Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa
File:                     3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa (raw, json)
Hash identifier:          BJeBxLgSYr5f9xLIhdlb7UFxF8do3W+IleFjOG5rgr4=
Subject key identifier:   0A:84:54:26:BE:20:6C:C4:C9:01:91:32:DC:DF:98:13:0E:31:F0:57
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       3624841A971CD56991F3904D26B1874E8FD56BF4
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:20 +0000
ROA not before:           Wed 03 Apr 2024 18:25:20 +0000
ROA not after:            Wed 02 Apr 2025 18:30:20 +0000
asID:                     28234
IP address blocks:        189.127.192.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:24:84:1a:97:1c:d5:69:91:f3:90:4d:26:b1:87:4e:8f:d5:6b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject: CN=0A845426BE206CC4C9019132DCDF98130E31F057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:18:22:81:2b:d8:fe:d5:46:1b:31:36:dc:
                    44:e2:7b:cb:8f:c0:12:86:d1:08:4f:62:e3:59:c0:
                    ac:57:b1:28:86:cd:31:e1:19:2b:f8:c0:d4:e7:4c:
                    35:94:ee:ae:be:ef:cb:58:3e:aa:e2:95:62:aa:73:
                    de:c9:03:ef:c9:7e:49:39:da:77:e0:04:5e:8b:e2:
                    b4:a5:fc:3c:29:dc:64:80:49:b2:78:be:76:d3:b7:
                    07:81:ac:a7:03:2b:25:d0:5a:97:3f:ba:f9:67:eb:
                    7a:da:4c:e8:b7:2d:ea:ed:58:c3:c4:07:d9:4a:f6:
                    ac:e9:84:7c:4d:3f:20:64:1b:03:fe:66:2b:bf:35:
                    af:49:28:b8:83:f5:54:8c:b2:b4:28:1b:90:b3:e6:
                    be:1a:43:98:04:90:c8:e9:ca:f5:95:3d:9c:29:f9:
                    a0:91:9b:7a:19:92:1a:3a:ac:5c:c1:8b:2a:e4:f1:
                    54:93:0f:b0:c0:92:63:2a:b7:ce:f7:0e:34:cd:7f:
                    fd:af:9d:5d:fd:4c:97:57:07:13:20:08:04:5f:16:
                    b9:94:ed:bd:45:93:a0:20:b6:66:37:9a:5f:04:05:
                    40:59:ac:3e:ab:af:75:3a:4b:ed:e2:e6:7b:8b:86:
                    50:4b:d3:ed:fd:e3:9e:35:15:9e:28:b3:8c:14:8b:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:84:54:26:BE:20:6C:C4:C9:01:91:32:DC:DF:98:13:0E:31:F0:57
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:81:e8:1a:23:83:54:85:f6:62:0c:99:35:70:2f:5b:fc:
         5c:c1:3e:40:b1:d1:d1:95:a2:cc:44:49:b5:ab:86:85:ef:0b:
         f9:fd:66:86:f9:4c:1c:91:d5:0b:39:e4:1c:6b:88:98:f9:1c:
         64:a3:c4:a7:1b:98:3d:06:2d:ad:48:af:04:bb:16:8d:68:e4:
         04:8e:fb:81:0d:cc:18:1b:d6:7f:b0:94:de:8a:06:d3:70:b3:
         2c:47:9f:fe:83:8b:b6:6f:dd:82:57:d2:d5:d2:ef:af:2f:8b:
         8e:16:c6:79:ba:9a:c3:51:f1:b3:da:40:24:ec:1e:59:45:74:
         c4:00:49:e7:b2:15:7e:1d:fd:da:d1:9b:83:1a:5b:91:36:58:
         fe:39:75:11:c0:16:98:e3:1d:ca:bf:d2:b7:20:d7:b2:c5:d3:
         18:66:e7:64:b0:c9:58:29:b2:39:0c:bc:d1:9c:78:cb:7a:a8:
         dd:5e:50:9c:50:c4:56:b7:c5:2b:69:b0:c5:ea:47:a6:f5:d1:
         39:cc:88:f0:01:e4:01:61:03:c8:b1:31:2d:28:51:ef:f6:05:
         59:2b:a4:13:b5:68:2c:ad:cf:3c:76:d9:fe:65:6f:9a:a1:b6:
         69:df:c6:38:80:bd:a6:e6:10:ee:b9:34:f2:8f:e5:f9:b8:45:
         ea:89:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org