Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa
File:                     3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa (raw, json)
Hash identifier:          YgrjevToPPV1RdNMR+CEWYhRkskjDr7BGOmEZgphxnE=
Subject key identifier:   BC:16:FC:0D:B1:DA:D8:E6:2F:F0:69:F1:A0:E6:C4:BE:C3:0C:43:28
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       3A3C1FB9C859ADEE2C963F678E5015E2CC06601E
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:20 +0000
ROA not before:           Wed 03 Apr 2024 18:25:20 +0000
ROA not after:            Wed 02 Apr 2025 18:30:20 +0000
asID:                     28234
IP address blocks:        189.127.200.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3c:1f:b9:c8:59:ad:ee:2c:96:3f:67:8e:50:15:e2:cc:06:60:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject: CN=BC16FC0DB1DAD8E62FF069F1A0E6C4BEC30C4328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:71:d9:a7:71:0b:60:41:a0:cb:51:a0:1b:
                    4a:3a:b9:ad:07:cf:9c:81:ae:ad:97:ac:15:df:69:
                    87:ce:cd:dd:42:7e:4b:0a:62:68:02:ea:30:ef:24:
                    7e:91:63:8c:de:67:da:e6:d4:b3:8c:53:8d:80:69:
                    43:ca:2d:d1:e4:68:10:79:e4:43:41:17:e3:64:d8:
                    10:72:24:fd:20:82:e0:f4:22:a1:7f:49:6a:6a:37:
                    b3:8d:16:5c:f6:e7:55:1b:78:8a:f7:6e:86:44:be:
                    1f:6b:2a:22:11:ad:40:85:a7:71:54:b3:dc:d3:27:
                    46:fa:c4:10:fe:e3:73:55:99:10:b2:c2:6f:0c:a9:
                    c2:ae:7b:63:29:11:57:fb:68:e2:b6:0b:1b:35:0c:
                    e1:62:0c:b0:51:cf:9b:09:d6:87:c4:7c:53:07:4f:
                    51:1d:ae:39:a1:1a:13:e0:74:fa:07:c0:4e:61:f2:
                    fd:86:ef:63:14:e6:c9:77:43:e6:b3:60:f7:43:5f:
                    72:d6:2d:11:68:85:4d:f8:18:99:05:db:05:09:e5:
                    9d:20:ff:0c:f8:2e:4c:e0:67:2a:07:2d:f8:c3:b3:
                    c2:28:20:4c:55:ba:70:02:e8:55:27:c3:15:c0:55:
                    d7:34:60:25:5c:2c:71:1d:4e:48:67:7b:6b:50:37:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:FC:0D:B1:DA:D8:E6:2F:F0:69:F1:A0:E6:C4:BE:C3:0C:43:28
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:cf:15:76:24:bf:8b:2d:b5:a5:da:91:66:42:b2:7d:91:
         64:fd:6a:c3:3b:e6:e8:82:86:3f:85:74:e0:a6:38:a8:93:2e:
         fa:74:93:63:01:39:3d:8b:bb:76:4a:e3:6a:56:97:e4:52:88:
         f5:e6:3d:e2:e4:69:52:21:30:65:b5:a6:df:53:71:39:83:8f:
         2f:74:7e:0e:18:1a:d4:a8:a5:75:21:33:eb:75:6f:0c:73:c3:
         33:30:0a:4d:bf:f5:88:d4:01:1c:4e:ac:bc:f7:7e:bc:c3:75:
         6a:47:9f:62:47:9a:1c:97:84:4f:a8:0b:d2:99:82:c2:d4:4e:
         db:83:f1:d5:9f:70:2e:f2:c7:d0:af:9f:ec:1d:8f:5f:ef:d7:
         ea:40:47:f0:5c:c7:a0:3a:fe:4a:06:9e:ab:35:50:44:62:31:
         9c:ca:6a:f9:7b:f9:4d:86:04:b2:23:68:53:19:e5:99:3c:b4:
         f9:a1:cc:ca:43:76:3e:35:01:ee:0b:71:d8:3c:19:a5:50:10:
         97:e9:9f:d5:af:d3:fd:60:e7:c1:ed:a3:37:36:ea:f0:65:51:
         73:aa:57:74:bb:53:de:a4:fc:24:aa:50:9d:48:74:e1:9f:23:
         7b:78:cf:35:e9:7f:75:85:8a:04:f4:43:37:ae:d1:72:ce:c5:
         16:de:83:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOjwfuchZre4slj9njlAV4swGYB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGOENFNDQ2NkQyMkE3MUFCRTYzQjExMzQ0OEExMUJE
MTZFMEY1RjAeFw0yNDA0MDMxODI1MjBaFw0yNTA0MDIxODMwMjBaMDMxMTAvBgNV
BAMTKEJDMTZGQzBEQjFEQUQ4RTYyRkYwNjlGMUEwRTZDNEJFQzMwQzQzMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30XHZp3ELYEGgy1GgG0o6ua0H
z5yBrq2XrBXfaYfOzd1CfksKYmgC6jDvJH6RY4zeZ9rm1LOMU42AaUPKLdHkaBB5
5ENBF+Nk2BByJP0gguD0IqF/SWpqN7ONFlz251UbeIr3boZEvh9rKiIRrUCFp3FU
s9zTJ0b6xBD+43NVmRCywm8MqcKue2MpEVf7aOK2Cxs1DOFiDLBRz5sJ1ofEfFMH
T1EdrjmhGhPgdPoHwE5h8v2G72MU5sl3Q+azYPdDX3LWLRFohU34GJkF2wUJ5Z0g
/wz4LkzgZyoHLfjDs8IoIExVunAC6FUnwxXAVdc0YCVcLHEdTkhne2tQN3yhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvBb8DbHa2OYv8GnxoObEvsMMQygwHwYDVR0j
BBgwFoAUE/jORGbSKnGr5jsRNEihG9FuD18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEYxRW4xSGI2cUFVRmhDVmVCd29uNGZtRTVmNFkyYVFtbm0yNTZLcnky
SjkvMS8xM0Y4Q0U0NDY2RDIyQTcxQUJFNjNCMTEzNDQ4QTExQkQxNkUwRjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzRjhDRTQ0NjZEMjJBNzFB
QkU2M0IxMTM0NDhBMTFCRDE2RTBGNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hGMUVuMUhiNnFBVUZoQ1ZlQndvbjRmbUU1ZjRZMmFRbW5tMjU2S3J5Mko5LzEv
MzEzODM5MmUzMTMyMzcyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9f8gwDQYJKoZIhvcNAQELBQADggEBAB+lzxV2
JL+LLbWl2pFmQrJ9kWT9asM75uiChj+FdOCmOKiTLvp0k2MBOT2Lu3ZK42pWl+RS
iPXmPeLkaVIhMGW1pt9TcTmDjy90fg4YGtSopXUhM+t1bwxzwzMwCk2/9YjUARxO
rLz3frzDdWpHn2JHmhyXhE+oC9KZgsLUTtuD8dWfcC7yx9Cvn+wdj1/v1+pAR/Bc
x6A6/koGnqs1UERiMZzKavl7+U2GBLIjaFMZ5Zk8tPmhzMpDdj41Ae4Lcdg8GaVQ
EJfpn9Wv0/1g58Htozc26vBlUXOqV3S7U96k/CSqUJ1IdOGfI3t4zzXpf3WFigT0
Qzeu0XLOxRbegzI=
-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org