Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37362e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          MBEMeYa0s29naE49bt1iyd/+gNaK9noyLBJ6XNTwn3M=
Subject key identifier:   08:66:52:BD:7E:22:96:FC:5E:15:94:AB:54:3C:09:AC:44:66:65:C9
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       4D6FA07498DE2CE82981DF96E8233EA14636CEAE
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:20:22 +0000
ROA not before:           Fri 24 May 2024 00:15:22 +0000
ROA not after:            Fri 23 May 2025 00:20:22 +0000
asID:                     28184
IP address blocks:        189.89.76.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6f:a0:74:98:de:2c:e8:29:81:df:96:e8:23:3e:a1:46:36:ce:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:15:22 2024 GMT
            Not After : May 23 00:20:22 2025 GMT
        Subject: CN=086652BD7E2296FC5E1594AB543C09AC446665C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:e8:5b:a0:2b:de:7c:78:ed:46:cb:85:a1:
                    ce:61:98:8d:4b:f6:48:c5:a4:f1:be:10:fd:b7:9f:
                    aa:de:09:c6:47:aa:47:aa:ff:79:da:ee:1b:77:96:
                    5c:27:8a:33:8b:4d:dd:0f:04:a4:4f:ec:b2:b8:1c:
                    9e:d7:87:02:fc:34:61:70:56:f9:99:09:72:5e:33:
                    f7:b0:8f:6f:9d:a4:9f:b9:1a:a9:ec:ec:8f:b8:ae:
                    22:4a:57:27:3d:30:b3:46:e8:02:e2:3d:4a:26:cb:
                    61:b7:1b:37:23:76:3b:6d:37:90:25:3f:21:54:99:
                    66:6b:30:ea:ba:05:3b:7b:6b:38:cc:90:f9:86:15:
                    5f:2e:78:71:20:2b:9e:fc:9b:34:0b:c8:b6:80:46:
                    ed:30:49:61:93:8c:cb:32:55:9f:b8:bb:1d:e7:16:
                    62:d5:85:e1:e9:21:80:8c:9a:2a:12:c2:14:c9:c9:
                    59:89:56:7a:7d:67:81:b8:4a:5d:7c:e0:1b:06:d2:
                    f6:a8:8d:95:f0:d3:9b:6c:7a:a8:e4:27:e6:48:86:
                    5d:b1:ad:e2:10:e5:18:a9:e2:0a:39:eb:df:4c:a1:
                    41:54:07:8f:70:14:03:86:32:4b:4e:98:7d:6d:5c:
                    50:78:09:50:51:44:68:d3:c5:50:84:24:67:67:06:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:66:52:BD:7E:22:96:FC:5E:15:94:AB:54:3C:09:AC:44:66:65:C9
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:8b:25:db:d8:32:cd:75:63:04:46:ec:a4:c4:b7:f9:e0:d5:
         16:25:53:b8:8b:3c:b8:b6:3e:f9:08:12:50:e0:de:86:27:c2:
         53:9b:a2:93:81:22:88:ca:7f:48:0c:79:fc:45:9c:e0:e4:fa:
         32:ab:de:ab:be:c8:61:c9:b3:96:72:34:3b:21:ae:dc:86:2f:
         cb:e0:95:29:dc:eb:a8:8e:07:a2:14:e8:7f:c5:da:fd:2c:a2:
         9b:d2:ee:3c:c1:a3:50:9f:09:36:94:ed:55:8f:30:c6:e9:0c:
         5f:4b:a2:dd:f9:8e:6b:2a:15:74:d4:a3:5e:cc:65:9d:b2:e4:
         72:f9:25:0b:2d:58:cd:29:d8:f9:94:8e:b7:5c:e0:a1:71:81:
         1a:2e:ce:0a:83:9f:25:ef:0e:08:83:a7:94:10:94:8a:f5:e4:
         88:84:97:40:43:23:c8:0a:8e:80:61:7d:f1:8a:28:7f:a2:0b:
         c4:54:49:31:2a:b1:15:c3:84:a1:a5:14:08:96:d1:bd:32:65:
         6a:da:38:63:8f:7c:86:f4:31:2d:11:38:00:50:5d:dc:80:af:
         8a:91:a8:d0:ad:be:08:d7:6e:b7:9b:cd:74:7d:b7:7b:7f:f5:
         70:57:4e:bd:f4:a2:9a:4a:2f:ce:20:eb:a3:93:fe:ff:a7:4f:
         fb:2d:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org