Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e36342e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          gqDi1/ixsssGC1eiZyMy2hO2u+uVN5I001KVO9xZsOE=
Subject key identifier:   3C:2E:FD:F5:A7:40:CE:72:2B:6C:75:EA:98:0C:62:DE:34:78:94:85
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       70946D570C881411F73EB53C9D9875E3AC7C36F1
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3233203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:19:57 +0000
ROA not before:           Fri 24 May 2024 00:14:57 +0000
ROA not after:            Fri 23 May 2025 00:19:57 +0000
asID:                     28184
IP address blocks:        189.89.64.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:94:6d:57:0c:88:14:11:f7:3e:b5:3c:9d:98:75:e3:ac:7c:36:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:14:57 2024 GMT
            Not After : May 23 00:19:57 2025 GMT
        Subject: CN=3C2EFDF5A740CE722B6C75EA980C62DE34789485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:17:0b:0d:b4:a4:33:c8:46:6e:42:f1:55:
                    cb:3c:97:6a:7f:78:26:8d:fe:41:53:98:6a:96:27:
                    40:68:3f:98:00:b1:54:b2:35:36:66:a7:f0:76:95:
                    56:e2:5f:f0:30:24:0c:0c:f7:5c:1e:97:26:02:ce:
                    a0:9a:88:40:55:c9:b0:81:8d:96:36:52:4a:04:65:
                    11:e9:71:b2:1f:f2:47:6e:3f:3e:d6:b8:be:e8:4b:
                    82:53:21:82:87:3f:8d:c1:fd:0d:16:4e:6b:70:15:
                    ae:de:1a:68:12:9b:88:db:95:0d:3f:28:7a:9c:6b:
                    fc:4c:f3:07:f2:87:57:86:08:02:52:12:b4:73:da:
                    a6:73:d3:64:9e:eb:a0:af:bf:92:cb:9a:91:4b:95:
                    b7:ea:1e:46:72:93:90:64:ef:71:72:82:e8:8c:9e:
                    ee:bf:e4:46:a5:eb:2d:bf:19:b1:ad:be:5f:05:15:
                    11:eb:70:65:0d:66:24:5b:f5:2a:70:e6:aa:4c:d9:
                    3f:55:c4:40:cb:df:d0:fb:02:ed:00:b9:94:f7:88:
                    90:8a:55:f9:51:69:0c:ab:7c:37:ca:3c:96:8b:7a:
                    4e:72:c3:5e:61:ea:6e:db:dc:ab:13:02:4f:28:e8:
                    84:d3:65:73:dd:16:47:8c:b1:9d:94:bc:f4:cc:48:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2E:FD:F5:A7:40:CE:72:2B:6C:75:EA:98:0C:62:DE:34:78:94:85
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:48:eb:2c:28:7d:5d:9e:8d:11:0c:2a:96:ce:5a:3c:14:6a:
         57:96:77:4a:ff:b8:a2:92:07:d4:ac:13:9b:ca:b6:39:39:43:
         00:ee:6d:42:c7:cc:c3:7b:83:5a:3b:c7:9d:14:4a:b6:89:60:
         c6:aa:0c:c7:ae:5a:46:4e:b6:d7:ea:b3:53:d8:69:d8:1f:0e:
         a7:61:ce:5f:9f:5c:f4:ee:cb:ba:1d:ff:70:ef:76:c5:5f:8f:
         c8:03:17:1e:08:ed:ae:fb:12:6f:5d:20:c4:3f:18:6e:ff:76:
         dc:22:9e:49:94:d6:a1:17:83:1f:ff:3e:2a:54:e3:83:d9:4f:
         28:db:68:37:b3:83:02:85:50:ab:de:c3:3c:17:65:c0:ca:89:
         0d:2e:a4:ab:21:d3:f2:03:60:88:7b:a2:7d:92:b6:a5:1c:31:
         13:96:8b:36:e7:3c:cd:98:72:1b:cb:c2:91:aa:9b:06:4a:29:
         0f:37:a4:57:4a:39:32:77:70:12:f7:5e:9b:45:2e:f6:bf:94:
         d6:c9:48:11:29:10:80:b6:ce:d5:96:a7:12:a7:92:00:bf:38:
         be:a3:d3:49:dd:26:28:02:cf:52:4b:94:c2:4a:e9:b1:b3:27:
         60:92:c9:05:bd:e8:86:ee:2d:d3:f8:9b:35:66:88:d7:8d:06:
         6b:93:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org