Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          41vOBnu8Z3Q1tDADHJpvr5IFxBPbcxxZGGsxXn277WE=
Subject key identifier:   CA:66:30:13:1A:F9:45:46:5A:D5:BC:60:59:82:07:E5:90:21:A5:A2
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       10EA3FC181CC05ED8D2FAD4C83A5977C64CCC5CC
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:25 +0000
ROA not before:           Wed 03 Apr 2024 18:26:25 +0000
ROA not after:            Wed 02 Apr 2025 18:31:25 +0000
asID:                     264247
IP address blocks:        2804:24e4:d000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ea:3f:c1:81:cc:05:ed:8d:2f:ad:4c:83:a5:97:7c:64:cc:c5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:25 2024 GMT
            Not After : Apr  2 18:31:25 2025 GMT
        Subject: CN=CA6630131AF945465AD5BC60598207E59021A5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:4e:31:0d:eb:f2:c5:d9:8e:85:7c:ea:6c:
                    c6:f0:be:9a:df:9d:63:51:02:74:17:39:9f:de:27:
                    76:d7:95:46:f0:33:42:0f:27:62:be:ac:23:c9:28:
                    12:24:83:a9:48:bd:f2:24:72:83:39:73:f4:e6:30:
                    ea:76:99:35:73:93:fa:f9:90:b2:f1:7a:94:bd:e9:
                    c1:7e:16:28:8f:ff:74:56:9f:38:54:55:6f:f0:00:
                    9d:8e:a2:c9:25:c5:57:52:4b:9d:96:57:95:2f:0f:
                    f1:7c:79:f0:e7:24:ae:a2:8a:06:ec:df:8d:51:d4:
                    3e:c2:23:89:e4:b1:9f:13:d3:64:d9:fb:ea:1d:8d:
                    3f:ac:53:8f:77:e4:a3:89:e4:b6:aa:48:ea:26:e2:
                    81:3d:42:6d:05:7c:47:bb:63:12:ac:7f:0d:22:7e:
                    31:d1:c9:52:fc:28:55:ee:62:18:7b:99:ae:56:12:
                    10:39:7a:52:a2:23:95:bc:b1:6d:46:9c:98:1b:ca:
                    dc:e5:17:22:d8:44:d5:95:67:79:99:dc:13:84:f6:
                    2b:7d:e9:16:d4:fd:80:ce:e6:b3:86:54:06:66:4a:
                    10:25:b3:30:4b:9a:39:f8:b7:96:81:8f:1d:d1:48:
                    16:46:38:a7:d9:97:fd:ba:80:2d:02:cb:54:b5:44:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:30:13:1A:F9:45:46:5A:D5:BC:60:59:82:07:E5:90:21:A5:A2
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bc:84:34:c9:77:e7:b3:5a:2e:4b:e2:52:2a:17:03:c6:47:8e:
         8c:d5:3d:92:86:5a:be:5b:cc:14:a3:54:96:ca:06:02:91:be:
         c0:36:72:00:87:d3:7b:ef:3a:0e:17:ae:d5:ab:68:ed:bb:c1:
         be:32:46:18:16:f4:67:06:c0:ca:7e:02:6b:b3:f7:3d:a6:5d:
         91:2e:8c:1e:53:26:38:75:e1:27:85:ad:26:02:88:5e:cb:eb:
         5b:20:a2:32:5a:dd:19:aa:15:0f:a4:a7:db:42:ec:32:eb:af:
         1f:29:bd:32:50:cb:fd:bb:a2:ba:2a:02:79:7b:15:5f:ae:3b:
         76:c5:e9:5f:59:be:cd:ae:90:f1:1c:f2:77:c0:45:90:1b:c8:
         9c:47:35:be:ad:e2:af:89:e0:50:d9:e6:6a:3a:8a:52:02:1b:
         85:a6:cc:dc:1b:f2:85:5f:f4:be:cd:17:c7:ef:94:15:75:e5:
         29:58:33:07:b2:52:05:05:b9:8a:fe:61:d0:b7:02:ed:95:47:
         fe:2a:f2:a9:49:6d:2a:4a:04:7c:d7:2e:87:6b:c0:ce:dc:a0:
         64:fb:9a:ec:03:01:d3:92:9e:68:a6:3b:ff:e6:64:45:0d:2b:
         72:3b:c7:7c:02:4f:49:b6:b8:06:4f:79:2a:9a:8f:e7:52:f2:
         43:b9:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----