Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37352e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37352e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          NnwpdoRXJxHytfKBWX6Scxmq6y0EV6r14Us3az0CA0k=
Subject key identifier:   E0:EC:17:5C:A5:32:3A:67:9A:9B:E7:8A:CC:B5:F5:EC:32:AF:5C:1A
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       09CF1D4474C4DA4C7930B09D7304F0E593273613
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37352e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:22:04 +0000
ROA not before:           Fri 24 May 2024 00:17:04 +0000
ROA not after:            Fri 23 May 2025 00:22:04 +0000
asID:                     28184
IP address blocks:        189.89.75.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cf:1d:44:74:c4:da:4c:79:30:b0:9d:73:04:f0:e5:93:27:36:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:17:04 2024 GMT
            Not After : May 23 00:22:04 2025 GMT
        Subject: CN=E0EC175CA5323A679A9BE78ACCB5F5EC32AF5C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:14:88:ee:81:0b:62:64:c4:a6:6a:55:0e:
                    40:a3:59:fc:d1:3d:b2:5d:9c:4c:40:84:33:1d:f3:
                    ea:c8:e7:a0:8e:97:1d:91:39:03:03:a7:1e:10:eb:
                    c0:8c:1f:c9:21:f4:f5:1d:5f:d0:f5:2c:1e:d2:8a:
                    d5:c6:c3:1c:e1:25:4a:87:fb:0a:4f:40:42:13:59:
                    91:2a:ad:cc:c7:f2:f5:7a:80:d6:0f:67:cc:bb:6e:
                    9c:86:48:c7:96:58:90:f9:c7:f0:2b:b8:d9:55:4c:
                    91:df:71:55:f3:b5:39:f5:af:80:ec:62:75:b5:0e:
                    c0:d6:aa:3f:e8:2c:e1:c9:94:38:73:42:d3:d5:70:
                    40:9f:d8:75:7a:7f:bc:e3:b0:25:32:85:4d:f0:44:
                    33:a5:e6:cc:ed:c4:c3:c4:86:bc:86:e3:4d:dd:77:
                    a3:e0:fb:b9:89:f6:a0:f3:f1:47:91:57:68:f8:a0:
                    39:1a:45:4d:2e:b2:a4:b1:a2:02:61:0c:31:da:83:
                    f0:52:df:4e:33:48:a4:6b:5f:bd:cf:6b:9e:b7:b5:
                    e1:a3:6a:6a:ce:5d:12:aa:e2:1a:f7:63:80:2e:a9:
                    8f:9b:82:6a:33:34:cf:0f:c9:f7:ce:d1:7c:7a:92:
                    06:3e:0e:81:53:63:b1:ba:82:5c:87:88:77:b7:ea:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EC:17:5C:A5:32:3A:67:9A:9B:E7:8A:CC:B5:F5:EC:32:AF:5C:1A
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37352e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:38:18:c2:4b:96:d8:49:6f:f0:e7:2b:36:ab:21:93:b2:e6:
         33:47:bd:57:c1:1e:f8:84:3e:3f:74:47:4b:12:5e:9f:43:c2:
         11:87:9d:b7:df:2f:35:bd:b8:17:33:de:d6:ae:99:44:fb:89:
         bc:42:61:c2:ea:c6:de:2e:38:69:65:76:c7:c9:bb:46:3d:51:
         24:e5:f0:65:cf:21:82:96:ca:bb:6a:00:50:60:2c:05:d6:c2:
         be:9f:af:e9:71:4c:2e:04:fd:45:c2:8b:50:81:b1:a5:87:31:
         2d:1e:55:c5:c6:77:c3:7f:c2:be:ff:e6:1b:44:d4:28:60:54:
         d2:51:85:62:ec:17:9c:04:01:3a:58:34:67:10:de:bd:21:ce:
         9b:2b:8d:9d:f2:f6:0c:c6:fd:d6:e6:5f:a7:54:4c:a5:8e:8c:
         8f:f5:8a:0e:64:79:5f:67:f7:a1:1c:3d:84:47:fa:74:94:4c:
         c1:77:9d:9b:5b:95:cc:a0:a3:63:87:b4:4c:6a:74:1f:0d:30:
         c8:7e:89:4b:43:03:73:d4:86:bc:53:71:84:70:35:38:56:17:
         e3:9c:76:de:31:5c:da:47:47:6a:21:76:1f:81:88:b9:b3:6c:
         a1:a1:a5:f6:de:c6:bb:bf:f6:47:f7:f2:67:bf:1f:ec:00:95:
         5c:c0:b9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org