Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36392e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e36392e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          FXPN2rr0KULU42pzak2js7NVsaZzF++nEdWNzPMdDqc=
Subject key identifier:   1A:C1:94:24:2B:0A:B3:CD:AD:C1:9E:4B:4B:7F:C3:58:A1:71:78:A7
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       478A7854B0AD5997373C6A092BA78BE2E34340C8
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36392e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:20:15 +0000
ROA not before:           Fri 24 May 2024 00:15:15 +0000
ROA not after:            Fri 23 May 2025 00:20:15 +0000
asID:                     28184
IP address blocks:        189.89.69.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:78:54:b0:ad:59:97:37:3c:6a:09:2b:a7:8b:e2:e3:43:40:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:15:15 2024 GMT
            Not After : May 23 00:20:15 2025 GMT
        Subject: CN=1AC194242B0AB3CDADC19E4B4B7FC358A17178A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3f:55:e1:4e:d2:1e:73:7f:06:e5:3b:71:00:
                    8d:c4:a0:5f:ad:4a:22:ff:0c:ab:3a:a3:56:a8:e1:
                    79:3f:15:f7:1b:41:c9:f7:3d:51:c6:06:db:e5:ce:
                    3b:bd:9e:ab:a2:14:90:a4:43:8c:84:f8:91:25:64:
                    95:b1:94:81:08:c9:db:69:cd:38:bc:7e:6e:f9:08:
                    19:d1:0d:78:6b:9a:81:de:ed:8e:10:77:e8:77:c1:
                    f6:a8:b4:26:e7:ff:20:63:86:6b:fe:ec:a6:86:de:
                    8a:9b:89:f7:0b:44:2f:37:d1:e4:d4:6a:6c:27:03:
                    9b:e1:63:23:99:e1:8c:c7:89:1e:02:b5:25:79:6e:
                    df:cb:66:94:3e:e6:af:26:b7:7e:76:12:23:bc:0e:
                    c1:93:0a:d7:26:5a:e7:59:ee:4c:5e:b4:2f:e7:ca:
                    f1:eb:f0:f9:cc:44:80:24:27:72:f8:a0:f5:f1:1c:
                    2b:94:97:eb:c2:6c:d6:7c:a2:57:09:9f:5c:c1:e9:
                    a3:a3:44:3c:25:0c:84:98:99:25:a8:93:b1:7f:ac:
                    5e:1f:b9:ca:2f:d3:07:9a:1e:f8:c9:14:87:dc:02:
                    e3:49:2b:de:66:81:aa:60:d3:be:77:4d:7c:a1:2a:
                    77:23:73:54:81:80:ed:48:33:5a:ab:ab:74:c9:7f:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C1:94:24:2B:0A:B3:CD:AD:C1:9E:4B:4B:7F:C3:58:A1:71:78:A7
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36392e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:20:64:88:ca:86:9a:15:47:b4:84:8d:0a:d8:cb:89:d8:54:
         6b:83:91:8c:1c:50:71:72:d1:cf:7f:00:68:f7:b9:f4:1e:ce:
         79:2d:22:bc:00:a4:70:8e:94:da:a2:ad:73:00:76:cb:f9:58:
         bb:c4:b1:5a:ba:08:1c:97:ce:b8:bb:11:4e:60:1f:f2:16:36:
         eb:85:98:d8:94:ae:b4:64:b1:e0:a8:1b:ed:ab:95:4a:3b:73:
         2b:f0:16:6e:49:81:fe:00:7c:de:f3:86:de:85:52:70:1a:75:
         04:07:86:6c:b5:9e:78:69:fb:6e:5f:3d:58:07:07:39:4b:48:
         8f:05:43:29:b3:60:c6:8e:6f:13:4d:99:6a:97:61:80:fc:65:
         9d:ff:71:48:cf:77:01:69:da:a1:3a:a0:25:38:5f:fd:1a:99:
         55:6b:32:ec:9f:61:6f:04:fd:7b:36:97:d7:0b:46:8d:54:6e:
         24:ed:6d:8c:c6:6f:d9:be:53:6a:51:86:25:7c:e9:49:11:42:
         5f:a2:06:87:d0:d7:3e:f4:20:fd:75:e2:3e:3c:6b:93:42:c2:
         79:21:71:de:21:18:cb:10:3d:3d:b6:8d:2e:77:8d:d8:72:36:
         45:98:66:80:11:ae:fe:e7:e2:3f:c1:eb:64:4e:42:5c:b1:d7:
         22:de:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org