Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          HuBsWUJ10EpbX3yMuO6eyAc8UZ7sJdduUaFsjMWmchw=
Subject key identifier:   20:9D:F6:9C:77:AD:84:66:6D:77:06:F2:24:A2:C8:EA:D3:04:15:19
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       3E8A73AF7E5EDCCD6FBA96F5F8B569EE529A78E4
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:23 +0000
ROA not before:           Wed 03 Apr 2024 18:25:23 +0000
ROA not after:            Wed 02 Apr 2025 18:30:23 +0000
asID:                     28234
IP address blocks:        189.127.205.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:73:af:7e:5e:dc:cd:6f:ba:96:f5:f8:b5:69:ee:52:9a:78:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:23 2024 GMT
            Not After : Apr  2 18:30:23 2025 GMT
        Subject: CN=209DF69C77AD84666D7706F224A2C8EAD3041519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b8:7b:a5:3b:f7:2f:eb:9b:af:8d:26:0b:3c:
                    c9:9f:d5:40:92:26:df:b2:7c:d7:cc:11:8b:b9:ac:
                    38:6f:ba:72:c4:12:28:6f:2c:a9:52:7d:df:e6:a0:
                    be:ca:63:53:3b:00:2c:eb:37:31:4a:81:e4:c9:6e:
                    05:fd:86:78:9f:f2:e5:eb:6f:85:a7:40:52:8e:3e:
                    3d:7c:0e:8b:99:0b:3c:4b:99:54:90:cb:b5:05:f5:
                    5c:8b:2c:13:9b:f4:3a:18:c4:4a:e9:bd:57:af:85:
                    47:17:11:43:87:c8:92:e0:df:09:86:43:3b:58:29:
                    2c:8b:34:07:22:5e:b0:26:cb:56:21:82:2e:5c:3e:
                    76:68:7d:4c:3d:09:07:f3:09:79:93:90:e9:b6:29:
                    ce:b7:04:2d:9f:5f:67:ee:c7:78:e1:df:b8:71:dc:
                    2b:c8:f4:fa:81:74:c1:1f:7c:be:38:eb:7c:d1:3a:
                    60:ff:1d:64:f2:e0:70:f1:cf:3a:4a:7e:05:0d:07:
                    77:16:8a:46:48:27:7f:4c:58:59:83:ff:6b:65:20:
                    92:c3:9a:f5:02:92:10:37:cb:17:b6:d0:19:11:70:
                    44:1b:ed:af:3c:28:ff:62:99:82:75:02:b2:9a:9a:
                    35:6d:99:46:4b:19:11:92:94:33:8d:72:9c:26:39:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9D:F6:9C:77:AD:84:66:6D:77:06:F2:24:A2:C8:EA:D3:04:15:19
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:1a:42:bc:53:87:ca:e2:eb:f3:59:92:fa:12:2b:b9:86:
         93:a5:55:db:e4:1f:cb:a0:f2:00:6c:4e:89:5d:54:88:5e:76:
         0e:44:0c:13:df:8a:19:3c:7d:65:0c:07:24:ae:13:4a:a6:e0:
         71:9a:55:16:6a:ab:27:68:5b:a5:22:e4:74:16:f6:03:86:6e:
         4b:46:38:26:f6:63:6e:44:73:e5:45:50:39:4a:61:8e:18:39:
         03:46:c8:12:79:e6:92:b2:02:ee:95:e5:aa:b2:21:1b:e5:45:
         bc:d9:ab:02:cd:e6:a5:90:c6:04:55:89:a7:7b:1c:61:07:d3:
         24:70:e2:d9:08:e0:9f:b5:e8:f4:ee:aa:fe:aa:9e:ec:bf:6f:
         27:4c:e9:c4:a1:44:19:b3:ea:27:ba:2f:61:93:6a:d1:08:33:
         08:5b:00:c9:b9:a1:d8:54:1c:84:a8:cd:d6:70:3f:99:52:d8:
         ab:1c:8b:89:bb:70:f3:8d:a7:42:29:0d:9b:ff:fa:bd:57:7d:
         f8:fd:64:fc:b1:a8:14:3d:2c:b0:fe:98:81:75:9a:6c:51:6a:
         e8:59:30:ce:c4:b4:d1:0f:ff:e4:5d:37:3d:bb:18:db:1d:3d:
         da:fe:4c:d5:2f:1d:e0:59:7e:b2:01:4f:77:89:97:df:4e:7c:
         ec:4a:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org