Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          90qyYPHfbnqxbEtsju4pAX/ehYPoBxY9llogO0O3pUo=
Subject key identifier:   C4:26:EF:77:30:D6:F9:7F:9A:F2:41:C1:1B:32:5D:F3:4F:BB:E0:18
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       26ECA23D03FC3B88256B1A825AC546E07A15B896
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:24 +0000
ROA not before:           Wed 03 Apr 2024 18:25:24 +0000
ROA not after:            Wed 02 Apr 2025 18:30:24 +0000
asID:                     28234
IP address blocks:        189.127.192.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ec:a2:3d:03:fc:3b:88:25:6b:1a:82:5a:c5:46:e0:7a:15:b8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:24 2024 GMT
            Not After : Apr  2 18:30:24 2025 GMT
        Subject: CN=C426EF7730D6F97F9AF241C11B325DF34FBBE018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:a1:ea:70:d1:7c:de:ae:b4:f9:36:a3:b6:
                    7a:9e:2a:2f:72:34:09:28:5a:41:15:7b:c5:cc:26:
                    d6:ac:84:1f:db:f3:4a:fe:cf:4a:4e:a1:1d:e9:1e:
                    83:bb:a2:f3:84:6c:75:22:ef:11:15:bd:f9:0a:80:
                    05:ac:71:f9:c1:94:95:2b:e9:8c:2f:e9:16:f0:41:
                    02:0d:77:13:3c:bb:7d:19:26:4b:76:2c:44:32:71:
                    eb:c0:17:a7:a0:8a:7c:41:26:0c:ac:14:ca:51:5c:
                    b0:59:24:a0:40:bb:73:8a:6e:01:06:08:a9:a4:0a:
                    6a:b9:1e:d3:f7:1c:cb:25:29:be:b6:87:96:bc:b7:
                    d9:05:bb:88:6c:2e:0d:31:0b:32:9a:19:23:15:cf:
                    c0:b7:86:b0:03:65:36:b3:3d:bc:19:bd:4c:62:a6:
                    01:4c:f0:09:17:f3:e4:ba:c3:f5:b4:fe:26:c9:ce:
                    a3:ed:81:f7:00:fb:3e:68:5f:4f:6a:4a:ec:e5:d3:
                    17:d9:70:6a:3c:22:af:0a:16:81:2a:df:45:6a:da:
                    75:ce:40:7a:38:e3:aa:07:26:bc:23:da:87:b7:73:
                    7b:99:0a:2f:f0:87:54:08:76:6a:d4:5e:36:c3:da:
                    1d:43:45:cf:e8:db:72:7f:3e:9c:03:26:86:cf:64:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:26:EF:77:30:D6:F9:7F:9A:F2:41:C1:1B:32:5D:F3:4F:BB:E0:18
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:7c:2e:25:a6:48:bb:9f:d9:90:6b:66:0c:22:20:cb:47:32:
         fe:45:62:3f:d7:98:88:b6:58:22:75:77:0a:6d:8c:95:f0:c8:
         42:65:49:52:18:96:bd:0e:94:68:26:7d:47:bf:51:35:a8:7d:
         e0:74:2b:fa:ed:d9:2c:fa:d2:9d:8f:03:20:24:55:5c:65:46:
         b4:0b:aa:7d:17:70:ae:c4:d2:b1:e8:bf:a2:f6:2b:36:82:6a:
         32:6c:79:1b:67:ff:60:40:b9:a3:d7:bf:f4:bc:b3:d9:9b:dd:
         06:c3:a5:d9:70:b1:36:cb:2a:00:c1:81:65:0f:e2:c0:52:a1:
         04:e3:b0:4a:7d:98:1e:35:43:53:a8:95:1e:ab:77:0c:ed:9d:
         a0:54:ab:b3:5d:62:96:33:38:c9:84:c9:c4:92:32:5f:92:f8:
         f3:1c:bc:b2:34:3d:33:ac:9a:ea:dd:15:f3:11:9d:9c:b3:ad:
         16:dd:4b:9e:6e:8d:0d:ba:45:5f:86:a0:46:7c:ce:73:d5:f9:
         7b:49:e6:c2:d8:3a:53:2c:9a:83:d0:7b:cd:4a:25:bd:0d:98:
         a2:16:ac:69:85:54:52:8c:79:b6:7f:18:79:c5:97:17:3d:12:
         b8:e7:e2:36:63:d3:fb:d6:28:01:0a:2b:0f:1f:7e:6d:54:84:
         f7:f5:9a:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJuyiPQP8O4glaxqCWsVG4HoVuJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGOENFNDQ2NkQyMkE3MUFCRTYzQjExMzQ0OEExMUJE
MTZFMEY1RjAeFw0yNDA0MDMxODI1MjRaFw0yNTA0MDIxODMwMjRaMDMxMTAvBgNV
BAMTKEM0MjZFRjc3MzBENkY5N0Y5QUYyNDFDMTFCMzI1REYzNEZCQkUwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9L6HqcNF83q60+TajtnqeKi9y
NAkoWkEVe8XMJtashB/b80r+z0pOoR3pHoO7ovOEbHUi7xEVvfkKgAWscfnBlJUr
6Ywv6RbwQQINdxM8u30ZJkt2LEQycevAF6eginxBJgysFMpRXLBZJKBAu3OKbgEG
CKmkCmq5HtP3HMslKb62h5a8t9kFu4hsLg0xCzKaGSMVz8C3hrADZTazPbwZvUxi
pgFM8AkX8+S6w/W0/ibJzqPtgfcA+z5oX09qSuzl0xfZcGo8Iq8KFoEq30Vq2nXO
QHo446oHJrwj2oe3c3uZCi/wh1QIdmrUXjbD2h1DRc/o23J/PpwDJobPZG8hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxCbvdzDW+X+a8kHBGzJd80+74BgwHwYDVR0j
BBgwFoAUE/jORGbSKnGr5jsRNEihG9FuD18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEYxRW4xSGI2cUFVRmhDVmVCd29uNGZtRTVmNFkyYVFtbm0yNTZLcnky
SjkvMS8xM0Y4Q0U0NDY2RDIyQTcxQUJFNjNCMTEzNDQ4QTExQkQxNkUwRjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzRjhDRTQ0NjZEMjJBNzFB
QkU2M0IxMTM0NDhBMTFCRDE2RTBGNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hGMUVuMUhiNnFBVUZoQ1ZlQndvbjRmbUU1ZjRZMmFRbW5tMjU2S3J5Mko5LzEv
MzEzODM5MmUzMTMyMzcyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG9f8AwDQYJKoZIhvcNAQELBQADggEBALJ8LiWm
SLuf2ZBrZgwiIMtHMv5FYj/XmIi2WCJ1dwptjJXwyEJlSVIYlr0OlGgmfUe/UTWo
feB0K/rt2Sz60p2PAyAkVVxlRrQLqn0XcK7E0rHov6L2KzaCajJseRtn/2BAuaPX
v/S8s9mb3QbDpdlwsTbLKgDBgWUP4sBSoQTjsEp9mB41Q1OolR6rdwztnaBUq7Nd
YpYzOMmEycSSMl+S+PMcvLI0PTOsmurdFfMRnZyzrRbdS55ujQ26RV+GoEZ8znPV
+XtJ5sLYOlMsmoPQe81KJb0NmKIWrGmFVFKMebZ/GHnFlxc9Erjn4jZj0/vWKAEK
Kw8ffm1UhPf1mtU=
-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org