Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230322e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230322e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          F9ehO90hlrF1H5DVC08BI+1EO4GD4HIAqoJa064tVP0=
Subject key identifier:   7D:5B:FF:0C:F2:1D:BB:A1:0B:6D:4C:3B:90:77:B4:3B:4D:F5:27:6A
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       6C435F1D60159749B224746049F1D7D96AC6C71B
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230322e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:20 +0000
ROA not before:           Wed 03 Apr 2024 18:25:20 +0000
ROA not after:            Wed 02 Apr 2025 18:30:20 +0000
asID:                     28234
IP address blocks:        189.127.202.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:43:5f:1d:60:15:97:49:b2:24:74:60:49:f1:d7:d9:6a:c6:c7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject: CN=7D5BFF0CF21DBBA10B6D4C3B9077B43B4DF5276A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:31:09:4e:da:b7:eb:12:e0:1c:0a:ba:d4:
                    03:0d:34:f6:58:73:08:13:e3:7b:6f:ff:fe:b5:f4:
                    54:a9:da:41:22:8d:25:b3:bb:a9:3c:7b:28:94:c4:
                    75:8b:02:9b:bf:6c:20:cf:77:3a:2a:50:eb:a2:81:
                    d9:af:19:f7:06:7b:8b:e8:18:33:54:e3:27:9a:5a:
                    9a:11:36:73:7e:c8:66:5e:77:f1:79:15:b8:8a:6d:
                    1f:83:44:9b:2e:b6:6e:df:59:f3:99:f8:ca:1c:32:
                    ff:e0:1c:3f:1a:d7:4b:16:e0:49:9a:7b:4e:83:69:
                    68:bc:3b:86:6f:9d:17:e9:6a:9a:17:22:7c:3f:e7:
                    7b:41:66:5a:7b:70:fa:23:4d:8e:1c:a3:87:dd:66:
                    5c:f2:0e:a9:2b:ad:ac:8a:67:89:fe:a7:ce:83:73:
                    83:f9:90:38:30:8b:a8:ab:f9:98:e9:17:79:42:c3:
                    5c:1d:0e:0d:65:41:ce:84:09:3c:0e:5a:46:17:7d:
                    25:07:e9:4e:40:75:37:c0:35:39:db:c2:61:b3:58:
                    d3:17:70:89:67:49:7f:30:b4:94:20:4a:6d:9b:90:
                    39:f4:ec:28:4e:7b:29:d9:47:6e:d6:87:47:37:c4:
                    86:ba:f6:a4:4c:d0:95:d8:60:1f:f1:64:e5:f4:8b:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:FF:0C:F2:1D:BB:A1:0B:6D:4C:3B:90:77:B4:3B:4D:F5:27:6A
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230322e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ac:1b:70:d2:ea:d2:9a:40:44:9a:36:9e:d1:9c:58:37:a5:
         dd:62:dc:f5:75:3f:44:ad:1a:20:19:14:33:53:38:69:d7:52:
         d0:f0:a2:b1:a0:7a:cd:f5:2b:33:a5:b5:4a:a3:4e:20:4e:7b:
         77:69:1b:af:10:f3:ee:f3:69:18:08:fd:41:f3:d9:e4:84:18:
         39:4d:83:6b:8c:5b:45:d0:99:2e:a5:56:b9:36:c8:b5:55:6f:
         3f:2d:5e:35:00:2c:46:61:5a:bb:2a:3d:7a:9c:84:d4:59:4c:
         65:9a:6a:a1:35:62:aa:a3:38:f2:5c:45:1d:5a:f7:7f:90:2c:
         1c:39:5c:73:c3:48:a6:1c:9f:a6:50:f9:33:3b:0f:64:e0:2d:
         c3:41:4e:75:3f:ab:0a:a1:dc:98:7a:a9:81:9e:26:bf:f0:62:
         d8:23:0b:d7:f8:70:05:2f:c9:7d:22:04:9b:68:d8:0e:83:36:
         bf:d2:90:8e:57:e2:40:6d:20:82:72:db:20:3a:d6:44:49:cd:
         c5:97:5e:95:f5:3d:9c:00:53:06:a8:d9:a0:3a:f8:d3:ff:1e:
         e1:2a:83:f0:ce:a0:f9:e8:17:76:c5:f2:4a:9e:ff:b0:af:e9:
         d1:2b:49:76:d9:ce:0b:d0:04:d0:2f:2e:f3:4d:51:a2:7f:a5:
         d8:42:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org