Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          JQSQXVP2GUJ9vafNQzKqWsW2Zz7vmB4Y9QLi1xBL1dU=
Subject key identifier:   E8:28:7F:79:BB:90:D4:E6:DF:B0:85:D3:3A:AD:52:1F:66:7F:99:9A
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       3B77BB65443073508AD83E94E67B3B7252553B51
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:21 +0000
ROA not before:           Wed 03 Apr 2024 18:25:21 +0000
ROA not after:            Wed 02 Apr 2025 18:30:21 +0000
asID:                     28234
IP address blocks:        189.127.206.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:77:bb:65:44:30:73:50:8a:d8:3e:94:e6:7b:3b:72:52:55:3b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:21 2024 GMT
            Not After : Apr  2 18:30:21 2025 GMT
        Subject: CN=E8287F79BB90D4E6DFB085D33AAD521F667F999A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:af:64:92:5e:42:55:8d:5f:41:6a:18:f7:
                    14:da:b0:82:81:df:ed:f7:12:f3:93:10:7e:57:b7:
                    59:d5:b2:f9:38:46:e1:ea:e3:4f:b8:8b:a8:6d:30:
                    cf:ac:02:4f:2d:83:8f:57:ae:9d:f7:57:ec:1e:5a:
                    ed:bb:fe:0a:b3:af:23:6d:72:1d:3e:4e:7c:9b:ea:
                    6a:aa:0c:2f:71:35:b6:d3:76:ec:a6:b5:4c:43:4a:
                    f7:e0:a8:e3:df:ea:b8:00:40:81:55:af:7f:34:cc:
                    64:21:c0:79:f8:87:09:89:d4:55:93:96:61:19:a7:
                    d3:88:75:4a:b4:b8:b3:d6:50:fb:32:26:11:2b:8a:
                    e7:26:2c:ba:58:82:50:df:89:ff:ae:dc:e7:19:e1:
                    d5:59:e2:83:7b:38:a3:76:2d:d1:9b:ea:ab:a8:da:
                    cd:0a:4d:7e:a1:ba:20:dc:b5:e8:c0:e7:1a:07:fe:
                    1f:5a:e4:23:e9:49:c9:13:88:92:c0:9a:62:49:50:
                    72:46:71:0b:c1:67:d5:bf:bb:a3:79:20:51:0e:52:
                    0c:df:79:11:a6:66:5f:90:5d:f7:f8:c1:3d:9a:0a:
                    94:f3:35:04:60:82:6c:17:a6:19:aa:a2:90:35:66:
                    5a:82:2f:bc:9c:96:0c:7f:98:7e:60:cf:3e:0a:bc:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:7F:79:BB:90:D4:E6:DF:B0:85:D3:3A:AD:52:1F:66:7F:99:9A
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:a1:9a:de:f4:ce:0c:8e:c6:a7:4b:48:89:42:1c:e1:fc:
         81:28:ee:c4:63:95:3b:08:9b:5b:74:2d:93:ea:be:08:01:40:
         ff:b3:b4:e3:5a:5e:21:30:05:c6:c4:3f:55:19:ea:c0:b8:5a:
         a9:1c:eb:55:ae:64:10:a1:bf:70:62:ee:fd:42:87:f1:75:ca:
         2b:47:48:a2:0e:6f:e0:41:e8:a8:40:9d:e9:68:fc:d3:8f:64:
         9b:b7:75:2b:86:2a:11:93:34:b7:21:ec:21:ef:81:56:70:89:
         65:1b:f3:e8:84:bc:5f:11:ab:13:3f:4e:cc:f6:01:c3:f7:a9:
         e4:67:ad:ce:cb:07:87:ea:34:49:e6:88:e6:6f:c2:77:70:ad:
         5c:a2:9b:f2:1f:81:fd:47:35:9e:2d:ac:65:4c:8c:9c:e6:2b:
         57:6e:68:72:17:47:06:fb:89:c9:e1:7d:93:24:25:81:ee:9c:
         55:11:b0:86:86:e8:b2:a2:2f:56:f1:0f:29:1a:75:10:61:39:
         bf:20:f5:4e:b5:53:ab:ab:ae:8d:9e:2c:38:95:6b:1f:dc:98:
         72:de:5d:51:14:0f:a7:7a:f9:9d:fe:70:bd:52:78:0b:8c:60:
         c5:5f:2d:eb:be:6e:88:51:bb:e7:23:a4:76:1e:79:6a:ca:ec:
         c8:08:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org