Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37342e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          /MBdkIyZNg8stUPQs/ZiZ0vSva0Egw7Xw011UxLBZwU=
Subject key identifier:   E1:74:E8:0F:C0:96:1D:0E:3A:6F:4B:04:49:4A:3C:43:4A:85:49:6B
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       65B88A5FC7DAFD32D10827B0778CB9E4AF7AE22F
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3233203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:21:57 +0000
ROA not before:           Fri 24 May 2024 00:16:57 +0000
ROA not after:            Fri 23 May 2025 00:21:57 +0000
asID:                     28184
IP address blocks:        189.89.74.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b8:8a:5f:c7:da:fd:32:d1:08:27:b0:77:8c:b9:e4:af:7a:e2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:16:57 2024 GMT
            Not After : May 23 00:21:57 2025 GMT
        Subject: CN=E174E80FC0961D0E3A6F4B04494A3C434A85496B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:66:74:ce:bf:35:18:0d:d5:37:04:85:94:
                    a1:b8:b5:16:7f:d6:24:db:a2:7c:d8:1b:1a:e1:04:
                    88:15:fa:3c:cd:82:f1:16:02:b7:f7:6e:fd:a2:95:
                    05:e5:02:d4:90:68:c6:14:f5:a1:c9:f8:e5:f0:ab:
                    b5:73:2a:89:70:c7:fd:32:33:56:12:c7:6a:67:71:
                    5c:fc:30:bf:b9:11:27:ca:de:8c:51:f8:98:04:d8:
                    bb:59:6b:86:30:67:9b:4d:36:78:23:d0:1d:45:9d:
                    df:10:bd:d4:11:26:ef:2f:3f:c5:0d:32:cc:6f:21:
                    df:8a:10:13:5d:53:9d:18:ca:f2:70:60:7b:94:98:
                    37:51:37:63:da:cf:24:68:f7:b6:4f:64:d1:6e:38:
                    84:ce:b7:65:ac:8f:fa:6c:ca:44:f7:93:72:3e:fd:
                    8d:36:b8:c2:4c:22:d8:67:a9:25:17:53:c0:d8:d9:
                    be:f7:f2:d2:2e:f1:24:94:80:f0:fc:d5:82:bb:75:
                    61:45:fa:eb:3c:e4:b2:3c:1b:f3:17:d2:48:8b:af:
                    1f:28:67:83:49:02:58:17:f9:a9:e6:bb:ce:a0:70:
                    ea:2c:1b:9e:7b:49:57:a9:65:86:7d:22:87:0e:b9:
                    28:33:7a:25:47:46:29:92:bd:44:bc:a2:54:d5:4a:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:E8:0F:C0:96:1D:0E:3A:6F:4B:04:49:4A:3C:43:4A:85:49:6B
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:d9:c9:99:78:2d:fb:22:03:17:17:45:09:63:b3:79:c4:52:
         c4:05:ba:d8:d7:7b:b6:de:7c:7c:be:7f:bc:48:33:31:95:79:
         a9:1a:1a:92:f1:3b:72:9c:37:9c:40:f6:1b:45:a1:05:e5:61:
         4e:8a:a2:5d:11:a6:36:cc:8c:cd:b0:59:84:11:11:32:a0:35:
         37:c1:01:bd:38:c5:11:2e:1e:83:e6:f8:7f:79:91:26:48:fa:
         77:8f:be:94:49:3c:38:87:9b:56:c4:1a:5c:d0:61:ba:e7:ef:
         d1:f2:b2:f6:27:8a:cf:28:cb:5e:6f:41:e6:ed:b8:74:3c:0e:
         74:4f:a1:f9:be:fa:c4:83:9d:5c:d1:78:33:08:41:0e:08:04:
         8a:24:cb:55:28:8a:01:dd:6e:15:10:f4:81:2c:38:30:be:a3:
         ea:24:29:9c:3d:48:9a:25:92:ee:e1:c6:3e:ce:e6:67:e1:a8:
         dd:92:46:0c:8b:b5:4a:76:ad:f8:5e:af:24:b3:3a:90:36:8d:
         2a:a2:18:2c:e4:38:89:2a:9d:05:c6:65:dd:9b:c6:44:e9:59:
         4d:4d:41:17:12:6c:8d:67:a8:d3:66:83:e6:cc:c2:bd:7a:c1:
         29:c3:bb:ae:f1:ae:c2:fa:77:c9:8e:e2:4e:be:70:cb:65:e8:
         9c:fd:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org