Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37322e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          GZHgW6h+sD+c4G3ftEpneeI8yPvihESmRpv3HBlY01M=
Subject key identifier:   79:BD:CF:46:0D:8E:BE:9C:CD:66:54:F9:06:C3:B0:FF:89:1F:24:E3
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       7B1F914E0DC7FD65C2F5505F59554006CE1BC7FD
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:21:53 +0000
ROA not before:           Fri 24 May 2024 00:16:53 +0000
ROA not after:            Fri 23 May 2025 00:21:53 +0000
asID:                     28184
IP address blocks:        189.89.72.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1f:91:4e:0d:c7:fd:65:c2:f5:50:5f:59:55:40:06:ce:1b:c7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:16:53 2024 GMT
            Not After : May 23 00:21:53 2025 GMT
        Subject: CN=79BDCF460D8EBE9CCD6654F906C3B0FF891F24E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:46:74:c8:66:15:26:18:93:5e:c3:a1:af:
                    1b:74:6a:37:a7:15:37:13:76:fd:c8:f6:27:e6:6b:
                    59:60:ae:4b:0c:b5:fb:27:a9:26:53:29:2d:d6:aa:
                    92:e9:6f:7f:8b:85:16:ee:2f:5d:e4:e0:07:f9:e9:
                    ff:0f:8d:0c:e1:44:7b:5c:33:ae:76:d4:16:a1:c0:
                    78:3f:9d:d8:21:30:37:9a:50:64:59:2f:4f:2e:6d:
                    d8:36:c7:2c:30:e0:eb:39:1b:c3:5b:31:23:fb:0d:
                    8f:29:82:d4:90:9c:4f:9a:07:23:6a:83:ef:65:f5:
                    63:1d:49:08:97:9e:1b:92:ae:f1:22:52:4a:c7:6b:
                    79:71:55:75:bb:59:bb:54:f8:98:3f:87:04:44:f2:
                    52:be:ac:5b:27:65:2a:42:86:1c:5c:f1:6b:3b:2f:
                    04:c6:d6:a9:75:c3:99:4a:dd:a6:7a:9c:35:a8:c2:
                    c2:a2:32:e0:b1:1c:61:47:d2:e4:7f:cc:f2:52:f2:
                    25:e7:16:d8:d9:ff:f6:51:ff:04:f9:53:22:d9:09:
                    4e:2d:32:8f:a7:1e:c1:25:dc:70:45:06:f9:9b:2d:
                    93:c6:5f:e9:c2:c6:a2:e2:4e:d8:5a:13:41:2f:9c:
                    9c:ce:b3:00:44:02:b0:aa:21:14:55:89:bb:b9:77:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BD:CF:46:0D:8E:BE:9C:CD:66:54:F9:06:C3:B0:FF:89:1F:24:E3
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:12:51:61:ee:9a:38:57:34:fc:de:1e:a8:c2:bb:29:de:
         3b:68:94:9f:9b:30:05:e2:07:b5:b8:6a:3f:6a:da:ab:e7:e5:
         72:d6:63:79:12:92:52:56:d0:84:61:79:05:64:46:f0:98:3a:
         26:30:47:b7:06:c1:83:31:e3:99:02:9d:54:a0:a3:e0:44:95:
         e4:06:0a:78:a9:96:e6:9a:9c:66:22:61:a9:30:6b:30:70:f3:
         fd:4e:bd:ee:d0:8e:78:0e:0e:0a:1e:1c:40:65:71:5b:e7:ab:
         c2:22:2a:94:09:c8:88:a5:c9:97:0d:42:85:f9:f8:fb:2c:e2:
         85:e2:1e:ad:f6:1c:09:77:79:2d:4b:5d:b0:8f:ab:dc:f0:1d:
         12:81:2d:c7:26:c1:e7:f0:fd:54:16:e2:80:38:38:4f:7c:0c:
         51:d8:a3:73:6d:28:ce:cf:5d:d3:27:21:76:95:e2:81:21:f4:
         99:1f:8e:20:59:8b:a4:e2:88:47:68:8a:0e:9a:1f:2b:d5:a6:
         62:24:bf:00:d4:ec:9d:d5:c4:ce:b6:86:ce:8d:6b:59:39:35:
         6b:eb:8e:6e:2b:2d:c7:39:f4:da:71:e3:cb:fa:44:d2:5d:3a:
         97:30:db:8e:dc:35:e0:79:b7:06:e7:8e:9e:2d:4b:2d:2f:bf:
         65:11:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org