Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          4npLvdZ9jt3Rvd/R/HZLquKGGjfD4W8mcm5h7Cn59H8=
Subject key identifier:   27:BC:FD:D6:BF:90:FC:8F:AE:7D:4C:1D:98:7D:F6:BF:9C:8A:E3:57
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       13C5F3BE4CB86FDECF57AC095CBF561F13657219
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:24 +0000
ROA not before:           Wed 03 Apr 2024 18:25:24 +0000
ROA not after:            Wed 02 Apr 2025 18:30:24 +0000
asID:                     28234
IP address blocks:        189.127.198.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c5:f3:be:4c:b8:6f:de:cf:57:ac:09:5c:bf:56:1f:13:65:72:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:24 2024 GMT
            Not After : Apr  2 18:30:24 2025 GMT
        Subject: CN=27BCFDD6BF90FC8FAE7D4C1D987DF6BF9C8AE357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:cd:cf:15:18:39:36:39:39:b3:d5:6c:94:
                    86:7c:3a:9c:92:33:c7:a1:7b:ba:da:79:05:ba:37:
                    10:eb:ed:fa:7a:4d:9e:ee:aa:cc:a9:9f:ad:a7:e2:
                    87:c9:a8:fb:34:27:c9:83:46:a7:a8:54:14:49:3d:
                    34:fb:46:01:89:b3:dd:55:ab:12:30:df:26:8a:0b:
                    79:68:f9:fd:54:08:a5:37:87:37:26:40:a1:15:98:
                    e9:30:74:c3:99:a8:d6:df:46:64:91:9f:44:76:29:
                    b2:cc:41:d8:94:b0:1b:bc:e2:1f:61:ee:43:f6:cc:
                    a9:49:52:7a:e4:45:06:f3:e6:82:7b:36:e4:89:06:
                    b9:a8:85:b0:f4:5b:51:dd:88:fe:e0:fe:c2:78:e1:
                    40:da:e3:44:8d:ed:f1:de:ca:d4:6e:38:20:52:2e:
                    77:7f:90:8f:02:52:26:c7:a2:7d:f2:c7:4b:df:82:
                    ad:b4:6e:fe:d7:02:b7:2c:a1:3a:65:fe:32:96:3a:
                    8e:b9:54:ee:29:b2:94:92:6d:dd:15:3d:3a:b4:3a:
                    56:a2:da:56:c1:dd:bd:05:97:16:ff:0a:be:55:3a:
                    73:9b:7f:51:3e:8e:20:2d:2e:7b:f1:ac:43:10:ab:
                    73:38:b5:f8:5b:10:31:32:bc:32:42:27:73:2d:bf:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BC:FD:D6:BF:90:FC:8F:AE:7D:4C:1D:98:7D:F6:BF:9C:8A:E3:57
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:6b:18:75:89:b3:42:cb:d7:b3:d1:cf:ef:77:82:8e:d9:
         ef:4e:33:51:c5:9e:27:6e:f4:1c:a0:b6:8d:70:1f:88:cc:8c:
         ec:a7:ff:ed:43:39:77:75:0b:37:6f:d1:b5:fb:f8:ba:35:74:
         2b:dd:cd:d9:87:f1:3c:86:e1:cd:3f:3f:44:7c:05:36:46:04:
         28:a9:49:74:72:a0:cb:0e:26:42:7f:76:88:81:a8:d5:c3:23:
         05:0d:e4:5d:2a:a3:38:84:6e:8c:38:37:26:4c:03:13:06:de:
         79:a6:91:be:3d:61:35:55:8e:4c:54:39:c5:88:5e:57:ca:50:
         37:4d:59:98:ad:56:84:75:4d:df:51:b8:fe:c9:02:ba:69:f2:
         bd:5f:28:c0:8c:b9:ee:de:a2:97:36:15:0a:24:24:4a:6c:59:
         14:00:ef:9c:f6:f2:14:bc:04:b8:0b:03:b1:b2:64:a8:40:75:
         85:db:7d:42:c6:9c:20:a8:05:f9:11:e1:2f:9f:0d:4f:59:3a:
         97:5a:7f:40:c8:98:2e:1a:75:6e:96:61:cc:b7:1a:fa:89:fd:
         12:20:af:68:06:31:65:aa:78:7a:35:e8:2a:1c:42:9d:62:13:
         8c:38:68:6c:c3:9e:ae:7a:82:d3:57:d5:b5:d2:cc:7f:9b:7c:
         9e:f6:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org