Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32312d3231203d3e203238313834.roa
File:                     3138392e38392e36342e302f32312d3231203d3e203238313834.roa (raw, json)
Hash identifier:          1HdjfmocgClLNFBc0MP+qfIAQtcvhMVKLx3Eu7mThos=
Subject key identifier:   58:92:90:B7:BF:B8:38:31:AB:4E:B2:C4:35:D7:FD:CF:67:AB:81:68
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       5D5AA55B8C0085999B6EBE4DC05311CB108B86B9
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32312d3231203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:19:52 +0000
ROA not before:           Fri 24 May 2024 00:14:52 +0000
ROA not after:            Fri 23 May 2025 00:19:52 +0000
asID:                     28184
IP address blocks:        189.89.64.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5a:a5:5b:8c:00:85:99:9b:6e:be:4d:c0:53:11:cb:10:8b:86:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:14:52 2024 GMT
            Not After : May 23 00:19:52 2025 GMT
        Subject: CN=589290B7BFB83831AB4EB2C435D7FDCF67AB8168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:cb:6c:8d:ca:1a:14:5a:5e:8d:b1:53:bd:
                    4f:50:6b:eb:c2:25:d9:b0:38:30:92:5c:8b:0d:bd:
                    08:86:3b:bb:df:88:ac:cc:b8:c2:7d:76:ef:02:69:
                    68:0c:9b:0b:af:99:e5:3a:76:16:0e:7f:13:7e:81:
                    f8:52:1b:c0:62:77:b2:c2:ac:46:4f:dd:3c:5b:59:
                    86:18:37:71:89:1d:25:40:dd:52:16:1d:73:77:0f:
                    58:48:eb:6c:65:a4:8a:c7:e7:47:80:c9:f9:3c:bf:
                    57:59:a6:f2:33:d5:e9:96:62:63:ad:b9:e4:75:2c:
                    b1:c9:c0:69:f3:c5:f7:e6:c3:bc:21:ad:75:76:ea:
                    a2:55:47:fe:cf:fc:34:4d:1a:9f:5c:c2:5e:18:a5:
                    ae:ea:a2:84:b3:ba:c1:db:84:b7:66:d0:9d:06:05:
                    5b:1a:0a:c3:dd:9c:35:15:87:c8:fc:61:77:6a:8c:
                    18:93:ad:41:54:bd:d7:a9:59:a8:21:97:23:9a:79:
                    d8:c0:34:6e:47:87:24:39:c2:84:bc:49:5b:2b:50:
                    06:57:0e:05:2d:c4:e3:05:78:48:38:06:78:90:49:
                    a2:a1:5f:c4:d3:75:76:ac:b1:67:46:31:34:83:8c:
                    92:86:2c:e1:77:02:06:4e:33:3a:ef:7b:3b:07:cf:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:92:90:B7:BF:B8:38:31:AB:4E:B2:C4:35:D7:FD:CF:67:AB:81:68
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32312d3231203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:65:fd:ea:56:5b:36:bc:0a:2d:07:5a:2c:71:4f:6d:0c:
         54:ec:f3:48:06:51:10:fa:7f:1f:6d:84:66:2b:b9:cf:6c:7f:
         1f:09:68:90:77:6d:1f:0c:f2:4e:2d:d9:a8:d7:9d:25:d5:be:
         9b:4e:34:1a:3f:61:83:d5:9a:22:8f:b6:18:77:4b:c3:46:a6:
         2a:c8:40:81:5c:e5:f0:65:ef:91:83:d2:92:b9:8b:aa:24:2b:
         31:df:43:bb:64:36:ad:91:ee:0e:29:5f:3c:de:7c:f4:26:42:
         24:0d:c1:d8:a3:ed:e4:2f:ad:b5:d0:8f:22:40:c0:95:6f:c9:
         2f:b5:04:28:aa:b1:15:85:cf:d6:b8:f6:a1:08:7f:c6:84:fa:
         1d:97:36:9e:53:d2:6f:9c:33:a9:0e:6f:6b:49:77:ab:65:5b:
         2c:a4:28:65:bd:23:93:5d:d0:c6:0f:2e:56:16:6f:c0:8c:c4:
         80:49:0f:3f:1e:ec:d3:a7:c9:c2:b3:45:52:8c:51:3e:e5:68:
         c6:23:90:71:60:4e:67:a3:f2:fd:53:49:7e:a7:3f:67:0c:fd:
         12:f1:88:71:39:b8:9d:75:92:46:53:1f:73:64:1b:e5:78:1a:
         2d:4d:d6:a3:ba:72:0b:fd:3f:fc:c6:d8:ea:2a:bc:51:2b:61:
         6f:71:fd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org