Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e36362e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          Rtid8EScQRh9LwMmsQ7iLMIPXB4bz6T8RZvhqlfDjYM=
Subject key identifier:   0C:56:43:7B:86:B5:05:A2:99:C1:E8:C6:79:CF:F4:E1:36:04:C8:B6
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       516E9F7336DD118F74D232AF0AD3A6E25B4E5857
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32332d3233203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:20:04 +0000
ROA not before:           Fri 24 May 2024 00:15:04 +0000
ROA not after:            Fri 23 May 2025 00:20:04 +0000
asID:                     28184
IP address blocks:        189.89.66.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6e:9f:73:36:dd:11:8f:74:d2:32:af:0a:d3:a6:e2:5b:4e:58:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:15:04 2024 GMT
            Not After : May 23 00:20:04 2025 GMT
        Subject: CN=0C56437B86B505A299C1E8C679CFF4E13604C8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:a6:0f:8c:d5:48:0d:f6:e3:1f:b9:42:ae:
                    26:5b:85:18:5b:35:36:a9:59:72:7c:40:2d:a1:2a:
                    a5:79:18:b6:8c:c9:6a:a1:09:4e:a8:5f:41:93:56:
                    c7:6d:5b:c3:91:df:e2:77:a9:06:63:12:0c:39:0c:
                    33:23:80:e3:83:bc:b7:c9:67:81:36:c1:98:be:3f:
                    57:73:69:39:cc:5a:ac:d8:3b:70:14:34:83:b2:6c:
                    0a:b2:cc:2d:af:3b:3d:ee:a8:8a:b1:f9:fa:f8:5c:
                    b8:44:aa:eb:1a:81:77:33:d7:5a:71:7e:35:e2:f5:
                    11:a3:cd:d5:3e:bf:e9:5a:b2:e2:8c:ba:a5:fd:9b:
                    64:bf:18:f9:17:62:5e:03:8f:3c:51:91:ba:b2:38:
                    01:da:42:70:34:5d:0a:53:e6:06:be:6e:69:fc:82:
                    78:85:b1:89:29:d8:89:aa:43:e8:ad:6c:0a:ec:ad:
                    7b:cf:07:50:8c:33:17:fe:ce:e5:9d:f9:14:31:73:
                    59:44:3d:d1:0f:58:64:af:af:6b:5c:74:4e:1c:01:
                    3d:63:ff:56:f9:68:e6:d0:14:2a:20:59:d9:2d:dd:
                    97:d0:7e:4d:c3:0f:df:f3:53:b4:87:df:97:d9:70:
                    75:f9:a5:a9:59:e1:a2:c3:73:ce:6b:cf:59:65:07:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:56:43:7B:86:B5:05:A2:99:C1:E8:C6:79:CF:F4:E1:36:04:C8:B6
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:3d:1f:b3:ad:45:a3:af:b3:fb:f6:dd:cd:35:e4:5e:5f:
         23:67:66:b9:5b:d8:17:91:8a:7f:7f:27:f6:1c:8e:5d:de:37:
         d9:ff:7c:b7:2f:41:19:e8:7c:3f:45:f9:ef:b1:44:d8:dc:19:
         ca:d3:7d:e0:af:ff:9e:4b:16:8b:3c:0d:be:d9:93:ea:bb:b7:
         67:2c:40:01:f8:14:61:1f:6d:79:93:5f:16:d3:b6:47:21:f4:
         de:23:9b:47:71:68:bf:77:43:10:7f:78:57:01:25:09:34:91:
         58:60:c1:f0:ae:15:df:93:b6:5c:1a:e0:e5:a7:61:54:25:7d:
         1a:8d:cb:e3:3b:0b:90:ed:5b:85:3d:85:ed:49:f8:77:6a:6f:
         0f:62:99:49:a9:da:26:62:e3:59:85:02:72:7b:87:8d:29:5b:
         c6:8d:9f:b0:69:82:2a:2a:e4:b5:cf:c3:c7:41:33:ad:5a:1b:
         29:2f:91:9a:75:90:70:b7:24:93:88:6a:9b:af:a0:8e:bb:bd:
         50:c6:73:ea:4c:e1:10:f8:f3:30:72:ea:07:60:a3:9d:3a:36:
         83:ea:2f:28:35:48:44:eb:13:0e:8d:4c:61:ac:60:4b:7e:16:
         d6:e5:42:1e:72:64:64:b6:40:9b:4a:5e:ca:2c:85:68:ce:77:
         13:55:5c:55
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUW6fczbdEY900jKvCtOm4ltOWFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyNEZFMzNDOUY3M0I2NTQ3MURGQTkzQkE4REU5MjFF
NEZBMTE2NjAeFw0yNDA1MjQwMDE1MDRaFw0yNTA1MjMwMDIwMDRaMDMxMTAvBgNV
BAMTKDBDNTY0MzdCODZCNTA1QTI5OUMxRThDNjc5Q0ZGNEUxMzYwNEM4QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXjKYPjNVIDfbjH7lCriZbhRhb
NTapWXJ8QC2hKqV5GLaMyWqhCU6oX0GTVsdtW8OR3+J3qQZjEgw5DDMjgOODvLfJ
Z4E2wZi+P1dzaTnMWqzYO3AUNIOybAqyzC2vOz3uqIqx+fr4XLhEqusagXcz11px
fjXi9RGjzdU+v+lasuKMuqX9m2S/GPkXYl4DjzxRkbqyOAHaQnA0XQpT5ga+bmn8
gniFsYkp2ImqQ+itbArsrXvPB1CMMxf+zuWd+RQxc1lEPdEPWGSvr2tcdE4cAT1j
/1b5aObQFCogWdkt3ZfQfk3DD9/zU7SH35fZcHX5palZ4aLDc85rz1llB1ePAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUDFZDe4a1BaKZwejGec/04TYEyLYwHwYDVR0j
BBgwFoAU5iT+M8n3O2VHHfqTuo3pIeT6EWYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9FNjI0RkUzM0M5RjczQjY1NDcxREZBOTNCQThERTkyMUU0RkExMTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MjRGRTMzQzlGNzNCNjU0
NzFERkE5M0JBOERFOTIxRTRGQTExNjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb1ZQjANBgkqhkiG9w0BAQsFAAOCAQEAeso9H7OtRaOv
s/v23c015F5fI2dmuVvYF5GKf38n9hyOXd432f98ty9BGeh8P0X577FE2NwZytN9
4K//nksWizwNvtmT6ru3ZyxAAfgUYR9teZNfFtO2RyH03iObR3Fov3dDEH94VwEl
CTSRWGDB8K4V35O2XBrg5adhVCV9Go3L4zsLkO1bhT2F7Un4d2pvD2KZSanaJmLj
WYUCcnuHjSlbxo2fsGmCKirktc/Dx0EzrVobKS+RmnWQcLckk4hqm6+gjru9UMZz
6kzhEPjzMHLqB2CjnTo2g+ovKDVIROsTDo1MYaxgS34W1uVCHnJkZLZAm0peyiyF
aM53E1VcVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org