Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          7yGX/HZ3NYZEEoYbSjuuwPBSXFTbzF0nR8beLsBeEpQ=
Subject key identifier:   EC:4F:1F:2C:8B:A7:71:C0:71:34:F8:2E:AD:D9:B9:3F:2F:FA:D5:7B
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       52745407D2044DC188FA2434E0318CF5564D6410
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:24 +0000
ROA not before:           Wed 03 Apr 2024 18:25:24 +0000
ROA not after:            Wed 02 Apr 2025 18:30:24 +0000
asID:                     28234
IP address blocks:        189.127.200.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:74:54:07:d2:04:4d:c1:88:fa:24:34:e0:31:8c:f5:56:4d:64:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:24 2024 GMT
            Not After : Apr  2 18:30:24 2025 GMT
        Subject: CN=EC4F1F2C8BA771C07134F82EADD9B93F2FFAD57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:6a:93:81:37:d0:fa:61:e8:56:1f:53:15:
                    4d:11:68:0e:05:94:e2:f0:29:83:9d:2e:e7:d1:dc:
                    ba:54:bb:27:d2:05:68:2b:d1:1e:4f:55:52:53:53:
                    c1:eb:72:b8:18:93:29:26:5e:58:7e:ca:b1:7f:ab:
                    e6:a9:15:7b:bc:cc:5c:15:0d:26:ec:73:02:44:67:
                    51:9a:2e:0d:a9:a6:ff:3f:08:8d:92:2f:cd:64:34:
                    41:e8:ae:24:b5:e0:4e:7b:0d:b0:ec:91:6a:fe:8f:
                    29:98:55:4e:c6:ac:d0:0e:28:f1:8c:08:51:b7:36:
                    3e:f4:ad:ab:19:be:97:bb:af:d6:7c:42:2a:74:8d:
                    61:c6:8a:ea:6e:ee:e4:a0:d2:a5:41:7d:1d:92:f5:
                    8b:73:a9:7e:8b:c6:95:f8:14:d5:66:79:99:4d:1f:
                    f8:f2:7f:5a:60:3e:11:a6:9b:ef:bc:9d:b5:07:e0:
                    8a:bd:f8:0a:fc:02:fa:91:08:74:c3:10:50:01:39:
                    59:96:28:04:4a:4e:73:f8:ca:b6:d6:ad:ab:a2:aa:
                    e5:8c:4e:93:32:3a:91:2d:90:b4:a0:eb:ac:f5:7a:
                    29:3d:0b:6b:d5:0c:3c:e5:22:26:40:cd:10:9a:c9:
                    5d:81:46:78:b5:a9:2c:ab:20:a4:69:01:b1:26:db:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:1F:2C:8B:A7:71:C0:71:34:F8:2E:AD:D9:B9:3F:2F:FA:D5:7B
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:b8:04:c5:89:32:4d:4d:7d:1f:fd:1f:a2:f4:e9:81:e2:
         a8:f9:1d:6d:05:b9:1c:99:6b:12:39:ff:f2:5e:3a:72:0f:4c:
         27:95:57:75:16:f1:af:e2:41:cc:77:9d:89:ec:7f:05:ad:3e:
         5a:8e:34:3c:9e:e9:8d:85:6e:39:41:04:b6:98:cf:47:68:70:
         cb:85:3d:7f:21:31:41:7b:e8:84:7d:17:0c:9b:55:60:78:9f:
         7e:24:9b:0d:1e:07:16:44:c8:84:76:7b:be:2a:90:a0:8a:99:
         cc:95:83:bb:d5:c2:dd:3f:1c:08:5a:a6:50:d4:b1:4b:c1:d0:
         11:af:74:e9:83:92:81:bb:a8:74:0a:54:8f:29:b9:91:f2:db:
         3b:43:e3:8c:dc:a8:36:c7:07:b0:b7:c4:d5:a2:9b:16:18:73:
         79:1e:f8:59:65:6d:01:c6:96:b4:20:a4:fa:d6:0e:5c:5c:63:
         dc:3d:4b:7a:47:43:9c:48:b5:97:cb:f9:fb:dd:49:31:ee:ac:
         7a:48:1a:b4:d4:0d:a1:df:a8:dc:01:22:b7:57:de:25:1e:ce:
         de:c4:18:ec:bf:a4:cc:5b:44:73:c3:2f:30:90:26:1d:e8:99:
         cb:73:a5:55:5d:5f:91:cb:80:0d:1c:9c:27:85:9b:83:18:4c:
         b8:b1:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org