Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37302e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          vGNJfsrkxpbO0CnxNJ/tJj80yhF3rYC2NmSKC9uFEPA=
Subject key identifier:   F1:B4:AE:06:89:F3:C4:0A:4A:B8:32:A8:32:8C:E8:EB:9B:DA:2E:29
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       12C979B7525C15013CB20CC35D96B5A9F4CF81DC
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32332d3233203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:20:13 +0000
ROA not before:           Fri 24 May 2024 00:15:13 +0000
ROA not after:            Fri 23 May 2025 00:20:13 +0000
asID:                     28184
IP address blocks:        189.89.70.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c9:79:b7:52:5c:15:01:3c:b2:0c:c3:5d:96:b5:a9:f4:cf:81:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:15:13 2024 GMT
            Not After : May 23 00:20:13 2025 GMT
        Subject: CN=F1B4AE0689F3C40A4AB832A8328CE8EB9BDA2E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:61:e1:8e:35:e6:2a:12:63:e1:c9:1b:e9:
                    07:aa:f9:52:7c:90:5f:79:00:fc:11:40:97:78:47:
                    e2:08:b1:c5:43:41:8e:37:8f:b1:cd:0f:b3:53:98:
                    18:8f:80:d8:95:8f:48:f7:1d:d5:3f:d2:61:5b:e0:
                    1d:c3:9d:8b:7b:5f:c7:04:2d:33:ad:95:9d:53:e7:
                    51:ec:90:2b:16:e0:50:30:d5:33:05:65:83:f5:50:
                    cd:4d:b1:7e:fc:68:40:d0:31:81:ee:19:3e:4f:78:
                    9a:59:89:4a:f9:c6:25:e6:07:22:07:a6:23:25:4c:
                    a4:b4:53:8a:19:bc:6b:ac:21:6f:e8:3b:60:c0:81:
                    ca:00:d4:28:97:89:a3:17:ac:41:d5:a0:92:8e:94:
                    ec:c1:0c:9a:30:8f:1d:07:cf:22:8b:af:bd:c4:98:
                    c9:e4:c6:c5:89:67:df:fc:ed:35:72:58:78:d6:23:
                    e6:2a:03:b4:3f:d3:d6:89:59:11:9f:71:ec:00:4d:
                    eb:d7:40:01:d1:9d:92:9a:2b:a9:5c:ef:b8:53:0e:
                    5c:4e:77:d1:88:7d:bb:94:0c:5f:ce:c8:24:dd:b6:
                    3f:df:5e:56:d2:36:bf:92:0d:35:ee:1c:ad:5b:10:
                    ff:10:e5:f8:da:63:c0:b8:04:33:f7:83:5e:47:b9:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B4:AE:06:89:F3:C4:0A:4A:B8:32:A8:32:8C:E8:EB:9B:DA:2E:29
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:80:d4:bc:d0:70:02:6e:1e:77:2c:f2:26:0e:0d:fb:33:87:
         74:36:f8:f6:f2:d8:88:5b:33:a8:82:21:4d:bc:30:db:75:60:
         e8:6c:2f:12:29:69:f1:b1:08:11:c5:73:0e:4f:7d:db:4b:ec:
         fe:7a:10:4c:24:2f:da:53:3f:89:03:a3:7d:3d:af:71:9a:42:
         a5:2a:fd:f6:d1:d2:33:45:33:af:44:5a:d5:d0:38:95:16:49:
         08:27:6d:df:c6:37:93:cd:b2:b5:d3:05:df:2a:e8:78:42:c8:
         af:8d:ee:21:b6:36:cf:f9:4c:ce:2c:49:0c:81:74:ee:f2:d4:
         98:89:6c:91:d0:b1:8c:95:1c:24:3a:68:62:16:1e:3b:dc:70:
         82:d0:c5:17:08:ce:82:f2:b9:2b:68:45:af:20:74:36:a6:99:
         7d:79:ed:f6:f3:22:83:89:42:cf:e0:ce:b7:ad:ad:94:4c:38:
         07:2c:dd:e5:26:8d:ae:96:d2:3d:2b:26:8f:42:cc:96:b9:f0:
         a3:27:9c:85:6b:4f:65:2e:74:fb:cf:56:fd:9e:b7:1b:47:92:
         14:9f:18:80:04:56:83:3f:c2:01:44:6e:d2:52:64:f0:37:a9:
         dc:89:ab:5b:d7:38:4d:24:41:04:15:25:b7:98:21:bf:ce:de:
         9e:1f:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org