Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa
File:                     3138392e38392e36342e302f32302d3230203d3e203238313834.roa (raw, json)
Hash identifier:          qUDQSAz/MeFW3JurDrPInN8SiBlgWsTKRityGYWuYJ8=
Subject key identifier:   EA:B6:4D:8D:7F:87:DB:0E:5E:44:3D:B8:57:DC:C9:C6:AE:9D:91:3A
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       14AC4AEC86B17A5567AE22E36E08366FDDAB5D11
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:19:49 +0000
ROA not before:           Fri 24 May 2024 00:14:49 +0000
ROA not after:            Fri 23 May 2025 00:19:49 +0000
asID:                     28184
IP address blocks:        189.89.64.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ac:4a:ec:86:b1:7a:55:67:ae:22:e3:6e:08:36:6f:dd:ab:5d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:14:49 2024 GMT
            Not After : May 23 00:19:49 2025 GMT
        Subject: CN=EAB64D8D7F87DB0E5E443DB857DCC9C6AE9D913A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:a8:54:a3:b2:b4:02:4f:76:54:25:f6:e4:
                    f4:9f:26:87:eb:84:12:ee:ad:a3:f2:b6:8b:37:7c:
                    c8:87:b4:be:df:a9:e2:e4:ee:e9:3a:7a:75:e6:da:
                    fc:e6:6f:36:68:ae:a7:8a:b6:b8:87:f4:c0:ab:01:
                    de:87:66:ac:2e:36:98:d7:fa:0c:36:b4:cc:b3:f4:
                    7f:cd:f7:55:ab:af:15:bc:42:de:80:10:67:c6:7d:
                    a6:f5:37:b3:97:59:d5:5a:50:6d:6a:0f:63:35:44:
                    4e:c7:18:74:86:30:17:52:a6:52:a0:7e:2b:d6:b4:
                    ba:35:d8:2a:7d:09:53:b4:32:63:0b:3a:05:20:2e:
                    86:4e:21:8f:72:b7:ff:22:c2:c8:28:a6:20:68:a2:
                    12:ee:c5:ea:ce:ed:e4:71:47:dd:63:39:5f:a7:c0:
                    55:92:71:8f:be:04:cf:c2:04:4d:78:37:f7:a9:28:
                    5e:d6:d9:1b:9d:60:33:76:58:bc:aa:61:23:2e:c7:
                    e6:8f:99:25:69:c3:a5:7c:44:15:ec:40:4e:1b:ba:
                    59:83:f5:be:5d:96:a9:57:ef:e1:c1:af:25:90:7c:
                    38:99:4d:9d:9f:51:53:b4:0b:06:56:c2:82:64:8e:
                    1c:ca:fb:80:5b:c4:42:41:0c:b5:e3:bd:17:b0:09:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:4D:8D:7F:87:DB:0E:5E:44:3D:B8:57:DC:C9:C6:AE:9D:91:3A
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:91:15:6b:c3:c8:2c:27:40:30:6f:8a:43:99:30:e0:16:
         dd:85:6a:7d:70:0d:2b:55:21:2a:a6:51:dc:21:5b:34:c3:14:
         0c:1f:c9:7f:63:1b:f8:7f:ca:9a:ef:83:3c:b5:9a:5e:ec:b6:
         ba:78:d3:f0:78:96:8d:dc:3a:a0:df:1e:57:61:5b:6a:d2:2c:
         eb:27:7a:fe:d6:d3:9d:bb:3d:df:2f:03:a5:f7:b9:b8:34:32:
         95:b6:ff:dd:e9:98:b0:f5:cc:28:8f:d2:6e:9e:44:27:7d:0a:
         f8:33:db:0b:8b:45:f0:d8:70:67:5e:8a:b9:7a:7a:b8:24:c1:
         e7:10:b6:71:1d:6e:a3:cb:2d:06:a9:18:7a:97:27:ff:ea:78:
         fd:46:df:0b:34:3b:da:18:f3:fd:1d:97:ac:20:73:72:a5:82:
         63:3b:80:b8:4f:df:c1:a9:ae:86:43:27:20:0b:cf:f9:c0:03:
         d4:41:64:6d:86:39:43:5d:5f:4e:4a:51:a4:17:e7:17:d8:66:
         f2:f8:ba:73:e3:17:d3:72:42:8a:f9:9f:17:d4:50:08:6b:e2:
         3e:98:d0:70:6c:e1:fd:d8:33:08:2f:e3:9f:fc:e6:5a:5f:c5:
         97:dd:6c:ec:fb:07:a1:01:60:ff:d5:c3:e3:1d:cd:33:33:bc:
         9a:5e:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----