Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37332e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37332e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          liMEoI9NBRMxguu0THTYC6CtmD06xiQt2oFjLBSBLVo=
Subject key identifier:   33:C4:CA:14:AF:B0:5C:F3:BA:98:5F:3E:3F:F8:BF:EB:B6:DC:14:A8
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       6ACA793387E300B0EAD61336792A47E87BD09FFD
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37332e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:21:55 +0000
ROA not before:           Fri 24 May 2024 00:16:55 +0000
ROA not after:            Fri 23 May 2025 00:21:55 +0000
asID:                     28184
IP address blocks:        189.89.73.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ca:79:33:87:e3:00:b0:ea:d6:13:36:79:2a:47:e8:7b:d0:9f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:16:55 2024 GMT
            Not After : May 23 00:21:55 2025 GMT
        Subject: CN=33C4CA14AFB05CF3BA985F3E3FF8BFEBB6DC14A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:b9:12:65:e6:cd:47:87:00:00:6d:72:5b:
                    6c:6d:9b:7f:b4:23:71:a4:4d:9e:c1:5d:fc:f3:00:
                    3f:67:82:86:0c:81:53:2f:e5:08:af:0d:1f:6c:9a:
                    bb:0e:5c:bb:2e:75:18:58:83:f5:43:46:41:6c:d6:
                    c7:73:dc:ee:e2:20:7c:16:72:18:0b:a6:57:61:78:
                    c9:aa:0f:b0:9a:3d:39:43:93:4a:86:48:7c:9d:5b:
                    6c:fa:99:ec:ff:89:8e:43:ca:34:f1:b1:4b:a8:40:
                    28:22:dd:b6:23:22:50:5a:8a:1c:26:89:dd:f3:00:
                    0b:0a:12:f6:9f:35:af:5b:39:32:47:8c:b2:ce:64:
                    4d:52:e2:b0:78:7e:3f:d0:6f:41:5a:67:33:e2:2b:
                    36:41:be:51:fa:3e:a6:72:1d:1f:bd:d1:95:22:a1:
                    8c:ef:dc:1e:80:39:67:08:50:aa:e0:4c:fb:21:d1:
                    8f:cf:86:31:7b:94:b1:44:d6:bd:bf:b1:e7:ba:5d:
                    ee:eb:c8:f8:3b:ae:24:74:a9:d0:1e:2f:58:6c:ef:
                    ce:83:d0:1b:b4:bc:95:29:94:7f:07:39:fb:2b:9c:
                    70:5f:20:4a:f4:32:71:0d:3d:85:6c:ef:61:d5:73:
                    df:bb:b9:a6:8f:15:2a:1d:a2:94:ff:64:fe:ff:a3:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:CA:14:AF:B0:5C:F3:BA:98:5F:3E:3F:F8:BF:EB:B6:DC:14:A8
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37332e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:7e:a8:e2:c4:22:5b:ea:b8:d0:ef:69:08:45:a6:6d:be:
         01:e7:c9:b1:71:45:78:59:02:cf:22:fb:39:f3:86:4a:6c:db:
         a4:34:ca:56:9e:93:ee:9b:7d:d1:42:f6:d7:55:e7:d4:31:6f:
         20:23:e9:b5:08:6b:88:a3:b7:5e:52:06:fb:e3:51:4d:ef:d8:
         2e:07:2b:b7:fc:09:9f:7f:2b:97:de:f2:6c:7c:69:e3:fc:f2:
         35:14:7a:9f:4a:98:01:30:99:13:68:4c:41:51:a8:ba:f5:8d:
         c0:44:9d:1c:9c:3f:02:d7:1b:80:c2:0d:c1:eb:e1:50:3a:4b:
         39:64:dd:0e:ca:72:92:74:c6:6f:dc:bd:18:74:1e:f0:9b:32:
         df:cc:6c:b0:35:46:48:f8:10:a9:07:dc:84:17:d4:78:ca:85:
         3f:0c:ef:31:66:82:e0:02:22:01:ab:e3:bc:37:8a:37:b6:db:
         14:41:42:65:19:aa:26:b2:d5:a7:e0:a9:52:b7:69:38:9b:c4:
         9f:5a:e2:5d:31:99:34:9b:17:a4:7f:28:ba:a5:49:f3:33:54:
         da:a9:20:0a:50:07:05:ad:2f:e5:13:31:52:59:8f:16:cf:60:
         58:35:48:ee:90:4e:1e:fb:1c:80:48:ce:1c:83:77:84:7f:b1:
         7f:63:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org