Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37372e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          +bGq5ID7CvOwJlBYzYX0AnqoCt5Z86UjOZbuSn5GJmA=
Subject key identifier:   5A:73:76:3B:2A:9B:C2:3E:DA:DE:88:59:9D:79:21:5F:17:E2:6A:CE
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       6D5967CCD08B3627CEE8E42F48DAEB15B1641A71
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:22:12 +0000
ROA not before:           Fri 24 May 2024 00:17:12 +0000
ROA not after:            Fri 23 May 2025 00:22:12 +0000
asID:                     28184
IP address blocks:        189.89.77.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:67:cc:d0:8b:36:27:ce:e8:e4:2f:48:da:eb:15:b1:64:1a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:17:12 2024 GMT
            Not After : May 23 00:22:12 2025 GMT
        Subject: CN=5A73763B2A9BC23EDADE88599D79215F17E26ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:27:9b:43:26:14:29:c2:fd:f1:ac:9f:74:
                    18:5d:ef:a9:79:32:51:39:a4:0f:fd:1e:fc:37:d2:
                    5b:9d:a3:da:fa:9d:7d:5c:6f:f0:b4:53:fc:ee:7b:
                    8e:d1:2b:d0:14:0b:82:40:07:5d:75:55:37:49:72:
                    4e:84:19:33:9e:ca:c1:50:c8:af:82:82:3d:73:fb:
                    73:2e:16:bc:53:95:54:34:e9:bc:87:fa:da:a6:98:
                    a1:f8:01:26:c7:73:72:5b:11:1a:57:ac:36:2a:00:
                    39:c9:9b:70:a9:97:3e:43:98:35:ba:06:79:5c:07:
                    ab:fb:31:90:b0:23:24:92:b4:cc:f7:ad:0d:80:03:
                    94:3d:e1:4e:8f:29:cf:7f:e3:bf:a6:ca:27:06:e7:
                    9b:68:1b:71:71:80:01:b0:ca:9e:6c:cb:83:fa:e2:
                    2b:6a:88:95:f4:cd:5c:7e:35:75:d6:84:4e:20:b7:
                    24:28:bd:00:27:71:85:40:6d:1c:17:6b:1f:1b:44:
                    f2:f8:8c:8f:ba:21:d2:58:50:37:9b:ec:ec:c6:ce:
                    4d:5f:82:c8:72:d4:fc:93:fd:d7:f8:41:28:2e:95:
                    ab:07:ca:a4:86:c7:bd:11:46:72:47:aa:9d:ad:0f:
                    51:6b:93:da:9b:07:b8:9e:85:e4:d5:99:52:2c:d6:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:76:3B:2A:9B:C2:3E:DA:DE:88:59:9D:79:21:5F:17:E2:6A:CE
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:b9:02:39:f0:d8:cd:2d:ee:2a:90:74:03:e1:08:81:16:7b:
         0e:f4:1f:ea:90:7f:2b:bb:f1:47:8c:7e:32:4a:7f:5f:d9:4d:
         a9:fd:93:51:18:26:72:30:3b:64:03:95:d9:5d:03:50:f8:63:
         d5:e4:03:37:53:ea:87:b3:50:3f:7f:e6:43:4c:6c:e7:d8:64:
         23:0a:54:6e:7e:21:8e:44:ab:b1:a3:5a:58:0b:a5:13:b1:f0:
         99:38:a2:53:b4:80:2b:18:72:12:7f:ef:2b:49:20:cf:01:cf:
         b3:f7:75:0f:cf:f2:d1:d6:b5:60:b5:e3:8e:d1:34:73:5f:bc:
         5a:2c:bb:16:81:c9:96:06:0e:35:ea:0d:1f:ab:f5:a0:d0:06:
         a2:4a:de:e4:52:25:6a:7c:e5:bf:2c:71:56:72:a9:52:58:91:
         bd:70:88:e6:f6:b4:62:21:cb:d2:47:aa:35:b8:6d:11:63:91:
         be:ae:6a:07:51:a4:28:e3:9d:4e:58:ba:3b:ad:15:62:dc:61:
         26:3a:f9:79:95:78:c3:c3:a7:b5:ab:30:20:1d:69:46:b8:e2:
         4a:1a:77:63:29:1b:16:f6:2b:53:64:28:6d:8a:c3:cf:59:ef:
         af:ab:a5:c0:33:4c:bc:74:d1:36:fd:98:b2:7c:a7:20:19:1c:
         d5:53:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org