Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          PR6euOWPieULMXELdfnNKNbyVKpm9ZuFOqGqM2k4wzM=
Subject key identifier:   E3:6E:A5:D1:14:18:20:42:07:A6:48:43:95:58:C2:44:1E:70:34:DE
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       492407FB5FBE2FEB9CE9AF098C8859B3A207A25A
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:23 +0000
ROA not before:           Wed 03 Apr 2024 18:25:23 +0000
ROA not after:            Wed 02 Apr 2025 18:30:23 +0000
asID:                     28234
IP address blocks:        189.127.202.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:24:07:fb:5f:be:2f:eb:9c:e9:af:09:8c:88:59:b3:a2:07:a2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:23 2024 GMT
            Not After : Apr  2 18:30:23 2025 GMT
        Subject: CN=E36EA5D11418204207A648439558C2441E7034DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:8b:18:25:5b:71:bc:02:8e:a2:d4:f2:d5:
                    47:cf:b4:1f:9b:a4:bb:a3:05:f5:d5:96:3f:72:52:
                    fa:5b:fc:fc:51:35:01:27:2f:7e:af:ef:cc:2d:cc:
                    61:7c:0e:aa:03:56:b5:d7:d4:1a:c4:f9:ef:e2:d3:
                    b5:60:0c:8e:6d:ec:37:b9:52:db:66:66:d8:43:6a:
                    a0:de:a1:b9:45:0f:fb:56:07:17:e6:41:40:91:4d:
                    90:67:b7:64:c5:b5:38:f9:a0:cc:1a:22:d5:46:72:
                    8c:e8:77:db:57:25:d8:de:f6:88:52:d4:bf:ef:4e:
                    f7:7e:ba:26:61:d7:a7:a3:74:16:9b:08:83:f3:5b:
                    10:1b:5e:f7:44:f9:31:9a:31:ba:b7:70:f7:b5:29:
                    d2:ac:56:f3:16:e0:20:29:f3:49:53:6c:6b:94:bd:
                    38:af:56:b2:54:57:e5:9d:29:23:43:d1:90:31:ae:
                    fc:ff:87:5d:0a:cf:4c:cc:e1:50:6b:1f:e8:49:70:
                    dd:3f:e1:87:66:ea:98:02:9f:1f:f6:5a:d3:f0:59:
                    68:d3:f4:81:7c:70:fb:dc:de:99:c0:56:26:f8:c3:
                    23:a4:8c:64:32:10:98:ef:da:b7:62:72:c4:d7:7c:
                    dd:2a:19:db:aa:5a:a2:85:ef:b3:2e:a5:42:93:b2:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6E:A5:D1:14:18:20:42:07:A6:48:43:95:58:C2:44:1E:70:34:DE
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:ff:cc:fb:c4:99:c8:6a:e4:5a:b9:70:0f:14:5e:dd:62:67:
         f4:25:e4:d7:4e:6c:ef:89:d8:10:a0:c1:3c:15:fa:f7:c6:7d:
         ef:8e:07:38:af:61:91:59:13:b1:be:05:61:97:ec:b4:ab:2e:
         19:ed:da:5f:7e:2f:e2:57:78:d0:2b:4b:70:02:27:32:2f:8a:
         74:75:40:6f:b4:14:3c:70:f6:96:92:72:ca:2d:d1:88:01:11:
         ce:fb:37:e4:1f:88:24:e1:3d:59:d5:74:ac:cd:8f:f5:ad:97:
         c4:19:30:29:94:d2:18:73:5e:fc:3c:fd:fd:c6:78:65:c8:6f:
         07:c7:69:77:ed:79:c7:73:7d:d9:73:6a:af:74:65:9f:53:8e:
         05:ca:1a:c7:c6:5e:5f:47:b8:54:b8:71:73:b3:b8:07:6a:0b:
         5d:43:4a:bf:ff:2f:80:a7:c2:95:94:cc:dd:45:56:ac:19:76:
         9a:d9:57:17:8e:da:e1:ec:0f:02:ab:4c:9a:37:ef:2a:fd:dc:
         d2:60:a1:73:b7:e8:3a:25:02:fd:74:10:b5:40:ce:ef:5a:d8:
         fc:1a:14:d6:fb:4d:6f:bf:fe:a1:77:fb:90:55:4e:2e:1b:94:
         df:a9:11:84:4b:c9:d8:e0:7e:9b:0f:18:5c:7d:57:fe:c2:7d:
         3f:f3:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org