Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          OK/ArAcYXxxFFhCw6OGfFMu8KhsRfa2yjSBeggY5oWM=
Subject key identifier:   A9:58:F1:05:16:B9:12:A9:A1:85:FA:0E:AD:67:7A:91:2B:71:CA:62
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       383F2BA576FEF69927AC3D977E1C1354AE55A4F9
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:24 +0000
ROA not before:           Wed 03 Apr 2024 18:25:24 +0000
ROA not after:            Wed 02 Apr 2025 18:30:24 +0000
asID:                     28234
IP address blocks:        189.127.196.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3f:2b:a5:76:fe:f6:99:27:ac:3d:97:7e:1c:13:54:ae:55:a4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:24 2024 GMT
            Not After : Apr  2 18:30:24 2025 GMT
        Subject: CN=A958F10516B912A9A185FA0EAD677A912B71CA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:76:4e:d2:49:d6:0e:21:25:f3:dd:7b:f4:
                    a1:14:9a:22:ff:e9:4f:1e:ed:c7:be:d6:bb:72:fe:
                    87:e8:d8:63:35:a3:26:65:12:06:f5:3e:64:80:a3:
                    f4:c9:2c:b0:89:64:ac:70:c5:27:a7:09:56:a7:3d:
                    65:a6:4a:30:9e:49:37:0e:23:56:6f:fa:6c:3a:fa:
                    99:98:b0:b8:ef:15:09:ef:d3:5c:eb:53:9e:be:c6:
                    4b:31:bd:ea:b1:b1:c3:7b:19:35:0d:1d:1f:46:b9:
                    17:ac:28:29:e8:85:e7:13:07:29:11:ce:f1:2d:85:
                    1e:26:95:f9:6b:25:9f:4b:78:f0:f9:fa:2b:f7:0d:
                    79:1f:a0:68:5a:d8:66:c1:17:5c:d8:2c:00:01:47:
                    29:ae:fc:40:9d:14:7a:67:66:46:79:19:13:c8:e6:
                    16:d5:06:12:b5:5f:8f:8f:b3:50:b5:6c:49:2c:4c:
                    39:59:73:b6:aa:d0:e2:e1:d3:98:ed:8b:ad:3c:da:
                    50:5d:de:f5:b8:c2:af:30:4c:84:87:b4:40:ac:d1:
                    4c:5d:ca:22:ec:3a:df:a4:a3:56:9a:ed:51:e3:c8:
                    df:ea:55:cc:27:e7:e4:88:ef:29:65:d3:29:c7:2b:
                    b2:b5:23:d9:a1:68:5a:c1:e3:73:88:9b:fb:37:de:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:58:F1:05:16:B9:12:A9:A1:85:FA:0E:AD:67:7A:91:2B:71:CA:62
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:61:6b:6a:c9:02:fe:37:e6:01:3e:e3:10:ae:3e:80:81:
         8f:95:2e:ec:38:53:9c:70:18:7b:ba:98:ca:8b:26:08:13:aa:
         8b:3e:d3:73:83:a5:56:51:bf:15:7c:af:9f:65:29:be:4b:d7:
         5a:f2:89:12:49:ca:1f:2d:18:de:81:70:67:de:e3:72:f3:a5:
         bd:72:ac:be:dd:c7:6f:d2:62:16:33:02:2b:de:13:2d:19:5f:
         67:30:08:8e:bb:33:ef:d3:cf:7d:07:f7:ef:b9:8f:69:4e:26:
         be:38:a4:bb:f6:08:73:e1:e4:53:40:7c:b4:79:8d:18:ad:1e:
         6a:3e:87:b0:41:6b:61:1a:36:f6:a4:28:c6:e5:3e:47:38:e4:
         3c:24:b2:01:52:f7:0f:30:63:24:ac:17:de:88:e4:71:1b:af:
         18:86:9c:04:d4:c5:7f:bb:23:93:d9:fe:1e:b6:d1:40:10:d4:
         01:a6:43:28:ef:5b:84:92:59:45:9a:cc:38:aa:02:e9:9c:ab:
         9c:9e:30:af:34:8a:da:48:39:d5:50:fd:85:62:26:f3:ce:81:
         fd:31:43:50:bd:56:23:92:b6:6f:2d:86:af:83:7c:42:9c:3a:
         c3:c4:49:07:d1:a8:c7:8c:30:d4:97:b8:cd:24:b8:ac:86:66:
         a3:8b:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org