Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa
File:                     3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa (raw, json)
Hash identifier:          JQnlfYc5MzsxZgeMAykCH/G029M7sJDfUp961uHxtfs=
Subject key identifier:   3F:D1:BD:57:ED:CE:08:24:3E:FC:A1:37:F9:A1:22:75:88:C8:1E:D6
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       16B6495EFD1C2AA7933995F7A83BA0BA4CCFD18E
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:21 +0000
ROA not before:           Wed 03 Apr 2024 18:25:21 +0000
ROA not after:            Wed 02 Apr 2025 18:30:21 +0000
asID:                     28234
IP address blocks:        189.127.196.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b6:49:5e:fd:1c:2a:a7:93:39:95:f7:a8:3b:a0:ba:4c:cf:d1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:21 2024 GMT
            Not After : Apr  2 18:30:21 2025 GMT
        Subject: CN=3FD1BD57EDCE08243EFCA137F9A1227588C81ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:b4:40:77:45:65:92:ca:1f:4d:dd:58:74:
                    c9:7c:59:44:a6:36:57:64:f7:d2:ba:c5:c0:9a:c9:
                    0a:f9:d7:d8:9a:f9:0d:9d:a2:eb:6b:ef:e6:53:63:
                    39:9c:58:a1:88:56:c8:0b:85:18:75:85:c8:6e:40:
                    dd:52:11:5f:7b:8b:1d:b3:8c:d0:0a:a2:ad:0d:95:
                    8b:7b:f3:46:ba:53:89:77:a0:36:0a:a4:0b:cb:8b:
                    6b:fe:89:68:f0:d2:42:20:57:fd:48:33:7a:2c:a9:
                    8e:ba:26:cf:9a:da:bf:e3:d9:0b:8e:7a:34:a3:02:
                    11:e7:ef:1e:cd:16:7f:81:27:16:64:8d:30:2e:5c:
                    e7:5b:9c:1e:d7:e9:03:dc:53:e0:76:2b:af:80:3b:
                    04:7b:2f:df:d7:f5:84:bf:05:aa:23:e5:9e:b7:aa:
                    0c:c6:1a:e8:de:dc:95:6b:2e:29:61:36:4a:47:c1:
                    a2:65:2b:9f:f6:93:75:d8:37:b2:84:4b:e3:dd:72:
                    7a:75:08:d9:bf:28:b0:1b:36:62:3c:91:78:77:af:
                    7b:6e:7c:d1:1e:7c:dc:ab:5e:45:af:e2:f6:56:54:
                    72:3b:b4:06:1e:b2:2b:19:f0:db:af:a7:6f:2b:cd:
                    fd:86:cd:a4:e8:94:d7:3a:06:3c:97:72:d2:e0:a2:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D1:BD:57:ED:CE:08:24:3E:FC:A1:37:F9:A1:22:75:88:C8:1E:D6
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:95:a4:ce:85:64:94:a5:8d:79:23:70:95:ff:cc:19:9d:
         69:34:7e:c2:84:1b:9e:58:36:31:35:8f:9c:52:d7:7b:e6:fc:
         76:68:ff:41:07:55:a6:24:8a:b9:1e:0f:96:b8:f6:30:9a:4c:
         38:08:46:d8:cf:4b:86:13:69:6a:c0:be:4f:a9:84:b6:b8:a4:
         9a:03:7b:f9:42:3d:7f:6c:66:28:91:04:97:6f:81:8f:7a:db:
         d2:a3:e5:3b:5b:89:54:cd:58:7c:a9:3d:e3:12:9c:06:e0:c4:
         f0:c6:8b:cb:57:a2:d1:55:46:50:a4:8f:c4:01:ab:9a:ca:4a:
         f5:3f:91:50:5c:6a:98:25:ed:96:fa:df:2e:d8:cb:a2:7b:46:
         6a:52:d8:ab:d9:bd:10:84:24:7f:38:fa:ed:79:af:fc:91:7f:
         e9:85:ce:1b:57:23:3b:c8:5b:c5:d0:f6:87:61:e9:51:56:ed:
         db:33:cc:cb:e0:22:ed:da:42:94:72:c7:d1:bd:e9:aa:8a:37:
         a2:e8:a4:56:a9:09:2f:4f:ba:4c:05:73:a4:0f:0d:ff:6a:83:
         7a:6e:af:d1:f5:cc:55:98:cb:84:9b:db:76:51:bd:68:6b:4c:
         3f:b1:12:48:a2:b2:61:e8:fa:a2:5a:27:7e:bc:fd:22:08:5c:
         9c:06:7f:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFrZJXv0cKqeTOZX3qDugukzP0Y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGOENFNDQ2NkQyMkE3MUFCRTYzQjExMzQ0OEExMUJE
MTZFMEY1RjAeFw0yNDA0MDMxODI1MjFaFw0yNTA0MDIxODMwMjFaMDMxMTAvBgNV
BAMTKDNGRDFCRDU3RURDRTA4MjQzRUZDQTEzN0Y5QTEyMjc1ODhDODFFRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdLRAd0VlksofTd1YdMl8WUSm
Nldk99K6xcCayQr519ia+Q2doutr7+ZTYzmcWKGIVsgLhRh1hchuQN1SEV97ix2z
jNAKoq0NlYt780a6U4l3oDYKpAvLi2v+iWjw0kIgV/1IM3osqY66Js+a2r/j2QuO
ejSjAhHn7x7NFn+BJxZkjTAuXOdbnB7X6QPcU+B2K6+AOwR7L9/X9YS/Baoj5Z63
qgzGGuje3JVrLilhNkpHwaJlK5/2k3XYN7KES+Pdcnp1CNm/KLAbNmI8kXh3r3tu
fNEefNyrXkWv4vZWVHI7tAYesisZ8Nuvp28rzf2GzaTolNc6BjyXctLgoirFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP9G9V+3OCCQ+/KE3+aEidYjIHtYwHwYDVR0j
BBgwFoAUE/jORGbSKnGr5jsRNEihG9FuD18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEYxRW4xSGI2cUFVRmhDVmVCd29uNGZtRTVmNFkyYVFtbm0yNTZLcnky
SjkvMS8xM0Y4Q0U0NDY2RDIyQTcxQUJFNjNCMTEzNDQ4QTExQkQxNkUwRjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzRjhDRTQ0NjZEMjJBNzFB
QkU2M0IxMTM0NDhBMTFCRDE2RTBGNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hGMUVuMUhiNnFBVUZoQ1ZlQndvbjRmbUU1ZjRZMmFRbW5tMjU2S3J5Mko5LzEv
MzEzODM5MmUzMTMyMzcyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9f8QwDQYJKoZIhvcNAQELBQADggEBAC9plaTO
hWSUpY15I3CV/8wZnWk0fsKEG55YNjE1j5xS13vm/HZo/0EHVaYkirkeD5a49jCa
TDgIRtjPS4YTaWrAvk+phLa4pJoDe/lCPX9sZiiRBJdvgY9629Kj5TtbiVTNWHyp
PeMSnAbgxPDGi8tXotFVRlCkj8QBq5rKSvU/kVBcapgl7Zb63y7Yy6J7RmpS2KvZ
vRCEJH84+u15r/yRf+mFzhtXIzvIW8XQ9odh6VFW7dszzMvgIu3aQpRyx9G96aqK
N6LopFapCS9PukwFc6QPDf9qg3pur9H1zFWYy4Sb23ZRvWhrTD+xEkiismHo+qJa
J368/SIIXJwGf1A=
-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org