Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e36342e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          XCkAUFGjnvjYayw5WldK/S/pO2zFcRb7eGPPPICwMFY=
Subject key identifier:   67:8E:5A:05:01:2D:CE:93:5D:B7:D5:56:35:CC:1F:5B:B3:27:64:F2
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       4D99F9C0896B087520C3E21B9BA7E91A2FF8FCC6
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:19:59 +0000
ROA not before:           Fri 24 May 2024 00:14:59 +0000
ROA not after:            Fri 23 May 2025 00:19:59 +0000
asID:                     28184
IP address blocks:        189.89.64.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:99:f9:c0:89:6b:08:75:20:c3:e2:1b:9b:a7:e9:1a:2f:f8:fc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:14:59 2024 GMT
            Not After : May 23 00:19:59 2025 GMT
        Subject: CN=678E5A05012DCE935DB7D55635CC1F5BB32764F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:0d:64:6c:64:f3:21:e2:fc:ea:57:e7:6a:
                    03:9c:48:04:35:f0:cf:08:9e:86:ab:f0:8b:56:c5:
                    c7:ac:88:4b:0d:f6:a4:53:bf:fd:c7:ff:91:4f:70:
                    de:45:cc:e3:c7:49:09:e4:35:e1:a3:df:8c:bd:cb:
                    78:af:ee:6e:7b:2c:84:06:61:45:82:67:be:2e:d7:
                    bf:f3:bd:e8:0a:e0:46:05:dc:21:c9:bf:69:e8:0a:
                    4e:4c:85:ad:df:b5:a5:95:4d:98:98:04:3d:e5:57:
                    9d:fd:bd:aa:5a:5e:f6:4e:2b:9a:5b:42:ed:83:17:
                    91:cc:ad:6a:01:b9:8b:23:0d:89:38:03:3f:e0:68:
                    90:8d:85:61:df:ea:21:8a:c6:fd:0a:38:8b:e0:ee:
                    6c:9c:10:b8:8a:bd:1d:50:29:aa:a2:56:f5:93:e3:
                    7c:28:e5:29:61:29:f4:01:4a:17:5b:b2:14:a7:64:
                    28:82:b1:7b:af:df:30:76:d4:e7:c4:d1:7a:d3:22:
                    61:d6:f2:5b:94:6b:88:76:d8:bb:59:d6:22:a6:9e:
                    4e:61:59:c4:2d:04:5c:e4:d3:50:c4:2e:fc:4a:de:
                    a9:55:71:1d:a7:37:f8:f8:0e:7b:f6:67:25:6b:99:
                    e4:1b:d2:88:4e:dd:d6:c6:cd:16:ff:2b:74:43:e3:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8E:5A:05:01:2D:CE:93:5D:B7:D5:56:35:CC:1F:5B:B3:27:64:F2
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:e0:25:46:c0:2c:b0:30:81:c5:5b:50:f8:f2:76:69:8f:
         fd:bb:a3:da:c4:7e:bb:95:d7:8e:8c:0a:f4:71:23:e6:8e:d6:
         4c:26:96:66:91:2a:57:9c:b2:b4:1f:78:b7:ec:9c:d9:1f:c4:
         e3:b0:68:cb:1c:f7:f7:0e:de:d0:54:17:19:c1:04:9b:a6:7f:
         dc:c7:76:31:60:12:dd:53:61:e1:60:21:29:87:0a:77:09:c6:
         5c:b6:90:92:6d:59:a9:3b:84:63:d5:7f:d3:60:5a:5b:c4:46:
         e3:9d:1f:12:55:87:f6:f9:d5:46:f3:fa:9c:43:89:c7:c9:01:
         42:ac:93:83:cd:7c:0c:09:be:6d:f3:5c:1a:0d:e1:4d:4e:c1:
         92:e1:7a:c8:f9:aa:0a:98:82:97:86:d7:88:d4:22:2f:9b:e3:
         82:6d:ea:42:5a:68:48:41:17:09:68:18:c4:02:42:41:31:ed:
         a6:b5:5e:8f:d8:c1:0a:a2:72:d7:9d:fb:85:e0:55:4b:c7:50:
         9b:30:42:d6:3d:21:76:9c:50:da:47:c0:df:a8:53:40:60:ac:
         d9:5d:90:ee:b2:88:6b:bd:39:e8:59:2c:c5:54:4f:6e:83:3e:
         27:8c:fe:c4:ed:39:a1:98:8b:6c:14:bd:24:bf:41:b3:64:1d:
         b4:de:8a:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTZn5wIlrCHUgw+Ibm6fpGi/4/MYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyNEZFMzNDOUY3M0I2NTQ3MURGQTkzQkE4REU5MjFF
NEZBMTE2NjAeFw0yNDA1MjQwMDE0NTlaFw0yNTA1MjMwMDE5NTlaMDMxMTAvBgNV
BAMTKDY3OEU1QTA1MDEyRENFOTM1REI3RDU1NjM1Q0MxRjVCQjMyNzY0RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWw1kbGTzIeL86lfnagOcSAQ1
8M8Inoar8ItWxcesiEsN9qRTv/3H/5FPcN5FzOPHSQnkNeGj34y9y3iv7m57LIQG
YUWCZ74u17/zvegK4EYF3CHJv2noCk5Mha3ftaWVTZiYBD3lV539vapaXvZOK5pb
Qu2DF5HMrWoBuYsjDYk4Az/gaJCNhWHf6iGKxv0KOIvg7mycELiKvR1QKaqiVvWT
43wo5SlhKfQBShdbshSnZCiCsXuv3zB21OfE0XrTImHW8luUa4h22LtZ1iKmnk5h
WcQtBFzk01DELvxK3qlVcR2nN/j4Dnv2ZyVrmeQb0ohO3dbGzRb/K3RD4w8JAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZ45aBQEtzpNdt9VWNcwfW7MnZPIwHwYDVR0j
BBgwFoAU5iT+M8n3O2VHHfqTuo3pIeT6EWYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9FNjI0RkUzM0M5RjczQjY1NDcxREZBOTNCQThERTkyMUU0RkExMTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MjRGRTMzQzlGNzNCNjU0
NzFERkE5M0JBOERFOTIxRTRGQTExNjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZQDANBgkqhkiG9w0BAQsFAAOCAQEACKDgJUbALLAw
gcVbUPjydmmP/buj2sR+u5XXjowK9HEj5o7WTCaWZpEqV5yytB94t+yc2R/E47Bo
yxz39w7e0FQXGcEEm6Z/3Md2MWAS3VNh4WAhKYcKdwnGXLaQkm1ZqTuEY9V/02Ba
W8RG450fElWH9vnVRvP6nEOJx8kBQqyTg818DAm+bfNcGg3hTU7BkuF6yPmqCpiC
l4bXiNQiL5vjgm3qQlpoSEEXCWgYxAJCQTHtprVej9jBCqJy1537heBVS8dQmzBC
1j0hdpxQ2kfA36hTQGCs2V2Q7rKIa7056FksxVRPboM+J4z+xO05oZiLbBS9JL9B
s2QdtN6KBg==
-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org