Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230312e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230312e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          dSX33PReamatVHHS+VgpfEL5Xo2srNDn5t+JAwkJbQI=
Subject key identifier:   B1:48:A1:AE:26:F7:9B:22:39:12:65:89:CE:06:D0:E9:ED:33:8A:84
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       7A9E356D54A5FAB8F15113D0908F73027AFB4328
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230312e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:23 +0000
ROA not before:           Wed 03 Apr 2024 18:25:23 +0000
ROA not after:            Wed 02 Apr 2025 18:30:23 +0000
asID:                     28234
IP address blocks:        189.127.201.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9e:35:6d:54:a5:fa:b8:f1:51:13:d0:90:8f:73:02:7a:fb:43:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:23 2024 GMT
            Not After : Apr  2 18:30:23 2025 GMT
        Subject: CN=B148A1AE26F79B2239126589CE06D0E9ED338A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:b6:9e:1c:9f:20:00:dc:bf:7e:7c:7d:af:
                    28:7b:c5:a9:06:f2:bc:d0:97:20:99:25:72:50:b0:
                    ea:39:62:a4:d1:18:33:07:83:fc:f1:9f:75:b3:30:
                    3c:94:d4:0f:96:0a:8e:97:23:1b:cb:04:4d:61:22:
                    9d:75:ba:a3:77:10:ab:9e:83:37:1c:b0:14:69:3b:
                    57:7c:d4:98:02:40:79:42:82:e5:e7:dc:0e:0f:bd:
                    c7:d4:4d:16:ec:ab:23:03:8e:fd:96:12:17:34:82:
                    2e:ec:2d:e7:29:b7:91:12:af:e8:ad:b5:12:69:f0:
                    d2:7a:ed:29:c7:08:d5:2f:9a:fb:28:a1:23:a3:fc:
                    99:8b:e1:23:17:83:37:92:46:f4:d3:04:25:b5:27:
                    6a:e4:3a:8e:e4:f0:17:5c:2f:52:8d:e1:3c:3c:75:
                    d7:cb:a9:c2:38:13:eb:ac:1d:e1:eb:06:31:05:dd:
                    23:ff:21:c6:02:e5:58:62:30:96:a3:7f:35:d6:77:
                    05:c3:40:57:dc:cc:4e:ad:8b:5c:c4:35:4d:05:b3:
                    25:58:63:9a:4f:20:83:a2:7f:cf:c2:53:c6:c9:26:
                    d4:82:33:01:62:a2:27:e8:2a:39:12:97:33:2a:6c:
                    22:c5:8f:52:7f:06:c2:74:18:17:e8:26:c7:59:2c:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:48:A1:AE:26:F7:9B:22:39:12:65:89:CE:06:D0:E9:ED:33:8A:84
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230312e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:f4:af:a7:e8:f9:97:da:65:99:fc:37:12:a9:d5:eb:eb:
         58:44:49:b8:a2:b4:63:0c:75:b4:10:9c:3f:d9:92:c3:40:53:
         6f:47:97:b3:31:eb:09:c8:22:2c:5f:40:94:aa:ac:1e:b2:63:
         58:d1:53:f2:70:6c:31:91:f0:c3:2d:60:ac:4f:4f:7c:0f:07:
         51:1e:46:94:19:1c:fb:18:44:56:40:5d:35:9d:78:0a:f8:95:
         46:08:ed:70:4c:6a:20:bd:06:06:be:33:a1:ec:9f:cd:6e:c9:
         fb:fc:a9:10:d9:cd:8e:22:22:54:21:ac:9f:93:8d:7e:11:08:
         63:92:8b:fc:02:6d:25:79:67:3e:39:09:c6:7b:fb:01:50:4e:
         a0:b2:31:9b:7e:43:ec:43:72:f4:ec:27:fe:3d:39:37:c2:40:
         a3:d4:d3:13:f5:5c:19:8b:f7:8a:ce:ef:0a:1a:ba:8c:18:7e:
         79:64:16:d2:52:11:c0:70:07:15:e2:31:34:76:24:6e:24:39:
         50:64:06:bf:b2:a4:5f:00:2c:77:41:61:29:8b:29:8c:9e:88:
         5d:c0:7e:06:67:9b:cc:81:3b:9c:63:08:90:c6:93:68:d0:6b:
         7f:80:e5:e8:88:7c:37:38:af:22:99:5f:49:ba:5a:d2:98:55:
         a2:47:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org