Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32322d3232203d3e203238313834.roa
File:                     3138392e38392e37322e302f32322d3232203d3e203238313834.roa (raw, json)
Hash identifier:          2tlEJ+xM/iAVSdCZ6o+d568jIkExPlyrMlY5uxDF+VM=
Subject key identifier:   B6:98:B0:00:3F:33:92:90:93:40:10:76:8B:9B:F6:00:1B:A1:5F:3D
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       5045C6B5A1A4032117373CEF6E53617103AE0E9E
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32322d3232203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:21:48 +0000
ROA not before:           Fri 24 May 2024 00:16:48 +0000
ROA not after:            Fri 23 May 2025 00:21:48 +0000
asID:                     28184
IP address blocks:        189.89.72.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:45:c6:b5:a1:a4:03:21:17:37:3c:ef:6e:53:61:71:03:ae:0e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:16:48 2024 GMT
            Not After : May 23 00:21:48 2025 GMT
        Subject: CN=B698B0003F339290934010768B9BF6001BA15F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:2e:d3:0b:db:0c:b1:d2:58:f9:4f:8a:a2:
                    44:06:a2:2b:a2:50:13:0f:c0:ef:80:c4:54:fa:18:
                    64:9c:f2:dc:e3:ee:92:53:cc:78:a5:e7:12:d2:d8:
                    1f:79:f0:3d:80:fd:8d:e6:10:0c:47:5a:49:82:8c:
                    6d:5d:35:6a:a0:a7:be:b9:4a:50:82:d7:55:57:e9:
                    62:35:d4:dd:8a:46:1a:18:d3:6f:73:44:9b:ac:a6:
                    7b:44:68:00:a1:c8:a6:00:35:18:b1:9b:d5:47:56:
                    81:5f:a5:58:c7:55:8a:0e:c4:a2:fb:d0:e6:8a:e5:
                    82:f9:94:c8:91:70:12:ae:c5:e9:83:58:ca:a0:78:
                    7f:cf:42:10:9a:96:fe:db:97:13:ac:ae:97:10:1c:
                    17:47:9d:3e:7e:ff:02:aa:2b:eb:13:96:32:8d:51:
                    95:16:9c:94:7e:50:da:c3:5a:60:11:13:74:ea:13:
                    aa:0b:5a:e7:25:30:fe:65:41:53:d0:61:ca:db:76:
                    15:b7:20:75:3c:ba:60:13:9f:e9:f0:e5:0e:de:39:
                    6a:e1:3d:09:a8:cd:42:54:19:e9:c0:f5:4d:8d:80:
                    5a:58:b0:83:52:92:2f:65:28:53:18:da:5f:ce:a3:
                    e4:7c:10:05:48:7d:63:60:3a:a4:57:b5:52:ad:2e:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:98:B0:00:3F:33:92:90:93:40:10:76:8B:9B:F6:00:1B:A1:5F:3D
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32322d3232203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f4:0e:fc:80:ec:52:6b:2f:e9:e1:0c:be:89:fc:0a:65:a0:
         ea:a5:d9:ac:dd:2a:32:0b:e9:24:83:b7:35:29:4d:66:b7:18:
         9b:6f:27:52:ea:dc:90:6c:eb:f5:f4:70:4c:d3:8a:fc:e8:3d:
         7f:8b:10:ae:b9:fb:9b:d8:09:10:06:a6:06:fc:71:e4:8d:ee:
         71:0b:44:cf:df:a9:db:c9:01:3a:40:08:dc:45:2e:bb:d0:31:
         7e:85:a6:ad:fd:4b:b5:3d:e7:c9:56:97:cf:49:4c:64:cd:0d:
         e7:57:7e:f0:de:95:b8:96:64:48:1d:ae:90:a5:91:0c:c5:60:
         b8:5c:33:fe:76:b8:59:bf:c1:c5:c0:12:a0:28:20:a5:d1:ae:
         c3:29:18:07:b3:9c:25:b0:2c:2d:04:4e:42:d1:a2:cc:9f:03:
         22:c0:ed:24:fb:60:45:3b:ec:4b:19:54:f6:d5:7a:bf:54:52:
         35:70:7a:2a:1d:33:40:78:52:b8:50:1f:22:85:12:7b:30:49:
         6a:7d:14:86:c3:d5:36:ad:41:b6:81:ed:a9:28:5a:12:1c:a5:
         42:39:74:42:f9:7e:72:72:87:8e:11:28:bd:2e:ff:42:91:37:
         cc:00:c5:36:b5:8a:14:d3:80:ba:6a:1f:d6:6d:c3:5c:30:89:
         41:78:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org