Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37342e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          ybmgxtPzZpMLi5llPsNPhEys1Gi2Bu+iYP2ainXm4RE=
Subject key identifier:   CD:3F:F5:9F:07:95:DE:59:4F:59:50:71:6A:0C:6F:CE:C0:DC:AA:11
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       06CCA1AFD8A7287DC632370C93B57D4EED71DFA1
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:22:00 +0000
ROA not before:           Fri 24 May 2024 00:17:00 +0000
ROA not after:            Fri 23 May 2025 00:22:00 +0000
asID:                     28184
IP address blocks:        189.89.74.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:a1:af:d8:a7:28:7d:c6:32:37:0c:93:b5:7d:4e:ed:71:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:17:00 2024 GMT
            Not After : May 23 00:22:00 2025 GMT
        Subject: CN=CD3FF59F0795DE594F5950716A0C6FCEC0DCAA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:84:cf:7f:4e:c9:d8:f5:a5:37:1a:92:5a:
                    3f:21:92:cb:ea:18:a0:df:0d:36:5a:ef:dd:db:90:
                    81:1c:2a:81:ef:44:35:8b:8a:3d:c5:18:58:52:ae:
                    03:82:04:08:7f:cf:5b:af:74:cc:76:a9:87:5e:b1:
                    ba:5d:f9:9c:e0:4b:d4:bc:c1:10:e6:6a:60:51:57:
                    d7:db:13:f5:d5:08:82:09:5d:eb:1b:13:45:86:a8:
                    b0:ba:fb:4d:8f:46:86:09:6a:7a:83:d2:e9:6c:0b:
                    41:5c:ed:55:c0:bc:6b:73:6f:6f:f8:12:2e:a3:f4:
                    55:f3:e0:44:1b:9b:c5:ad:1d:70:65:24:37:92:90:
                    9b:2b:b6:c6:7a:60:9f:41:2f:58:a8:22:ea:ed:3b:
                    5e:b6:73:0d:02:61:27:69:8c:14:8f:b7:52:b6:92:
                    af:14:a3:a6:58:5a:3b:ab:18:d6:19:71:18:78:52:
                    3c:84:a5:07:09:c8:c1:4d:df:fa:59:f9:af:1e:18:
                    5c:88:c8:f7:3b:20:13:fd:ed:fb:17:92:ce:00:76:
                    99:e1:71:7b:d9:31:29:cf:a5:ac:a8:96:2d:aa:c6:
                    7b:f8:23:85:ff:46:48:59:f9:57:11:91:a6:83:da:
                    ef:77:03:b5:00:24:51:1d:af:2f:a0:a1:17:a5:ca:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:F5:9F:07:95:DE:59:4F:59:50:71:6A:0C:6F:CE:C0:DC:AA:11
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:3b:fb:da:4c:2e:c4:54:c9:b0:4c:09:a6:29:e4:b4:f5:
         a8:c3:55:9e:3a:71:c3:e3:3f:9f:7e:67:b4:e3:b7:bd:ac:1e:
         cc:92:58:23:b5:5b:b5:3b:4a:02:83:d3:0c:dd:ff:24:0c:14:
         3c:c5:31:79:85:01:56:34:a4:3b:00:41:c9:0a:f8:1f:6e:f0:
         2f:06:ad:8e:fb:59:4b:e6:45:cb:57:7c:30:7e:fc:c9:17:57:
         ad:61:f4:25:70:f5:3b:9c:1e:83:04:79:46:de:98:95:0a:ec:
         3d:77:f8:17:be:2f:1d:e4:54:31:22:68:18:a1:8e:1d:79:62:
         f1:18:56:d3:3f:61:50:5a:5e:3f:1a:df:d2:d5:9a:6e:78:1b:
         ab:e8:fd:a9:6c:df:f7:6a:84:68:61:76:63:d9:a6:ed:a3:c3:
         51:2e:d4:f5:b2:9b:52:d9:4f:e7:7d:15:87:39:ae:2b:a0:e0:
         18:82:55:3b:6b:2c:e0:25:e5:64:b0:75:a1:90:18:26:1f:17:
         c7:c3:7f:36:90:d5:be:c1:36:e3:23:f2:be:f9:c5:48:10:ed:
         e7:4f:3e:1d:08:a4:92:9d:f7:fd:d0:c9:5f:69:0b:3b:e6:c3:
         69:d2:df:42:e4:a0:92:cb:7c:82:bd:8e:1b:19:16:7f:cf:79:
         61:4c:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org