Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa
File:                     3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa (raw, json)
Hash identifier:          6aDE+9BhifrgEZOiCO3lQjyokm54lfns4sz3Q3+FrlY=
Subject key identifier:   29:B1:79:08:63:9F:7E:E4:D8:D6:7D:AD:13:23:E9:12:DF:56:CF:2F
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       416467F2F5D5E172FE56C6150C20F7CB8413F284
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:22 +0000
ROA not before:           Wed 03 Apr 2024 18:25:22 +0000
ROA not after:            Wed 02 Apr 2025 18:30:22 +0000
asID:                     28234
IP address blocks:        189.127.192.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:64:67:f2:f5:d5:e1:72:fe:56:c6:15:0c:20:f7:cb:84:13:f2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=29B17908639F7EE4D8D67DAD1323E912DF56CF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:25:3e:83:d2:1c:28:8c:d5:49:ef:dc:0a:
                    56:bc:97:68:dc:c9:3b:cd:8f:9e:91:6f:27:d9:3a:
                    e7:a4:22:66:49:09:41:c6:d4:3d:63:ae:81:26:fe:
                    77:f3:6c:4b:cf:94:9d:98:9f:55:23:7a:dd:0a:9d:
                    bb:dd:ff:fa:3e:f1:1c:36:c2:6d:aa:77:92:df:d7:
                    da:67:4d:d3:16:7e:11:7e:53:be:43:b2:36:42:c3:
                    b5:66:5d:81:df:60:61:b2:bf:09:b1:6a:0c:29:e3:
                    6e:df:3f:db:34:f2:ef:5a:43:e1:0f:4e:c8:b0:7b:
                    06:32:6f:b4:77:54:bf:de:96:91:db:8a:21:65:5f:
                    d8:8a:3c:4b:cf:82:52:35:dd:94:0b:2d:26:09:37:
                    90:8f:76:af:3b:39:d9:55:02:85:cc:f8:ae:4b:3f:
                    3a:91:a6:5d:f5:fe:41:fc:0b:fc:93:90:b9:b8:25:
                    48:3c:46:57:51:7d:fa:4b:d3:03:93:64:21:b7:2d:
                    39:64:84:02:13:00:c0:b7:44:6b:7d:f2:8d:cb:c5:
                    ac:04:a7:83:16:cd:cf:91:4d:81:34:0c:ff:e3:0a:
                    03:17:3d:ac:dd:bf:ea:f6:a8:69:3c:07:44:85:df:
                    2e:31:05:14:c3:d2:08:76:ef:ea:5d:83:d0:58:24:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B1:79:08:63:9F:7E:E4:D8:D6:7D:AD:13:23:E9:12:DF:56:CF:2F
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:d9:24:1e:e1:2b:29:df:96:e2:66:63:64:74:9a:68:de:
         d3:f4:7a:6d:36:ec:c0:c9:27:59:1b:fb:c1:36:68:4a:8f:8a:
         da:c9:35:78:aa:de:42:98:7b:0c:7d:34:83:22:c4:e4:03:e3:
         fe:57:c9:68:9c:2b:1c:d1:9e:3e:01:57:e0:28:f1:ae:9b:a1:
         e6:d5:97:f0:4d:8e:7e:58:0b:9b:c0:59:58:30:2f:c0:1b:12:
         fc:a9:71:b7:52:c2:83:bc:ad:53:a0:db:3c:37:fe:d7:14:ed:
         1f:ec:27:88:b0:db:0d:31:f0:12:86:e8:7f:4e:d6:9c:8e:34:
         47:8c:ae:d4:91:34:7c:ca:0b:91:73:88:94:4c:36:00:2a:9c:
         c7:5a:8c:13:30:91:8a:69:af:10:f1:7e:f1:a6:46:3d:ad:c3:
         73:cd:65:d6:ca:2d:0e:e1:74:f3:13:cc:a9:86:14:76:b0:1a:
         66:57:37:7c:6d:da:9f:57:42:3c:77:35:02:74:9c:b1:47:0b:
         1b:08:fe:a9:c4:94:1e:14:19:ca:98:d0:7f:26:fa:2b:77:44:
         6b:8e:bb:1d:9d:b7:af:30:bb:6c:9b:70:95:38:1e:7b:04:7d:
         fa:63:cd:b0:40:c9:4f:ba:93:ed:ae:09:41:6a:08:bc:ca:67:
         8c:f0:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org