Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e36352e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          +4PDVksH2Gk9/jDMf2NtYItE+Bqi8V7WBV5GEYtdLOo=
Subject key identifier:   E3:0D:98:C8:B0:40:02:62:45:E2:7F:B1:58:FF:12:61:69:12:13:E2
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       38DD6F17A980A736B8E32E9AC016007BC1EC1B6C
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:20:01 +0000
ROA not before:           Fri 24 May 2024 00:15:01 +0000
ROA not after:            Fri 23 May 2025 00:20:01 +0000
asID:                     28184
IP address blocks:        189.89.65.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dd:6f:17:a9:80:a7:36:b8:e3:2e:9a:c0:16:00:7b:c1:ec:1b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:15:01 2024 GMT
            Not After : May 23 00:20:01 2025 GMT
        Subject: CN=E30D98C8B040026245E27FB158FF1261691213E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:3a:8d:6a:a6:32:15:69:d5:54:ed:6d:bb:
                    75:46:7d:18:fd:56:2a:98:06:a5:c5:64:0f:5b:bd:
                    c1:c6:d1:6f:42:91:68:3b:cf:d4:48:01:41:84:b4:
                    94:11:42:92:78:29:af:ff:66:69:8d:dc:e8:a9:d8:
                    69:e1:91:1d:99:cf:80:4d:ff:a2:0e:71:a3:48:b4:
                    ee:fc:55:fa:5d:61:9b:cc:3c:f5:d4:2e:4d:92:66:
                    ff:66:ed:93:50:f3:15:ed:c9:fc:5e:87:42:c5:a3:
                    5d:cf:e9:a3:f8:97:c5:78:b2:d8:8c:3c:ee:1c:d2:
                    e0:8b:6b:4d:93:9d:7e:3a:30:24:68:70:e2:0a:5f:
                    72:6f:d2:1e:0f:20:6c:a2:c9:dd:62:a9:db:9d:c3:
                    c8:32:f8:76:e9:af:b7:53:8d:60:df:e6:d4:80:f2:
                    d1:e3:52:1b:af:f8:2b:a2:8e:9b:02:0e:21:1c:66:
                    51:d3:e8:6e:d8:b9:c0:1e:0a:4b:7a:69:e4:de:80:
                    f8:f0:98:6d:2f:ff:95:b7:98:a4:af:25:35:94:a1:
                    83:fa:12:94:ee:d0:a1:6f:c3:e3:3f:03:88:43:fa:
                    54:3c:bd:d3:10:02:4c:2d:31:93:4b:79:03:40:51:
                    1f:ff:8f:1d:35:af:4e:dc:27:2e:37:e3:93:61:a2:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:98:C8:B0:40:02:62:45:E2:7F:B1:58:FF:12:61:69:12:13:E2
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:52:1b:b7:38:f0:66:f5:be:07:b4:37:b2:5c:e0:d6:d3:1a:
         5d:dc:27:39:1f:eb:22:73:7a:b3:bf:40:16:e6:9b:8c:b8:f8:
         33:48:6b:a3:6b:bc:d4:91:c8:d2:0c:d4:15:ea:7d:b9:1f:04:
         7a:78:23:44:c7:28:99:0c:b7:c1:2c:ac:c2:8f:cd:60:43:1e:
         c9:6f:39:a8:f2:ab:c2:d3:69:a4:8c:3a:9f:f0:fb:c2:e6:ba:
         0d:26:d8:14:49:12:4b:fe:88:09:23:80:a7:06:cb:db:f1:ac:
         b9:b1:6a:33:aa:b6:b8:59:06:b6:9b:ee:43:36:12:f2:01:f4:
         c2:f7:06:01:ce:09:95:b5:22:d3:1e:05:c2:8a:03:77:81:03:
         6f:a7:62:1c:fa:d9:29:1d:c5:46:90:85:28:d0:d1:86:56:3c:
         d1:64:0e:8c:3e:bb:15:d5:cf:f7:25:cc:51:15:83:e5:29:d4:
         44:76:a5:e5:e3:51:9f:85:5b:8e:57:a2:e1:0b:4c:2e:b9:0c:
         a2:56:9a:66:8c:a6:e7:e3:9b:cd:21:35:31:0b:5e:fd:98:7d:
         66:93:6d:ad:1f:23:2d:13:51:cb:92:27:33:91:85:14:8a:47:
         6a:5e:e6:b9:5c:33:c1:4e:dd:68:9e:19:00:f5:70:89:b6:52:
         2c:56:87:f5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUON1vF6mApza44y6awBYAe8HsG2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyNEZFMzNDOUY3M0I2NTQ3MURGQTkzQkE4REU5MjFF
NEZBMTE2NjAeFw0yNDA1MjQwMDE1MDFaFw0yNTA1MjMwMDIwMDFaMDMxMTAvBgNV
BAMTKEUzMEQ5OEM4QjA0MDAyNjI0NUUyN0ZCMTU4RkYxMjYxNjkxMjEzRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrzqNaqYyFWnVVO1tu3VGfRj9
ViqYBqXFZA9bvcHG0W9CkWg7z9RIAUGEtJQRQpJ4Ka//ZmmN3Oip2GnhkR2Zz4BN
/6IOcaNItO78VfpdYZvMPPXULk2SZv9m7ZNQ8xXtyfxeh0LFo13P6aP4l8V4stiM
PO4c0uCLa02TnX46MCRocOIKX3Jv0h4PIGyiyd1iqdudw8gy+Hbpr7dTjWDf5tSA
8tHjUhuv+CuijpsCDiEcZlHT6G7YucAeCkt6aeTegPjwmG0v/5W3mKSvJTWUoYP6
EpTu0KFvw+M/A4hD+lQ8vdMQAkwtMZNLeQNAUR//jx01r07cJy4345NhoqnJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4w2YyLBAAmJF4n+xWP8SYWkSE+IwHwYDVR0j
BBgwFoAU5iT+M8n3O2VHHfqTuo3pIeT6EWYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9FNjI0RkUzM0M5RjczQjY1NDcxREZBOTNCQThERTkyMUU0RkExMTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MjRGRTMzQzlGNzNCNjU0
NzFERkE5M0JBOERFOTIxRTRGQTExNjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZQTANBgkqhkiG9w0BAQsFAAOCAQEAYlIbtzjwZvW+
B7Q3slzg1tMaXdwnOR/rInN6s79AFuabjLj4M0hro2u81JHI0gzUFep9uR8Eengj
RMcomQy3wSyswo/NYEMeyW85qPKrwtNppIw6n/D7wua6DSbYFEkSS/6ICSOApwbL
2/GsubFqM6q2uFkGtpvuQzYS8gH0wvcGAc4JlbUi0x4FwooDd4EDb6diHPrZKR3F
RpCFKNDRhlY80WQOjD67FdXP9yXMURWD5SnURHal5eNRn4Vbjlei4QtMLrkMolaa
Zoym5+ObzSE1MQte/Zh9ZpNtrR8jLRNRy5InM5GFFIpHal7muVwzwU7daJ4ZAPVw
ibZSLFaH9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org