Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          o56e3+NYnTfKhXx5fmc7B28qNTqX9xogKgVwBsX29Y4=
Subject key identifier:   5C:37:CF:3C:94:7F:D9:B9:24:86:91:85:68:56:CE:18:E1:D2:B2:2B
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       273FD46D33C8F4E0FA233BBFB99A655F8D5F6211
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:23 +0000
ROA not before:           Wed 03 Apr 2024 18:25:23 +0000
ROA not after:            Wed 02 Apr 2025 18:30:23 +0000
asID:                     28234
IP address blocks:        189.127.195.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3f:d4:6d:33:c8:f4:e0:fa:23:3b:bf:b9:9a:65:5f:8d:5f:62:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:23 2024 GMT
            Not After : Apr  2 18:30:23 2025 GMT
        Subject: CN=5C37CF3C947FD9B9248691856856CE18E1D2B22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:75:b8:0a:60:c9:14:87:72:06:a8:0a:ab:
                    d6:c5:23:4c:7e:86:15:03:5c:90:28:c1:42:72:ba:
                    9e:10:b5:3c:53:bf:d3:c1:9c:99:64:e2:70:ac:b7:
                    98:36:c8:17:c9:ea:f2:ad:15:87:9c:70:29:c1:98:
                    89:82:d7:1c:07:dc:c0:3a:d9:fc:d5:c8:60:ed:89:
                    0f:c5:ca:fb:c9:ff:4d:99:95:15:0f:a7:64:ca:c2:
                    3b:83:1a:87:86:b8:ab:63:6e:bb:9e:82:63:cd:c5:
                    27:5a:18:96:07:d5:1c:a5:73:99:48:37:a1:a9:06:
                    14:a1:3f:d0:9c:da:5c:53:3b:ef:97:30:5f:4e:20:
                    11:95:56:ed:dd:90:3c:78:37:86:ed:92:80:ad:6c:
                    20:03:64:fa:7c:8a:17:85:ef:f6:df:5d:fe:24:61:
                    a9:e3:8d:88:c0:e1:60:e5:a2:55:1e:77:3a:38:78:
                    7c:d1:28:f6:23:83:f1:cc:38:d5:6c:e4:03:11:a1:
                    89:19:f6:dd:fa:9f:96:34:2b:aa:69:bb:64:d5:7f:
                    33:83:0c:b1:05:20:f8:29:47:0f:5d:c2:8e:74:40:
                    06:a2:ae:07:23:37:a0:fe:2e:a7:9a:95:cf:c6:48:
                    dd:14:0e:45:8f:ce:b3:fd:a9:5a:9d:9f:89:16:07:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:37:CF:3C:94:7F:D9:B9:24:86:91:85:68:56:CE:18:E1:D2:B2:2B
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:fd:01:34:f0:8a:95:27:e5:9a:99:8b:97:43:f2:fa:59:
         b5:0b:96:d1:aa:59:ec:67:7d:da:0f:b9:79:b6:2b:1d:33:83:
         d1:0e:5c:e5:12:3c:31:a1:d1:7f:d0:4b:64:ba:ad:5c:5d:6e:
         f4:cf:b3:13:2f:e7:c7:13:c0:d0:b0:d1:7d:9b:5a:32:99:d7:
         43:77:d2:52:0c:0d:43:15:ae:5f:1b:42:fb:56:a6:22:78:e3:
         df:da:48:84:93:84:9d:a9:14:d9:e9:be:d3:b8:74:4d:28:95:
         a2:1e:d6:1d:ac:b0:a7:cf:d4:e2:26:9b:cc:ce:14:05:a3:2e:
         ae:b8:a2:b0:9c:34:82:e5:75:8b:19:50:0c:bd:d3:e5:04:0a:
         96:14:c6:ef:3e:34:2e:a0:33:18:94:6a:f0:a4:54:bd:53:60:
         75:1e:ef:3d:d1:2e:8e:a5:c2:23:2c:74:61:d9:5a:03:6d:56:
         66:60:29:8f:92:d6:55:9d:6c:9a:e9:f8:9c:3d:19:d1:fb:61:
         f4:ab:b7:dc:f9:fb:f3:1f:67:db:69:a5:94:88:29:6b:64:28:
         94:b1:61:aa:17:a7:2e:fc:db:0e:c6:02:0d:59:d4:91:58:67:
         39:17:6e:8b:9d:0d:c3:73:0f:b4:30:1d:c4:26:e3:e5:8e:b5:
         7b:29:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org