Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e36362e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          jWT3bZVLwi81qy595SUsRk4PIj3qBzHwdUNMlpI3IhU=
Subject key identifier:   B2:B5:79:AC:73:BD:A6:35:D7:88:45:52:9A:BE:95:42:5E:7E:E3:E6
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       1D3D46569C1AD7A585916E0AB05D6EC971E22B6B
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:20:05 +0000
ROA not before:           Fri 24 May 2024 00:15:05 +0000
ROA not after:            Fri 23 May 2025 00:20:05 +0000
asID:                     28184
IP address blocks:        189.89.66.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3d:46:56:9c:1a:d7:a5:85:91:6e:0a:b0:5d:6e:c9:71:e2:2b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:15:05 2024 GMT
            Not After : May 23 00:20:05 2025 GMT
        Subject: CN=B2B579AC73BDA635D78845529ABE95425E7EE3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:1b:45:82:fc:f1:bf:48:8d:15:82:da:27:
                    f9:89:40:95:9f:95:6f:81:b6:8e:63:63:d0:67:7b:
                    b9:11:1f:15:6f:c6:6f:f7:4e:a9:fd:a0:f0:30:86:
                    09:b1:d5:75:80:6f:34:35:0a:a6:d5:9e:d9:65:3a:
                    ad:c0:40:b9:e1:ce:8b:43:00:a0:54:c8:b5:7a:e8:
                    bf:72:86:da:55:5a:71:d5:51:a9:e5:77:8e:9d:a8:
                    b4:73:65:e4:15:5a:b2:c3:29:cd:dc:65:5e:48:13:
                    47:0c:f6:fc:6a:87:cc:9b:0c:28:f2:d7:77:a7:5d:
                    07:af:45:0f:44:86:22:d2:c0:30:17:81:06:59:76:
                    6e:13:66:5a:22:2c:b1:63:b0:b4:1b:45:3b:57:79:
                    b4:09:46:b4:34:b6:13:c9:0f:a1:5a:2a:93:c8:e7:
                    43:09:85:87:d2:cf:ca:27:13:8a:b6:ee:49:98:57:
                    14:5c:a0:aa:c0:f3:3a:55:21:da:12:49:94:49:00:
                    9f:eb:fd:7a:1e:fa:c1:3d:42:9c:f2:a2:6a:2b:94:
                    00:35:92:53:c2:c0:32:c1:c2:23:15:07:6a:52:05:
                    61:49:e3:dc:bc:f7:b6:9a:10:ab:c7:74:e2:b8:66:
                    6f:11:fb:21:1f:49:7e:71:39:0a:fc:4f:8c:3c:72:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B5:79:AC:73:BD:A6:35:D7:88:45:52:9A:BE:95:42:5E:7E:E3:E6
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:8c:80:a7:d8:a3:af:31:c9:33:84:1a:74:33:ad:24:f3:
         b2:33:b5:92:84:dd:33:c5:c7:09:df:a0:37:3e:d2:f2:22:32:
         8a:37:43:3b:98:45:6e:43:83:3b:0e:98:dd:bc:ce:3c:cb:9e:
         fe:d3:fa:7e:9e:7d:02:28:20:4f:df:f4:a5:08:41:7e:35:2b:
         6e:b8:65:23:71:fc:bb:db:eb:4b:a5:f6:ef:12:86:99:83:a9:
         6d:20:74:be:30:0c:50:cf:de:87:20:d3:ff:90:ad:b3:5b:99:
         ef:e4:e9:e4:dc:32:83:81:b7:59:f0:a7:19:db:b9:2c:af:e8:
         da:a0:12:7c:7c:22:a3:9c:1a:84:f1:79:cd:3a:a3:b0:1a:5a:
         76:e2:66:c3:04:e3:66:21:03:35:00:ab:41:18:60:d7:1f:0f:
         20:28:ac:2c:e0:34:43:82:4e:58:6b:d2:09:a0:09:16:45:86:
         f1:94:e1:48:36:4d:b3:b2:cf:17:32:67:c3:23:d7:a6:ea:d7:
         60:70:40:65:51:da:e1:e4:55:7b:88:51:56:c5:b4:79:b3:65:
         31:d1:b7:72:25:02:1f:1f:ac:ce:cb:70:ab:c6:d1:30:fe:7c:
         2f:5c:f3:01:d2:aa:3b:bc:c4:23:5a:36:70:eb:8a:55:be:57:
         ef:66:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org