Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          3iFSSUaiGBx3i4NTk3kSRmk9Y99a6SXyIzPJb9+Z+eo=
Subject key identifier:   40:7A:61:08:D9:84:4A:1E:D6:14:64:F4:03:06:54:EF:61:68:78:B0
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       7626088CA002EF67B7A280B87A99876F7DD9EBC2
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:24 +0000
ROA not before:           Wed 03 Apr 2024 18:25:24 +0000
ROA not after:            Wed 02 Apr 2025 18:30:24 +0000
asID:                     28234
IP address blocks:        189.127.203.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:26:08:8c:a0:02:ef:67:b7:a2:80:b8:7a:99:87:6f:7d:d9:eb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:24 2024 GMT
            Not After : Apr  2 18:30:24 2025 GMT
        Subject: CN=407A6108D9844A1ED61464F4030654EF616878B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:41:09:33:e3:28:d9:f3:38:ca:3f:de:8c:
                    f5:32:c0:b3:16:09:e6:eb:e3:82:76:b4:32:ca:ac:
                    ea:67:75:e7:cf:f9:e2:2c:8b:15:6f:8e:e2:f5:a1:
                    94:9a:b9:ff:8a:c2:ea:f7:79:97:3e:36:7a:bc:ab:
                    0c:7c:04:79:53:e4:07:8a:b3:8c:56:92:a7:6b:ca:
                    6c:f2:1c:7c:e2:b8:0d:d4:4f:cb:e5:68:ea:c2:6d:
                    d6:2a:d5:dd:35:43:21:77:cb:a5:2f:6e:12:5d:4d:
                    f0:88:c2:19:a4:91:f2:e3:33:13:cc:cc:a6:f3:d0:
                    60:11:12:a5:14:68:cc:b5:0b:c0:3f:37:be:48:53:
                    68:c5:d0:34:5b:91:21:b5:e3:cd:34:79:71:2d:83:
                    12:9b:5c:5d:70:9d:2b:6d:95:cc:f4:b5:d5:a7:a1:
                    4f:99:57:be:d6:02:80:12:ac:29:e0:57:94:0f:09:
                    84:dd:35:7a:6f:12:ae:19:da:14:89:c7:73:24:59:
                    42:d0:7b:45:2d:20:68:49:e3:9d:05:d2:f9:08:3b:
                    4b:76:11:b9:9c:d7:32:4b:e2:05:1f:28:69:a3:54:
                    4f:8f:d2:bb:ad:af:01:bd:fd:64:90:15:41:90:38:
                    ba:44:f6:e0:fb:b0:0a:d1:cd:c6:78:e4:7d:37:23:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7A:61:08:D9:84:4A:1E:D6:14:64:F4:03:06:54:EF:61:68:78:B0
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:60:5e:96:61:84:3c:60:00:4a:c5:cd:02:a4:29:65:6e:
         33:70:b7:82:00:31:00:ea:68:53:ff:4f:f9:1a:ef:75:68:3f:
         4d:16:88:f9:98:9a:ac:5c:46:ef:ed:dd:e1:91:53:fb:78:57:
         b5:d4:ab:1a:38:4b:a6:b1:9e:32:87:d8:ad:65:47:e2:ae:20:
         6e:72:37:83:cc:c2:03:99:e1:46:1f:0f:61:f1:e5:c8:ac:03:
         03:fa:6d:93:99:be:22:75:72:c7:41:8b:a1:90:45:59:8a:74:
         b6:1b:da:65:76:f0:0f:0e:37:08:2f:24:e3:d8:37:22:52:8b:
         93:15:54:0a:83:23:f1:5b:15:70:dd:a3:14:40:a2:7f:7e:ca:
         a0:a1:a6:9c:9a:e9:f4:25:62:72:0c:dc:f7:45:2e:b9:14:f2:
         8d:9a:4e:30:a1:ad:12:e5:0f:06:55:17:4f:1d:3e:80:67:c5:
         e3:4c:6d:98:39:e4:e6:7f:08:df:ce:8e:b5:c6:14:6b:2d:0c:
         0d:ae:b2:fd:ba:72:4f:35:ec:e2:3e:b2:2c:e9:b6:bc:d1:13:
         17:c7:4b:f2:85:9d:7d:cc:94:9b:21:34:40:46:8c:89:b0:75:
         e3:9f:ca:40:7f:b8:d5:e7:a8:ea:80:c2:03:48:e2:7d:55:c6:
         b2:41:c4:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdiYIjKAC72e3ooC4epmHb33Z68IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGOENFNDQ2NkQyMkE3MUFCRTYzQjExMzQ0OEExMUJE
MTZFMEY1RjAeFw0yNDA0MDMxODI1MjRaFw0yNTA0MDIxODMwMjRaMDMxMTAvBgNV
BAMTKDQwN0E2MTA4RDk4NDRBMUVENjE0NjRGNDAzMDY1NEVGNjE2ODc4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/skEJM+Mo2fM4yj/ejPUywLMW
Cebr44J2tDLKrOpndefP+eIsixVvjuL1oZSauf+Kwur3eZc+Nnq8qwx8BHlT5AeK
s4xWkqdrymzyHHziuA3UT8vlaOrCbdYq1d01QyF3y6UvbhJdTfCIwhmkkfLjMxPM
zKbz0GAREqUUaMy1C8A/N75IU2jF0DRbkSG14800eXEtgxKbXF1wnSttlcz0tdWn
oU+ZV77WAoASrCngV5QPCYTdNXpvEq4Z2hSJx3MkWULQe0UtIGhJ450F0vkIO0t2
Ebmc1zJL4gUfKGmjVE+P0rutrwG9/WSQFUGQOLpE9uD7sArRzcZ45H03I6+pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQHphCNmESh7WFGT0AwZU72FoeLAwHwYDVR0j
BBgwFoAUE/jORGbSKnGr5jsRNEihG9FuD18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEYxRW4xSGI2cUFVRmhDVmVCd29uNGZtRTVmNFkyYVFtbm0yNTZLcnky
SjkvMS8xM0Y4Q0U0NDY2RDIyQTcxQUJFNjNCMTEzNDQ4QTExQkQxNkUwRjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzRjhDRTQ0NjZEMjJBNzFB
QkU2M0IxMTM0NDhBMTFCRDE2RTBGNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hGMUVuMUhiNnFBVUZoQ1ZlQndvbjRmbUU1ZjRZMmFRbW5tMjU2S3J5Mko5LzEv
MzEzODM5MmUzMTMyMzcyZTMyMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9f8swDQYJKoZIhvcNAQELBQADggEBAGCbYF6W
YYQ8YABKxc0CpCllbjNwt4IAMQDqaFP/T/ka73VoP00WiPmYmqxcRu/t3eGRU/t4
V7XUqxo4S6axnjKH2K1lR+KuIG5yN4PMwgOZ4UYfD2Hx5cisAwP6bZOZviJ1csdB
i6GQRVmKdLYb2mV28A8ONwgvJOPYNyJSi5MVVAqDI/FbFXDdoxRAon9+yqChppya
6fQlYnIM3PdFLrkU8o2aTjChrRLlDwZVF08dPoBnxeNMbZg55OZ/CN/OjrXGFGst
DA2usv26ck817OI+sizptrzRExfHS/KFnX3MlJshNEBGjImwdeOfykB/uNXnqOqA
wgNI4n1VxrJBxEo=
-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org