Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a663030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a663030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          LVjEmL3Y9FBSRbCFsMMcfy8DZ+AIQLMcW0tlkcJOiJw=
Subject key identifier:   49:F5:61:5C:E8:C2:05:4B:58:77:46:F2:D7:20:E4:D8:AD:B0:41:8B
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       3C1A44A112A56ED99B581C4BF0687FF6B30B8914
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a663030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:21 +0000
ROA not before:           Wed 03 Apr 2024 18:26:21 +0000
ROA not after:            Wed 02 Apr 2025 18:31:21 +0000
asID:                     264247
IP address blocks:        2804:24e4:f000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1a:44:a1:12:a5:6e:d9:9b:58:1c:4b:f0:68:7f:f6:b3:0b:89:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:21 2024 GMT
            Not After : Apr  2 18:31:21 2025 GMT
        Subject: CN=49F5615CE8C2054B587746F2D720E4D8ADB0418B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:b1:8f:4c:cc:01:eb:bd:54:e3:06:6f:f9:
                    ca:65:91:e8:ca:37:fa:d5:3b:a7:5a:e2:10:16:3e:
                    47:9b:6b:7e:82:70:bd:73:bf:11:47:3d:f4:7d:7a:
                    0c:e9:5f:c4:24:be:25:da:3e:53:38:d0:ca:b1:61:
                    60:ea:a6:91:59:d6:9e:10:f4:b0:54:ee:88:6d:63:
                    45:dd:79:8a:3a:6b:9b:4e:5c:a8:5a:eb:cd:c5:cc:
                    35:fb:6b:48:a0:8c:b5:84:70:ad:c5:71:6f:eb:14:
                    9a:f6:10:51:8b:82:db:66:c2:28:6d:d6:f9:2a:5a:
                    f7:19:bd:e3:da:ac:85:4b:65:53:11:31:2f:cd:42:
                    8b:f3:e4:2a:be:0d:d6:c7:ba:3a:23:e4:2a:03:e7:
                    3a:01:af:0a:0b:e0:7b:d3:65:4e:12:a2:11:9c:d9:
                    80:d4:3a:f8:96:22:2c:d1:ba:dc:d8:b7:43:36:f5:
                    62:a9:b3:49:57:39:60:98:4c:52:cd:f1:0d:a3:a3:
                    8b:27:13:5a:e9:98:bd:84:b7:88:d5:2c:93:64:22:
                    e3:f5:e7:40:00:76:fb:07:d5:c7:1d:ea:3e:55:be:
                    dc:25:9a:e1:16:e8:25:a0:8b:09:fb:94:d7:0e:4b:
                    26:5d:8b:b6:80:81:23:90:c8:1f:83:86:e1:7f:5b:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F5:61:5C:E8:C2:05:4B:58:77:46:F2:D7:20:E4:D8:AD:B0:41:8B
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a663030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:35:2d:cb:25:7c:cf:5b:94:ff:fa:56:93:b7:d2:15:10:a1:
         b8:e6:67:68:36:0a:7a:59:0c:74:7b:48:23:2e:dc:40:80:c3:
         99:fc:fe:96:2c:e9:0e:14:26:6f:67:f7:0f:b4:dc:be:01:36:
         cf:ed:b0:9e:8c:64:92:98:1b:28:b6:89:c1:78:83:f1:1c:26:
         2f:a9:64:02:40:8a:fc:18:c1:d1:53:13:9c:56:31:12:46:5a:
         04:25:77:b0:f9:81:52:2b:a8:e4:6d:86:d1:ea:52:19:f2:26:
         90:98:37:da:23:cf:f4:6d:af:c8:56:2b:01:4d:9f:e5:fb:8e:
         31:8d:2c:64:f1:a6:d6:4f:cf:4e:07:b9:8b:2d:ac:b6:f5:5c:
         67:45:b2:6b:e7:77:f0:0b:5b:30:5e:65:44:e1:a8:b9:e0:8b:
         fa:19:97:ec:5c:63:9f:10:65:4f:04:2a:ce:27:5f:b8:bc:c7:
         3d:61:1a:25:cb:af:03:d6:5a:5d:a6:c8:99:1e:56:20:0b:13:
         62:d3:a8:fd:a2:e7:76:b8:83:fb:46:aa:7b:13:3d:47:60:02:
         25:67:91:fb:b4:70:b8:98:2f:fd:07:fc:96:d0:2c:b2:0e:a4:
         37:12:7e:9c:71:7a:80:1e:e4:4a:c9:68:6d:9a:4a:de:c2:99:
         85:5f:91:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----