Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37382e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          I3jnkyoAUv9ClKd5co0VWb656gc8wqpVbpxn+tlE+LM=
Subject key identifier:   2E:A5:FA:ED:1A:7C:C8:E5:D4:05:F3:F3:BE:C9:2E:EB:AF:4A:5A:8E
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       54BD011BF588CFCD4CB9DF882B664C1A98796535
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:22:17 +0000
ROA not before:           Fri 24 May 2024 00:17:17 +0000
ROA not after:            Fri 23 May 2025 00:22:17 +0000
asID:                     28184
IP address blocks:        189.89.78.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bd:01:1b:f5:88:cf:cd:4c:b9:df:88:2b:66:4c:1a:98:79:65:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:17:17 2024 GMT
            Not After : May 23 00:22:17 2025 GMT
        Subject: CN=2EA5FAED1A7CC8E5D405F3F3BEC92EEBAF4A5A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:c5:37:e6:95:d1:a8:1c:bd:21:07:17:e7:
                    5c:6e:2d:ec:63:44:ac:f1:da:72:8d:3c:78:2f:55:
                    ca:e9:18:04:9b:1f:5a:f9:67:73:44:2f:1f:73:61:
                    3b:09:9c:b3:51:a8:e0:da:3d:f8:5e:4c:fd:9b:6a:
                    2f:6c:08:d5:6b:69:11:88:61:69:5d:2d:3b:ff:3e:
                    1c:ae:5f:63:be:be:65:ba:a5:ef:cc:d0:ff:19:be:
                    d7:70:6a:c2:17:cd:cc:d2:4f:fa:13:76:f8:ec:66:
                    25:5a:7e:87:d6:c2:d0:b2:d9:21:7d:cd:ca:ba:4b:
                    be:8d:d2:95:12:b6:46:79:37:0b:17:c1:ed:0b:a4:
                    3a:ef:02:d0:d5:e3:47:a5:06:dc:a5:5b:9e:0b:76:
                    4e:14:1a:b7:9e:d9:83:6a:19:bc:ab:bb:1d:69:84:
                    73:b5:74:b4:8c:70:33:98:0d:00:65:23:43:85:48:
                    14:4f:17:ac:5c:ab:8d:b8:e7:bc:01:cf:66:e7:14:
                    cf:a8:cc:c4:b8:a8:5b:49:65:86:6e:92:d6:59:d6:
                    b8:e1:a0:50:af:1d:7b:86:c8:d0:12:0e:27:52:37:
                    a8:24:73:2b:ef:75:63:6e:05:af:44:17:8a:ee:ba:
                    a7:61:3b:d3:56:47:b5:e7:80:72:44:bd:c5:36:00:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:FA:ED:1A:7C:C8:E5:D4:05:F3:F3:BE:C9:2E:EB:AF:4A:5A:8E
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:59:28:26:a8:c1:02:92:a7:f4:a3:53:58:59:a2:25:e8:
         c2:1a:b9:f8:1b:da:7a:8f:e7:9b:11:98:34:f1:41:4e:55:a6:
         e5:90:ed:b6:40:58:f7:62:5b:60:fd:47:7e:37:df:6a:e8:9d:
         6e:fe:cc:da:2d:09:d2:97:1f:d6:42:d2:de:6b:65:02:90:7b:
         01:00:a7:c9:49:5f:89:0e:f7:9e:da:fd:ea:47:af:82:5e:fc:
         51:fb:b5:a4:00:91:66:f2:98:7a:cf:c7:c0:8a:22:63:56:a9:
         77:ee:19:d7:61:20:36:61:4d:33:36:57:55:fd:b3:ec:1d:64:
         06:f6:00:58:c7:6e:f2:76:33:74:a5:54:36:31:1f:bf:19:65:
         2e:90:b6:d5:73:b2:b1:d1:96:2c:95:9a:cb:a1:f0:3c:55:37:
         ca:96:24:66:c3:d8:19:06:38:97:93:60:fc:56:3a:fd:a4:1b:
         5d:5d:d2:43:2a:4f:33:87:36:80:f6:d8:a3:52:61:be:3f:9b:
         88:04:cf:2a:40:64:42:91:62:41:6e:31:c9:f7:9f:c8:b3:ff:
         22:97:3d:9f:a6:e2:ca:a3:28:28:a7:c1:4b:3e:fb:b9:c5:6a:
         0a:ff:26:89:2d:42:1d:c8:0f:bf:08:ed:9a:f9:af:46:b9:e9:
         db:4c:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org