUy/0EjDJxDYwx4zZBZwjuRskFh3cwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJOTAMA0GCSqGSIb3DQEBCwUA
A4IBAQDFUbzewwRKD7zXRpi7XHgzWAARwBmvnYiuRNcqOpqzwJFq1cxpqgCf9FDm
xFYGaPVSQQ1HqfseDKAInqQPRtQiHzTuv+SS7r7OWYDcVr5AOaIKiFZ3oAaXabLd
DJwWjLS9JEe5MsA0YN13WVLIgfd8Ew+/YcqcNx7kfXu/rkkhMofIZStmxOwSFqDh
HMJlyrM+9/lmDyXXGeiOrKBer1Rq8xUZj5LJF8+ea0NH5mD51J56On5/YlpVMHGU
ZGVTjzNcH3B2627UA8owCripQwj38AUDbM0CHHlcZrHmCEVnwJ2vwi3Wd/XXA7gU
IOFOGM9gwki8rbkOrCNLJb0d8mxj
-----END CERTIFICATE-----
Generated at Mon Sep 23 23:44:29 2024 by rpki-client on console-ams.rpki-client.org