Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          K36jYS5s0xoZbIotBOjwm+0CxI+yAtuTMxKEHTERLXY=
Subject key identifier:   F9:97:99:B6:0D:D1:84:6B:B0:FF:2A:4F:52:3E:1A:FE:8D:D9:C6:1D
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       13FE9FF4390A80F49FE3BFE88BEA29A1ABED6291
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:21 +0000
ROA not before:           Wed 03 Apr 2024 18:25:21 +0000
ROA not after:            Wed 02 Apr 2025 18:30:21 +0000
asID:                     28234
IP address blocks:        189.127.198.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fe:9f:f4:39:0a:80:f4:9f:e3:bf:e8:8b:ea:29:a1:ab:ed:62:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:21 2024 GMT
            Not After : Apr  2 18:30:21 2025 GMT
        Subject: CN=F99799B60DD1846BB0FF2A4F523E1AFE8DD9C61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ec:e6:67:b7:f5:bf:48:cd:99:53:3b:54:f6:
                    62:26:65:c1:86:87:22:cd:fa:8d:72:ed:af:a2:06:
                    9e:6f:9c:ed:c5:98:d1:2f:c8:69:97:2b:06:c3:11:
                    d5:d9:6b:82:1b:79:35:a6:b8:0d:9c:5a:90:41:ae:
                    d6:fa:74:7e:70:9d:45:c9:bf:30:1d:80:41:e1:09:
                    90:55:ee:a7:75:90:5e:39:e9:8b:c0:86:89:e0:0b:
                    e0:81:5f:e3:04:40:9c:62:a8:ae:41:42:2c:0a:e6:
                    77:1f:53:23:e0:bf:f6:e2:3b:4b:00:fb:92:26:c3:
                    d5:8c:6b:bc:0a:b5:6d:90:41:49:df:f8:59:55:ef:
                    ee:02:40:d7:34:5f:e7:2d:68:9c:60:c2:93:b1:51:
                    11:a8:ca:d5:50:ed:f6:03:6f:a1:c7:11:5a:11:bb:
                    81:ab:c1:7e:52:79:bc:a4:5b:8f:64:c0:89:a8:eb:
                    f7:2a:91:ac:72:dd:e2:2d:58:05:8d:ae:40:5e:66:
                    b6:2e:f0:86:b3:3a:5a:69:12:98:b0:73:ad:78:ae:
                    17:4c:80:ef:19:f6:6a:31:73:75:6d:9b:aa:aa:a3:
                    0e:af:c7:90:2a:3f:d3:b3:c8:9b:3e:23:96:8b:12:
                    7d:fe:a5:0c:77:1b:e1:a6:38:f1:3b:b8:df:0e:a7:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:99:B6:0D:D1:84:6B:B0:FF:2A:4F:52:3E:1A:FE:8D:D9:C6:1D
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:f9:30:9d:f5:05:77:8a:04:02:88:cc:d8:15:f2:18:b0:78:
         e9:3f:e2:c3:3e:f7:53:57:2c:25:4d:68:a6:ff:81:d3:3d:25:
         34:4c:2d:f1:41:cd:79:a8:de:d5:fb:a9:cd:0d:30:01:19:64:
         ae:b6:14:8d:b7:00:6a:0c:1b:25:cd:82:a3:6b:58:da:47:84:
         94:ca:94:ca:c5:17:2a:74:4e:80:47:d2:59:39:cf:4c:db:bd:
         be:51:58:d2:4b:c9:f2:a4:4b:e5:38:f4:b6:a9:27:08:db:5f:
         e9:4d:ff:ca:c3:83:d4:e9:c7:1e:b7:56:13:23:88:72:78:ca:
         2d:4b:0a:ae:95:07:5e:d6:a2:62:3d:b2:94:61:67:8e:07:f8:
         18:06:9c:60:14:04:df:43:c8:1e:a3:d5:0b:1b:5b:c7:7c:c8:
         7b:f1:60:dc:a0:6d:63:db:6a:ec:66:af:fd:11:57:8e:f1:66:
         c4:f4:64:d9:ee:3e:f9:2b:05:1d:20:de:f2:10:42:06:e6:5d:
         cb:4e:72:9c:78:54:ed:47:db:a7:5b:a0:6d:9d:b0:c1:d2:06:
         7b:06:b2:a1:19:e7:25:30:6c:1b:54:31:7d:97:21:b8:21:0e:
         4e:e0:1f:d1:34:40:03:3b:7a:f9:b4:6b:46:9f:18:2f:b1:d8:
         be:71:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org