Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          3gRFcCYuzZB+GqcBCDn0szMFJVmW6yc9NUqSvvHqyhg=
Subject key identifier:   6F:56:B6:6E:4D:06:E5:76:54:B2:14:6A:62:B6:81:7A:E6:91:B3:AF
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       19F705DCD2810355DCDC1D2117436F0CC1D26EBF
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:24 +0000
ROA not before:           Wed 03 Apr 2024 18:25:24 +0000
ROA not after:            Wed 02 Apr 2025 18:30:24 +0000
asID:                     28234
IP address blocks:        189.127.196.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f7:05:dc:d2:81:03:55:dc:dc:1d:21:17:43:6f:0c:c1:d2:6e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:24 2024 GMT
            Not After : Apr  2 18:30:24 2025 GMT
        Subject: CN=6F56B66E4D06E57654B2146A62B6817AE691B3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:5a:27:32:ae:e6:49:e9:41:4c:a4:8d:62:
                    0f:26:f8:5d:1d:1e:3b:d1:8b:09:b8:60:30:ef:2b:
                    10:63:99:04:cb:64:97:3d:50:b7:8a:ef:85:cd:2f:
                    ca:02:2b:b9:bb:3c:28:57:fa:4e:d9:cf:87:4d:34:
                    e7:64:be:45:71:14:cd:e5:e5:0d:a9:8f:01:d3:85:
                    ef:ae:c1:43:8b:79:fc:2c:c3:ae:3d:13:af:81:3d:
                    9a:d2:a5:6d:7b:4c:9c:e0:0e:43:bb:42:3f:d9:f5:
                    98:11:5a:5e:fa:98:ca:03:eb:1e:de:cf:90:c3:05:
                    a9:da:d0:d1:88:43:9b:98:3f:7b:f2:ba:31:dc:a6:
                    90:2d:8d:5e:51:e6:7d:96:2a:7f:16:3b:8d:c7:61:
                    05:ba:66:64:04:bf:f1:cf:ad:74:57:2d:98:14:e2:
                    8d:32:ed:00:4d:cd:d6:36:72:5c:04:6d:5d:86:ed:
                    d9:30:e6:09:d7:77:33:93:77:e4:28:03:8c:79:3f:
                    40:15:a5:95:cc:f4:b8:cc:a0:b5:52:6e:bd:69:08:
                    22:c5:20:bf:27:04:b8:df:75:5d:55:0f:32:f4:40:
                    ee:c9:e5:ad:06:96:af:1f:88:1c:ab:d5:6b:51:b1:
                    a6:2e:ae:d5:83:ce:eb:a8:6a:c2:bf:30:b4:63:9f:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:B6:6E:4D:06:E5:76:54:B2:14:6A:62:B6:81:7A:E6:91:B3:AF
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:43:7d:0b:2c:4f:0c:e0:80:43:8a:a7:91:ae:44:27:b9:b1:
         3a:7b:5f:da:d4:a0:cd:61:f3:5b:4e:14:40:6f:11:2f:ab:31:
         6a:4e:fd:12:1a:c5:30:94:25:91:74:c3:9f:0c:a4:17:82:0d:
         69:8a:83:c1:9b:a2:b7:af:81:16:55:e5:50:78:70:e1:70:6e:
         5b:1f:fa:d7:de:33:88:96:38:87:56:72:b9:60:11:7e:b6:ef:
         6b:47:d2:e1:ad:f1:6f:35:f5:30:45:86:08:23:6f:d6:66:63:
         9f:32:09:93:db:cb:f0:b4:eb:58:0c:6f:eb:f4:4b:8b:6b:d7:
         be:5c:de:2f:48:d9:28:ef:7d:32:b4:97:98:5e:be:bb:fd:16:
         21:a3:37:c6:2d:e6:ff:7a:09:2f:30:ed:02:21:2a:34:b6:4c:
         82:62:20:99:ee:e8:da:78:07:6a:15:c5:24:cc:6c:f0:3c:78:
         5a:f6:ca:4c:59:30:e3:f4:fa:1f:22:ac:58:62:55:30:9c:5f:
         8f:ec:9c:57:f1:cb:0e:1f:a4:ba:ca:36:7a:64:6e:bf:fc:5e:
         d6:fc:d7:d4:d5:96:ad:37:8c:5a:b0:18:d0:a1:ef:e6:e5:2c:
         d1:9b:72:1b:67:ec:b5:65:fa:24:7c:ae:a3:c4:6e:76:64:9a:
         95:b3:94:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org