Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          t4PIuDN6P6gIVIjF7xNggb5XIkd1DoM8tqnxvzNLIHI=
Subject key identifier:   F8:C3:99:09:33:47:DB:46:50:E4:24:A2:A5:B2:4E:70:1C:47:AD:BE
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       360FE90C5B2105F623DCB598414D5441F6333B0D
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:23 +0000
ROA not before:           Wed 03 Apr 2024 18:25:23 +0000
ROA not after:            Wed 02 Apr 2025 18:30:23 +0000
asID:                     28234
IP address blocks:        189.127.204.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0f:e9:0c:5b:21:05:f6:23:dc:b5:98:41:4d:54:41:f6:33:3b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:23 2024 GMT
            Not After : Apr  2 18:30:23 2025 GMT
        Subject: CN=F8C399093347DB4650E424A2A5B24E701C47ADBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:a1:c8:17:a9:73:ba:89:5f:cc:b4:4f:42:
                    ec:07:53:26:82:ca:d0:bc:e6:45:06:f9:33:e4:ca:
                    da:d7:71:3e:d9:6c:9e:43:bf:3f:cc:92:2a:49:0a:
                    e2:a3:64:c3:35:de:e3:2c:56:a3:a0:d7:26:27:6c:
                    4d:8a:5d:c7:56:9c:e5:e7:2f:32:e8:c7:2a:87:62:
                    a4:59:5b:89:86:95:78:0e:8a:db:fe:f6:09:43:68:
                    7b:a2:fe:7c:31:26:94:83:f5:96:45:86:f6:c0:94:
                    25:27:d2:a7:e5:bb:47:62:ac:19:e0:d3:ad:da:f3:
                    0f:a9:14:fc:cb:ed:b4:6f:17:37:4e:19:59:ba:c5:
                    ac:38:97:36:a9:86:41:c5:37:5b:e1:2c:f2:3c:23:
                    05:e8:cf:ae:72:00:d4:7f:85:51:3d:a3:4b:44:a7:
                    c6:a8:45:2a:27:94:a6:96:b8:fa:83:30:ba:9d:54:
                    f3:0c:f0:96:61:7e:5e:f3:06:0a:e5:75:80:e6:8a:
                    67:d6:8d:8f:41:da:ea:c9:81:89:99:2a:47:d6:2c:
                    c2:0f:7d:37:0e:0e:a5:0c:9b:1f:2d:94:ba:9d:b5:
                    55:9a:e6:ab:54:b5:9d:b1:f8:c7:61:a8:4f:31:d0:
                    d5:f9:af:c0:1e:72:11:ee:cb:4d:bd:61:97:30:c3:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C3:99:09:33:47:DB:46:50:E4:24:A2:A5:B2:4E:70:1C:47:AD:BE
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:d3:e9:e8:a3:44:9a:20:ed:74:9e:58:e0:f0:4a:4c:c6:
         0a:76:9e:e8:4d:ee:f1:c5:5e:04:77:df:95:d9:55:65:7f:8c:
         b4:bc:d6:b0:b3:87:5c:49:9e:17:a1:22:8c:31:0a:4f:e7:e7:
         20:f4:5b:95:5b:cb:c1:8f:05:9d:89:4b:4b:65:15:7d:71:98:
         e1:45:82:5a:29:53:d9:d1:33:cf:55:a7:52:44:c9:47:42:f9:
         14:65:e5:10:74:52:cf:9a:b5:67:32:03:27:6c:64:8c:97:6c:
         1f:c5:4a:78:8a:9b:cb:fc:2a:bb:f9:41:ba:09:f1:da:30:d1:
         e7:3a:70:09:2b:c4:7c:18:fe:e3:51:84:27:ba:59:71:af:fe:
         e7:60:f5:d1:17:f1:f2:0c:00:1c:2c:29:90:3b:a1:3a:6b:42:
         28:39:95:57:00:e6:6c:56:dc:ef:cc:d2:55:dd:f7:b2:8e:a1:
         fb:ce:fa:b0:b7:ac:76:3f:07:66:f3:ff:a4:46:61:52:86:2a:
         09:bd:f6:57:68:cf:72:97:05:64:d7:18:6f:0e:85:65:76:74:
         6c:94:3d:6e:3a:58:95:69:b3:da:82:91:1f:7c:ba:23:5b:ad:
         1b:ff:e0:78:2f:8c:2a:a1:83:97:ed:34:51:73:14:76:7f:52:
         88:82:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org