Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230342e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230342e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          FEFEikmJFQLdIt+FQwazcYSvvSVrSYu1bR+RqdREh2c=
Subject key identifier:   45:FF:C4:52:6A:70:4A:B7:D7:1B:71:98:FE:5F:60:FB:5C:B2:A8:D3
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       4759997E0A12A7A744C20FFE06456A209353FBD6
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230342e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:21 +0000
ROA not before:           Wed 03 Apr 2024 18:25:21 +0000
ROA not after:            Wed 02 Apr 2025 18:30:21 +0000
asID:                     28234
IP address blocks:        189.127.204.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:59:99:7e:0a:12:a7:a7:44:c2:0f:fe:06:45:6a:20:93:53:fb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:21 2024 GMT
            Not After : Apr  2 18:30:21 2025 GMT
        Subject: CN=45FFC4526A704AB7D71B7198FE5F60FB5CB2A8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:f6:40:09:68:0e:66:1b:68:45:e4:22:b7:
                    0b:1e:1f:16:e6:53:82:34:a4:e5:ba:9c:eb:97:8b:
                    c4:60:da:19:b1:09:7f:b6:6e:52:d7:4e:1e:23:dc:
                    6d:33:87:c7:66:e2:a2:7f:f3:8a:04:cc:a3:78:0c:
                    e5:20:d3:4f:0b:91:1d:c0:54:91:af:6b:7e:ab:f7:
                    ae:66:29:4c:6e:5d:27:fe:d1:26:30:59:4a:2d:2a:
                    4a:e1:71:1c:13:69:e8:89:df:84:da:36:d4:ea:ea:
                    22:02:00:9a:b7:c5:d0:aa:8d:d0:40:b9:31:a5:21:
                    bf:f3:54:8f:eb:c4:52:c4:21:d4:5b:bb:46:04:09:
                    19:a4:f9:04:eb:c9:36:53:9b:77:17:ec:61:76:41:
                    26:65:d6:25:e5:88:b9:c0:f5:d8:f5:50:f4:d2:93:
                    51:a2:08:19:a7:a0:21:c1:83:d0:f7:36:25:a1:78:
                    52:42:42:c0:14:30:54:53:be:38:3d:f0:58:45:bc:
                    f0:5d:6b:4b:dc:3a:c2:be:4f:cb:cc:ed:1f:d9:bb:
                    49:5a:0a:4c:14:5e:32:7e:3c:13:d5:b2:e9:b3:8c:
                    30:ff:8f:5c:a3:3e:f6:a8:bd:cb:86:da:84:41:81:
                    97:3e:36:5b:ec:20:ee:13:6f:bb:7a:c5:14:d0:e4:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:C4:52:6A:70:4A:B7:D7:1B:71:98:FE:5F:60:FB:5C:B2:A8:D3
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230342e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:2c:77:62:27:29:bd:82:c6:3f:91:53:20:db:06:78:9b:
         d3:da:ba:62:58:28:47:c8:79:ba:43:49:e3:25:8a:de:f3:3d:
         e3:bf:89:28:23:6a:80:90:62:36:8f:82:13:b8:68:05:3f:a8:
         3a:fd:b9:5d:67:10:94:f2:e2:70:12:71:08:92:94:2b:c4:2a:
         b3:86:3b:30:9d:6e:55:06:3f:fb:8f:f9:15:1d:d2:d1:82:8d:
         63:1d:a1:16:c4:a3:f1:f8:70:dc:ca:9d:aa:6e:e7:8d:05:ca:
         58:73:d8:94:eb:d9:7b:dc:96:b8:85:a4:ad:c8:38:cd:95:f2:
         05:37:e1:76:b9:f3:5d:b9:94:37:87:0c:96:5c:53:2a:11:b3:
         4c:f8:4a:10:57:38:db:7f:f5:32:d4:fa:66:6b:d3:fb:2f:02:
         32:2e:e0:36:f5:87:37:39:27:80:f3:f5:62:c4:bf:e7:21:ac:
         0c:d2:61:a1:68:88:2f:50:9c:cb:7e:81:97:5e:96:33:54:53:
         c7:da:71:74:cd:df:75:7d:9f:ec:c6:8b:a1:79:2f:15:ea:75:
         2f:54:45:77:9d:88:97:da:dc:ed:9a:93:40:e7:67:6e:44:6c:
         44:e4:63:99:67:96:08:4b:d5:dc:0b:0d:52:d0:b0:c8:c6:45:
         2c:9c:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org