Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          LRd1aqwnfnqKQFkcLThOyXRKaHQFuH7D4c44jSfJMyE=
Subject key identifier:   46:04:15:E2:46:59:E6:6B:EF:7E:44:57:51:AB:D8:61:E3:1F:55:F4
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       01AB90EA48C6771A58E61C29996A2BB58A2AC4B6
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:22 +0000
ROA not before:           Wed 03 Apr 2024 18:25:22 +0000
ROA not after:            Wed 02 Apr 2025 18:30:22 +0000
asID:                     28234
IP address blocks:        189.127.199.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ab:90:ea:48:c6:77:1a:58:e6:1c:29:99:6a:2b:b5:8a:2a:c4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=460415E24659E66BEF7E445751ABD861E31F55F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3c:0d:01:f3:cf:8b:1a:ec:a5:a1:56:70:ee:
                    82:b8:35:c3:cd:09:5e:da:33:de:7c:a0:6e:16:e8:
                    e8:92:b6:ff:34:d7:62:f1:dd:aa:1d:5d:e5:2c:ac:
                    9c:d0:ad:f7:71:63:9b:8e:96:b8:77:61:b2:15:55:
                    00:29:de:e8:83:74:59:dc:b9:01:3b:37:f7:40:4d:
                    a5:51:c4:c2:63:16:b2:d7:84:86:29:c4:7f:c6:71:
                    55:e5:09:5f:fd:8d:2c:7c:61:bc:bd:49:83:db:6c:
                    de:9c:a0:c9:94:98:75:5a:57:f9:12:9d:64:7c:bb:
                    66:22:75:75:68:e6:db:55:3e:20:18:f2:7d:50:72:
                    a5:ca:4f:a8:ad:5c:fe:3e:31:7f:6a:00:1c:ce:00:
                    73:f9:b6:ca:1c:89:5c:bd:47:00:54:8d:e8:af:38:
                    37:ba:5b:cf:42:45:51:32:d2:e4:1d:90:e8:2a:49:
                    f1:4e:53:0b:e2:a8:19:0e:05:6d:16:69:84:75:64:
                    6c:dc:1f:d7:81:0d:df:92:d4:5f:f9:38:9e:dd:fe:
                    56:62:d5:df:94:b3:9a:c2:b0:ee:e2:58:65:3f:d7:
                    01:89:d8:9a:7f:52:0a:74:73:23:26:35:79:30:9b:
                    e8:97:89:e6:8e:09:bb:8b:68:cc:93:cd:b7:43:e1:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:04:15:E2:46:59:E6:6B:EF:7E:44:57:51:AB:D8:61:E3:1F:55:F4
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:48:5f:d1:ea:48:19:24:f3:a5:e8:c8:d9:49:06:ca:16:f3:
         45:d8:d7:66:35:d6:db:13:d1:a1:0e:37:0b:d2:c9:e9:a6:73:
         f4:9d:70:65:d0:1e:44:00:9a:1f:0c:4c:fa:15:cb:64:6e:db:
         28:db:b6:fd:ef:0d:b3:8f:7c:33:0e:21:48:d9:5f:b3:b0:c7:
         79:b8:f5:cc:2e:01:91:1a:0e:d0:35:95:4b:a4:20:bd:30:19:
         43:c6:93:b2:29:dc:1f:7c:5d:64:53:08:ff:77:8b:46:c3:9d:
         62:97:6e:15:e9:a2:a6:96:32:dd:3d:de:2e:ec:c7:a6:92:22:
         3c:82:98:20:2d:4b:f5:97:e4:38:b3:98:78:de:0f:9e:d8:0d:
         f2:06:2c:f9:d0:ce:84:82:3f:d3:ad:5b:f8:33:e1:24:01:c9:
         7d:1f:cd:b8:d3:42:3c:96:78:40:d3:89:08:f4:7b:95:ff:3d:
         fc:53:39:c3:b9:17:34:bf:ce:2b:3b:da:82:f0:fb:7e:04:c8:
         fa:ca:f1:9c:0c:a5:1b:7d:0b:a7:70:e4:bb:80:a4:1f:c9:79:
         cc:6b:b1:e0:ae:2f:07:4d:b8:06:6a:bc:31:13:86:43:b0:30:
         f5:90:fc:9f:d5:95:d4:11:ae:0d:99:65:a4:41:11:5e:83:f0:
         0f:3d:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org