Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          xSp8OlTn8MUhLgEmW2I5Fi6VvRdVYg9qV6AyZwRUTUU=
Subject key identifier:   D1:46:F7:37:06:FD:8F:94:8D:7C:53:B5:79:58:6E:AC:C0:03:1D:9F
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       264FAC58F4B7F56666A3133415CBFA7A4D217AFD
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:21 +0000
ROA not before:           Wed 03 Apr 2024 18:25:21 +0000
ROA not after:            Wed 02 Apr 2025 18:30:21 +0000
asID:                     28234
IP address blocks:        189.127.197.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4f:ac:58:f4:b7:f5:66:66:a3:13:34:15:cb:fa:7a:4d:21:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:21 2024 GMT
            Not After : Apr  2 18:30:21 2025 GMT
        Subject: CN=D146F73706FD8F948D7C53B579586EACC0031D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:1e:69:70:f3:8f:31:fa:53:9a:f8:fb:72:
                    b3:a7:04:9b:19:4c:f9:fe:a7:ec:15:a7:33:e0:aa:
                    c7:67:a1:dc:08:fa:1e:17:d6:7e:02:b9:95:b5:e4:
                    29:05:69:8d:20:1a:b5:da:83:ae:ac:6f:0a:dc:67:
                    80:51:6e:3d:51:cb:30:98:1e:bb:0a:fe:0b:e9:51:
                    08:90:6a:f2:3a:d7:e6:1e:03:25:02:20:80:dc:fb:
                    ee:d9:8b:95:f9:89:73:cc:5a:59:a7:68:2b:76:2e:
                    ee:37:bd:11:45:78:b2:ee:73:63:76:12:56:68:1e:
                    b0:b6:0b:9d:e1:8d:d6:20:ce:63:e2:06:bf:4b:bc:
                    96:f4:93:c1:3e:f8:8d:1b:e7:48:29:7b:95:fe:e2:
                    59:cf:9c:fc:a0:4d:71:80:cd:8a:f7:39:7d:f1:2b:
                    c7:2f:48:0f:75:85:df:cc:62:3f:cd:3d:11:dd:d5:
                    68:bd:e8:55:9f:13:fc:5a:3f:43:05:84:a2:2f:8d:
                    6a:74:14:ec:b2:29:3a:b0:89:b3:a8:8d:60:99:3e:
                    1c:cd:b0:07:5b:65:b0:39:ac:0f:89:27:21:65:51:
                    7a:e1:33:58:ef:11:d6:7c:e1:d4:71:97:b9:a2:0f:
                    ce:f2:9c:8e:ce:c9:26:af:36:66:be:00:a4:47:20:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:46:F7:37:06:FD:8F:94:8D:7C:53:B5:79:58:6E:AC:C0:03:1D:9F
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:21:8c:a7:28:2e:1e:60:c2:e7:d0:af:67:a6:59:7a:66:
         a0:67:e2:3c:83:7f:27:2f:b9:c4:0e:b7:be:bd:88:7a:55:1e:
         fb:2f:14:37:96:36:ce:7d:ac:c0:95:28:ed:b5:04:6d:5c:df:
         e4:d8:d4:9e:29:27:89:33:47:bf:26:12:9c:02:48:68:f1:77:
         fd:77:15:d3:93:de:54:dd:73:53:c4:4b:48:f6:73:96:fc:35:
         f8:99:d5:ac:d2:f5:6b:fe:99:11:32:5d:81:bf:76:ec:20:c3:
         71:84:28:cb:e6:ef:56:14:e8:d4:e0:9d:80:3d:ad:d7:ec:11:
         a4:71:3b:48:9f:a4:b0:39:dc:d8:94:b7:29:21:12:8d:61:24:
         ea:3d:80:b0:26:f0:8b:c1:f1:2f:f9:55:79:90:4b:4f:03:2a:
         80:a0:77:fb:50:25:47:bf:53:b2:2a:2f:4a:24:82:9f:65:4f:
         52:fc:32:53:fd:0f:ca:d2:9a:4e:2d:71:14:be:6c:b8:0f:b8:
         33:4d:11:c8:8a:32:33:82:c3:2c:b4:1d:9c:b1:40:77:6f:8a:
         41:3b:6d:30:2c:ef:00:02:3f:02:4c:b0:38:0f:fb:c2:b9:c5:
         bf:61:ef:ff:06:56:56:f2:d2:f9:b5:b9:0f:90:10:bd:ef:2a:
         09:71:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org