Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          44ypDWbTwfUYpfPmkJiemCOQYeWewHNVujtkRCQCCd4=
Subject key identifier:   6D:09:E6:29:D6:5F:DC:70:9A:7A:4F:58:64:9C:F8:1C:C3:EF:20:A3
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       18E66B35B417F7A59024490D6A3223CED8D51213
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:25 +0000
ROA not before:           Wed 03 Apr 2024 18:26:25 +0000
ROA not after:            Wed 02 Apr 2025 18:31:25 +0000
asID:                     264247
IP address blocks:        2804:24e4:e000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e6:6b:35:b4:17:f7:a5:90:24:49:0d:6a:32:23:ce:d8:d5:12:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:25 2024 GMT
            Not After : Apr  2 18:31:25 2025 GMT
        Subject: CN=6D09E629D65FDC709A7A4F58649CF81CC3EF20A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:a7:21:c8:a2:93:2d:f2:74:d9:cb:7a:a9:
                    34:f3:0e:d1:dc:9f:cc:24:c4:fe:cd:d1:3e:3e:aa:
                    09:1a:ba:39:86:05:0c:c5:d9:64:b5:cf:a6:71:a3:
                    57:ff:cd:ef:f1:43:2c:ce:14:03:27:31:8b:44:52:
                    eb:96:54:9c:91:83:d8:8d:42:bd:d5:5d:6b:31:f9:
                    23:4a:c9:c5:4c:86:71:89:54:97:87:58:2c:c0:de:
                    33:19:97:e5:fe:e3:af:f7:c4:24:c1:36:9b:30:2f:
                    01:cc:31:e2:69:9c:93:b6:f4:7c:02:5f:9c:f8:0e:
                    6c:1e:2d:b5:1d:4f:ce:9e:08:fa:3b:61:de:dd:e9:
                    53:6f:c6:e7:7e:36:32:38:6b:11:06:1e:1e:0d:43:
                    83:b8:c8:dd:ed:ea:46:ac:a4:68:2a:45:9d:d3:f0:
                    e4:2d:32:3e:f5:1f:68:f8:fa:c5:cb:5a:46:6e:1e:
                    a3:df:0b:cd:5a:58:dc:e7:ec:23:c6:e8:c8:29:c7:
                    5f:16:20:eb:5b:97:dd:5c:63:85:6e:95:ab:36:83:
                    a2:ed:23:3f:41:1c:fe:00:02:61:c8:40:5a:12:86:
                    48:e9:a6:68:02:ed:4a:db:e0:51:e2:51:cd:f2:78:
                    30:ab:c4:d2:11:ab:11:7f:1d:ec:7c:ab:2b:5d:3a:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:09:E6:29:D6:5F:DC:70:9A:7A:4F:58:64:9C:F8:1C:C3:EF:20:A3
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:f4:70:95:c7:5b:47:88:86:c0:5e:db:7e:98:44:e3:55:f2:
         ee:ac:d6:8b:89:77:f4:f5:e2:8f:57:f4:9c:c8:86:e7:cd:31:
         0e:7c:b6:4a:41:48:03:12:8d:41:62:e6:ef:99:98:aa:39:cf:
         db:bf:0f:cc:95:d9:ff:60:ef:3b:8a:a6:34:eb:fe:b8:d3:1a:
         5d:d6:b7:20:65:fa:49:47:91:d1:d0:4b:f1:4b:f6:1d:5d:f1:
         7c:8a:b7:01:c0:a9:fd:bc:0d:ba:d3:1e:4a:59:e3:25:ee:12:
         68:85:1b:80:10:56:a9:36:0e:01:8c:1d:a3:db:db:d6:42:fa:
         2a:5a:02:cc:06:b7:5d:65:28:51:b4:42:ec:57:16:97:75:b6:
         c0:ca:13:aa:8f:dd:17:46:2c:ed:bc:61:88:72:8d:c7:0f:13:
         9f:f8:33:1e:29:74:3d:95:99:f2:77:61:dd:7e:d4:a9:84:85:
         bb:87:61:61:16:10:a3:85:11:1c:13:58:1d:61:84:d2:f8:99:
         58:d1:45:16:80:7f:25:7d:2c:ea:0b:24:c0:e6:46:6b:da:3f:
         48:c7:4a:4d:9a:67:e5:bf:0b:01:19:f9:00:c9:58:b0:53:62:
         cf:94:6f:04:0b:f6:41:8c:54:f0:be:18:e7:4d:a4:3b:cd:d6:
         bc:e0:75:95
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGOZrNbQX96WQJEkNajIjztjVEhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNDA0MDMxODI2MjVaFw0yNTA0MDIxODMxMjVaMDMxMTAvBgNV
BAMTKDZEMDlFNjI5RDY1RkRDNzA5QTdBNEY1ODY0OUNGODFDQzNFRjIwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFqchyKKTLfJ02ct6qTTzDtHc
n8wkxP7N0T4+qgkaujmGBQzF2WS1z6Zxo1f/ze/xQyzOFAMnMYtEUuuWVJyRg9iN
Qr3VXWsx+SNKycVMhnGJVJeHWCzA3jMZl+X+46/3xCTBNpswLwHMMeJpnJO29HwC
X5z4DmweLbUdT86eCPo7Yd7d6VNvxud+NjI4axEGHh4NQ4O4yN3t6kaspGgqRZ3T
8OQtMj71H2j4+sXLWkZuHqPfC81aWNzn7CPG6Mgpx18WIOtbl91cY4Vulas2g6Lt
Iz9BHP4AAmHIQFoShkjppmgC7Urb4FHiUc3yeDCrxNIRqxF/Hex8qytdOmVrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbQnmKdZf3HCaek9YZJz4HMPvIKMwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2E2NTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJOTgMA0GCSqGSIb3DQEBCwUA
A4IBAQB79HCVx1tHiIbAXtt+mETjVfLurNaLiXf09eKPV/ScyIbnzTEOfLZKQUgD
Eo1BYubvmZiqOc/bvw/Mldn/YO87iqY06/640xpd1rcgZfpJR5HR0EvxS/YdXfF8
ircBwKn9vA260x5KWeMl7hJohRuAEFapNg4BjB2j29vWQvoqWgLMBrddZShRtELs
VxaXdbbAyhOqj90XRiztvGGIco3HDxOf+DMeKXQ9lZnyd2HdftSphIW7h2FhFhCj
hREcE1gdYYTS+JlY0UUWgH8lfSzqCyTA5kZr2j9Ix0pNmmflvwsBGfkAyViwU2LP
lG8EC/ZBjFTwvhjnTaQ7zda84HWV
-----END CERTIFICATE-----