Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32322d3232203d3e203238313834.roa
File:                     3138392e38392e37362e302f32322d3232203d3e203238313834.roa (raw, json)
Hash identifier:          hLFp0OKhs2Iov87+cCSV6oREA9hL3B2wUVsr2WhXwTA=
Subject key identifier:   B6:DC:B6:59:E7:32:73:58:5A:CB:B6:44:B9:A6:1E:52:55:00:4B:51
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       714F8A20D233DD5D4A945474D7A2EBA4F1F23220
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32322d3232203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:20:25 +0000
ROA not before:           Fri 24 May 2024 00:15:25 +0000
ROA not after:            Fri 23 May 2025 00:20:25 +0000
asID:                     28184
IP address blocks:        189.89.76.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4f:8a:20:d2:33:dd:5d:4a:94:54:74:d7:a2:eb:a4:f1:f2:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:15:25 2024 GMT
            Not After : May 23 00:20:25 2025 GMT
        Subject: CN=B6DCB659E73273585ACBB644B9A61E5255004B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:95:4e:35:1f:4f:f1:17:12:77:b3:9f:4e:
                    6e:50:12:24:92:bc:a6:49:d0:e7:31:b6:d6:e8:77:
                    d7:47:38:dc:34:d6:ea:cc:4a:f0:31:75:7d:97:71:
                    22:2a:f8:b5:80:60:7c:9e:eb:30:80:ab:1c:fe:44:
                    08:ce:b0:77:99:bf:13:3a:0c:b9:ea:13:c4:bf:0c:
                    58:f6:e4:ab:82:b9:2c:32:d9:ca:02:fa:b3:93:2f:
                    b4:56:a8:12:be:61:91:ce:d6:72:99:97:29:ca:73:
                    f9:3b:83:e1:90:83:4b:42:c0:18:9f:c3:45:9e:f5:
                    f6:c7:1d:a8:cd:a2:75:ee:c9:fe:f0:ac:79:f6:c5:
                    b1:7b:36:4c:17:5c:f6:28:ee:c5:e0:33:59:08:6b:
                    10:8d:e2:b4:e1:36:38:8c:c9:f8:c1:fe:c7:a3:69:
                    76:1d:a4:fc:fc:dc:15:fe:2a:82:ff:06:2a:61:8a:
                    a6:49:c8:61:68:6d:ed:e6:27:b9:f9:12:0d:0b:49:
                    54:4a:8b:1a:89:fc:9e:0a:e1:d7:74:9f:5e:dd:da:
                    db:bf:ee:b4:3f:95:38:23:67:fc:49:98:00:99:77:
                    31:51:33:e0:ce:79:bf:7e:ef:8b:89:fb:23:16:1b:
                    6a:0f:26:ca:f1:99:4b:2f:47:e2:80:5e:e4:5a:05:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DC:B6:59:E7:32:73:58:5A:CB:B6:44:B9:A6:1E:52:55:00:4B:51
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32322d3232203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:01:12:c0:6b:4b:04:74:bd:14:a1:c0:6e:f5:54:18:66:
         eb:20:8c:99:a1:76:03:82:a7:0b:88:b2:57:ff:69:34:85:da:
         12:33:4e:82:22:cf:ee:6c:ed:13:7e:3a:36:35:e8:5d:83:87:
         37:7e:88:bd:8d:f0:9b:c7:38:4a:01:eb:80:95:73:bb:94:fe:
         bf:36:b3:0c:54:a1:1f:5b:04:48:9b:e3:83:e7:09:21:d5:9e:
         c6:ec:f2:7f:52:f2:42:6b:73:36:ae:9e:93:7d:b2:8d:a8:66:
         c3:2a:62:9b:48:d6:9f:a1:d7:d4:6b:77:21:a5:90:25:64:03:
         db:0f:1e:7a:a3:65:6b:43:68:e1:85:4b:db:23:94:48:f3:be:
         89:9b:79:02:31:7b:b3:2e:c6:04:e6:24:b9:f7:ad:f8:0c:db:
         66:04:7e:a5:b5:16:52:9a:b1:e6:e4:b8:e3:8d:cc:94:a9:49:
         1e:19:03:98:23:f7:88:53:33:9e:0f:51:99:f8:c7:9e:9b:02:
         53:44:2a:fd:87:44:98:60:38:e7:b1:78:2d:ff:4b:07:40:0f:
         79:63:e5:dd:32:ea:d2:08:66:98:a8:e2:39:de:8a:62:b0:d6:
         d1:27:64:28:77:3f:d0:b1:23:55:14:81:a3:2a:63:14:a2:65:
         62:86:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org