Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          Q2fmPD+gBwWUxFCx8k4F41fKcfQfHRmPIZLB/yLXxlU=
Subject key identifier:   1E:72:CB:28:D2:2E:01:B1:9E:AC:EA:F3:B1:D6:BC:25:9F:1C:FE:A0
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       251A74296866C4605FBB7690033E6E18E8655503
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:22 +0000
ROA not before:           Wed 03 Apr 2024 18:25:22 +0000
ROA not after:            Wed 02 Apr 2025 18:30:22 +0000
asID:                     28234
IP address blocks:        189.127.207.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1a:74:29:68:66:c4:60:5f:bb:76:90:03:3e:6e:18:e8:65:55:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=1E72CB28D22E01B19EACEAF3B1D6BC259F1CFEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:52:bb:f3:64:c0:11:be:d5:22:98:f0:b3:
                    96:2c:96:b2:b3:85:7c:df:52:60:cb:fa:6a:5f:38:
                    5e:ad:47:99:0a:b8:16:da:07:11:8e:3b:04:c4:5c:
                    76:9b:fb:ca:5c:c8:eb:8a:df:1a:29:b6:f5:8c:2a:
                    c1:e4:a6:e0:18:1f:fc:08:ee:39:68:8e:c2:e2:85:
                    df:a6:6c:45:00:0c:f6:ee:c7:f2:c4:ce:59:dc:53:
                    10:9b:b1:43:d4:3a:4e:4c:75:c8:0e:e9:85:6a:a7:
                    1d:ba:30:50:79:57:ea:80:43:31:8c:36:7c:5e:af:
                    bc:06:17:81:80:7f:70:da:c9:95:cb:f5:fc:31:12:
                    e7:fc:0f:9c:7c:53:0b:98:70:52:63:f2:6a:64:64:
                    7b:44:16:1d:e1:30:a5:27:cf:ba:71:9b:fe:f2:4d:
                    93:48:d5:f7:d5:29:9a:91:6d:be:40:3d:88:3d:ec:
                    9a:d8:17:e9:1a:9d:40:fb:3c:68:6b:71:51:f4:42:
                    82:c8:38:b6:5a:d7:8c:e5:f3:14:23:fa:e2:5e:74:
                    5f:72:7a:da:fd:cf:e2:5d:cf:5f:99:5d:9b:f0:16:
                    48:e0:a2:b1:51:85:ec:86:c6:f8:52:a4:3a:75:87:
                    27:76:9b:28:b1:a9:85:8e:75:16:9f:6a:d7:21:8d:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:CB:28:D2:2E:01:B1:9E:AC:EA:F3:B1:D6:BC:25:9F:1C:FE:A0
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:04:5a:cd:89:71:48:b3:23:95:9b:ad:1d:06:46:79:18:
         23:24:1e:ca:a1:e2:8b:49:a0:83:b0:1a:7d:99:cb:70:bf:e4:
         8c:c8:1a:4e:93:9f:da:ce:26:ec:13:94:c1:85:da:a7:c6:e4:
         97:42:3b:3b:26:fb:b9:6c:51:b9:f4:14:88:22:da:90:b3:fd:
         1a:0b:de:8f:56:21:5c:f3:52:35:d9:b9:8b:8a:b5:4b:18:64:
         b1:8b:53:2b:c6:49:34:6f:36:fd:6d:d1:60:63:28:67:ed:14:
         08:c3:f7:63:75:8e:15:a9:ab:b3:45:7e:23:86:d2:18:d6:65:
         68:42:98:9e:fa:5d:37:c4:3c:d6:68:84:3b:19:02:6c:8d:f2:
         8b:09:9d:3d:4f:71:5a:86:7d:3a:96:f7:a6:9c:b0:15:c8:70:
         62:09:b0:4f:48:a5:f3:c2:23:4e:e3:e6:0c:c9:bd:15:02:72:
         e5:6c:03:91:bb:98:8b:f9:25:c3:1a:dc:2e:d6:48:92:51:be:
         61:d5:26:7d:bf:c6:7f:e3:d9:59:d6:94:17:9f:73:6c:b0:f9:
         1d:8a:d9:6b:e3:0c:38:b4:e7:26:94:a8:d6:57:3d:e5:1a:dd:
         6d:af:e7:b5:12:35:73:bb:ef:9e:ee:6d:e8:36:7d:0a:eb:1d:
         63:8c:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org