Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          0tP8/odrRAGgeWpI1E+jybgfFOxMwIdAh9C8EUtQE0I=
Subject key identifier:   A4:95:55:EA:71:03:9B:4F:68:12:76:28:88:2F:DF:20:78:D3:B0:E5
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       51FE47AE13E54DA309A3040B84944CAF7321D70C
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:20 +0000
ROA not before:           Wed 03 Apr 2024 18:25:20 +0000
ROA not after:            Wed 02 Apr 2025 18:30:20 +0000
asID:                     28234
IP address blocks:        189.127.200.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fe:47:ae:13:e5:4d:a3:09:a3:04:0b:84:94:4c:af:73:21:d7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject: CN=A49555EA71039B4F68127628882FDF2078D3B0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:34:b4:8d:c9:62:58:9d:a2:2d:62:90:5f:20:
                    43:94:7b:e7:98:15:f7:d9:7e:10:39:01:aa:e9:7b:
                    18:a6:41:1d:e6:94:20:37:b7:9a:4f:03:53:88:6d:
                    bd:16:97:bb:38:0f:89:27:e3:1c:86:3f:b9:96:e6:
                    50:17:e8:a9:db:4a:74:cc:69:85:a1:e2:1a:5d:71:
                    a6:e9:e2:fa:32:34:15:30:fe:87:2e:d7:46:c1:de:
                    26:fd:b7:60:c4:bb:81:e1:3d:bc:2b:72:38:8e:63:
                    08:0e:73:9a:fc:02:bc:00:51:0f:d9:d1:c9:44:19:
                    b0:c1:28:8b:7c:10:82:34:bf:48:88:fd:e6:1c:f7:
                    d6:79:e9:d3:a6:93:1b:fd:79:3b:51:44:0d:dc:b8:
                    13:34:ea:82:9a:af:c6:e2:23:6c:08:5a:6f:6a:ec:
                    54:69:04:30:62:cc:82:c7:6b:5c:b2:51:9c:45:2c:
                    a5:23:a6:5a:3e:9a:89:c1:39:09:ba:4f:8e:ec:cd:
                    27:ad:e9:1a:51:f4:03:2d:36:b0:11:01:78:9b:c3:
                    4d:94:28:79:c5:56:bf:e9:ec:52:77:fc:71:7d:4e:
                    44:ea:fb:9d:85:5b:82:2f:6a:9c:a0:14:ba:b8:a3:
                    b7:13:85:d5:55:e4:ab:c9:65:ae:1e:b7:28:8b:70:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:95:55:EA:71:03:9B:4F:68:12:76:28:88:2F:DF:20:78:D3:B0:E5
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:51:c5:12:82:cc:49:d4:fc:c8:de:be:82:b2:4b:4b:86:c0:
         cd:5b:0e:5a:f0:8b:68:71:a9:4d:c2:99:57:f8:fa:9d:57:be:
         6f:ca:99:67:65:7c:70:8f:a6:11:a0:f4:de:17:88:21:3c:a6:
         46:39:e6:80:06:1b:a2:fe:e8:82:83:40:fe:a2:7c:5e:d2:93:
         07:15:e9:b0:4e:f7:d6:d7:c2:99:d4:5a:2b:96:62:a7:55:99:
         85:41:df:49:37:28:24:3f:93:ce:0b:6a:f2:17:33:a8:6c:ff:
         76:1c:12:96:3f:6d:fd:5d:0d:cc:9f:1c:6c:d1:53:a4:67:ea:
         29:23:2b:c4:ca:5f:39:df:a1:4c:17:35:6f:15:26:ee:f9:c6:
         45:e5:3b:68:76:e4:2d:57:47:d0:f7:cf:fd:60:bd:42:cb:3e:
         a0:a2:ed:ac:3c:0a:43:33:1c:77:f3:4e:fd:14:37:87:75:f3:
         18:31:2b:da:c8:67:ae:7e:90:f5:07:4c:2a:69:ff:3d:35:70:
         82:35:90:0f:f2:9c:b7:da:02:b1:c4:2c:7b:97:4c:d1:50:f3:
         44:f7:4a:65:2e:71:58:6a:59:0a:91:34:eb:e0:0b:50:d0:e8:
         1c:03:4d:fc:6a:44:a7:41:1c:25:ad:9f:ec:2a:73:b5:4c:d6:
         2d:59:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org