Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          +KMOvZwPd5+rI8DcpiEspCC7vSKhcxYHi1x0LVfNC5c=
Subject key identifier:   26:61:DA:0D:35:0B:95:EC:29:AC:FB:A6:50:96:C9:7D:8C:6C:EB:50
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       4174071760B9BA5D9C479155A205B006AB748574
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:22 +0000
ROA not before:           Wed 03 Apr 2024 18:25:22 +0000
ROA not after:            Wed 02 Apr 2025 18:30:22 +0000
asID:                     28234
IP address blocks:        189.127.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:74:07:17:60:b9:ba:5d:9c:47:91:55:a2:05:b0:06:ab:74:85:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=2661DA0D350B95EC29ACFBA65096C97D8C6CEB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:7d:dc:ae:ee:38:bd:c0:69:d2:70:40:c1:
                    53:14:92:7e:cc:ac:64:79:9a:6c:98:9e:38:2e:90:
                    2c:4c:9d:08:56:94:90:ec:42:53:8c:f6:97:10:41:
                    0f:a8:5b:b9:ca:05:88:bc:df:e7:10:f4:90:8b:ab:
                    4f:18:ba:84:cd:a3:d5:b0:c3:ad:c2:dc:d9:77:19:
                    e6:44:11:98:9d:7c:b1:08:ca:96:90:33:8f:fa:0e:
                    10:12:5d:8a:e5:b9:b0:28:28:b8:71:0b:64:54:fd:
                    6c:30:1d:d8:8c:44:5a:bc:1c:73:f0:4d:80:3f:4d:
                    fd:27:ed:14:9e:f3:83:bc:b4:7a:e7:5b:b7:25:6c:
                    0c:7b:5f:3e:7e:62:7e:3c:ab:81:0d:14:dd:16:05:
                    53:21:26:09:b6:64:25:eb:1e:c4:2e:f2:68:b2:35:
                    5d:bc:a5:ad:fc:27:f2:66:1a:a6:70:f4:16:f8:6e:
                    b8:66:96:01:46:75:f5:91:98:87:e7:d4:79:b1:53:
                    8f:6d:ed:1a:ba:72:98:03:e7:1b:9d:47:38:6e:b9:
                    ab:c1:07:4c:75:a1:89:86:ad:6f:41:d3:7c:e3:ef:
                    77:f2:d7:ac:7a:a7:ff:b2:77:1e:49:10:a9:45:9a:
                    02:7f:15:e4:0a:81:ce:36:1f:d5:d6:5a:24:c5:f8:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:DA:0D:35:0B:95:EC:29:AC:FB:A6:50:96:C9:7D:8C:6C:EB:50
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:3e:5c:b7:b2:a9:11:bf:f6:78:7c:30:8c:a4:0d:84:0a:
         d0:98:7f:10:96:d2:e8:0d:44:28:d6:76:e3:ce:87:37:a0:4f:
         71:8f:d2:d4:96:78:31:17:20:8f:74:ef:3c:bf:20:b8:eb:bf:
         bd:b1:64:b7:8b:2c:ac:a3:80:75:b9:08:d3:a6:e0:8d:8e:0f:
         00:0a:7c:6b:d3:7c:93:ae:c7:71:df:90:9c:b7:ee:be:f7:2e:
         b5:9b:1d:b8:fe:6b:05:91:3c:fb:5e:a0:65:9f:0f:2f:29:03:
         c1:06:b1:c2:a5:ec:6a:e9:08:c5:e0:e7:09:d0:c6:fc:ee:64:
         bc:38:3a:ed:3c:f5:8d:83:96:e2:d0:4a:8f:a0:f8:46:77:0d:
         29:42:fa:c0:f8:b4:5f:4d:3a:28:9f:dc:d6:ef:99:f2:91:71:
         10:27:ad:82:1d:74:2c:78:0d:75:c3:19:be:35:6a:4b:a1:1e:
         95:22:34:92:23:ad:99:05:6b:fc:ea:50:99:a2:66:21:52:fe:
         c4:b0:12:a2:5b:d5:d4:9e:1a:9a:37:36:f7:0e:bd:dc:56:b5:
         d1:12:9c:33:c2:d3:3c:cf:c3:9b:9a:37:a1:00:9f:b2:0f:00:
         cb:00:5d:26:b5:e1:f1:48:fe:88:cc:76:f6:7a:27:67:17:ad:
         df:23:c0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org