Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37382e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          gvJrmLIpWFQqmk6PAzv4oANm0NxBSeM8f3NjkLeKV5Q=
Subject key identifier:   2F:A1:A6:66:E2:2D:64:40:17:CD:42:D3:24:9D:45:33:5B:4D:D8:D8
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       7A816DE9C6DF41CA7A36166D243CCD786EF0E285
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:22:21 +0000
ROA not before:           Fri 24 May 2024 00:17:21 +0000
ROA not after:            Fri 23 May 2025 00:22:21 +0000
asID:                     28184
IP address blocks:        189.89.78.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:81:6d:e9:c6:df:41:ca:7a:36:16:6d:24:3c:cd:78:6e:f0:e2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:17:21 2024 GMT
            Not After : May 23 00:22:21 2025 GMT
        Subject: CN=2FA1A666E22D644017CD42D3249D45335B4DD8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:e4:2e:91:a5:8d:38:ef:26:cd:25:bb:32:
                    d9:40:3d:71:04:5e:0a:5d:4c:36:6e:f9:32:5b:87:
                    75:40:94:a9:ec:64:26:dc:0a:9e:de:11:b8:fb:13:
                    70:fe:a1:c5:15:9e:ce:71:ff:5e:8a:11:96:97:3c:
                    c4:d0:ab:cf:ee:58:7a:d3:db:c6:e8:28:bc:c8:a7:
                    18:27:8e:92:79:65:43:7e:2b:2e:0d:93:95:e5:09:
                    a2:e5:7c:71:0f:53:4d:72:12:ab:31:ce:e4:e7:05:
                    9e:e4:73:a2:1f:04:83:a9:db:b2:80:02:1c:e9:2f:
                    33:39:ae:88:0c:51:f9:6c:04:db:3a:b5:3f:0f:0a:
                    74:c8:b3:ce:31:2a:fd:7f:7c:42:03:ef:2c:5e:8a:
                    4f:68:2e:94:bc:26:ff:5b:fa:00:ae:2e:9f:e1:fd:
                    2d:30:3a:ed:e5:47:ad:f0:f8:ce:ca:51:fc:f9:4c:
                    0e:67:e4:6a:5a:7e:bb:6d:da:c3:fc:44:74:a2:c8:
                    fa:92:9e:8f:ac:46:54:62:4a:0d:f0:58:54:b6:cc:
                    0c:35:81:d5:84:a8:f7:0b:19:ff:4c:25:ea:93:18:
                    4f:d2:67:60:81:8f:48:09:7c:8b:25:94:60:26:dd:
                    b5:8f:4d:34:2d:12:0b:1e:89:74:ff:b3:dc:12:32:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A1:A6:66:E2:2D:64:40:17:CD:42:D3:24:9D:45:33:5B:4D:D8:D8
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:87:be:25:dd:c7:ac:10:ed:82:47:87:c7:b4:de:9d:80:
         00:a0:93:47:10:4d:6e:fa:c5:14:78:e2:12:bf:54:f6:4a:6f:
         f2:10:af:d0:89:b3:20:3a:af:10:7e:43:3e:61:3b:f8:6f:5a:
         4e:5e:ab:db:ee:54:cd:83:ee:83:f4:18:53:00:3f:90:0d:30:
         65:29:b5:22:cf:5c:78:c2:ce:03:ce:9c:04:97:c7:19:12:97:
         6d:21:96:8b:c3:05:09:87:b7:45:ee:9d:97:d1:81:95:0f:9a:
         83:e2:2d:e5:7e:27:31:e1:20:9b:b8:e4:96:16:21:b2:30:c8:
         b1:f3:f7:5f:f3:a9:d5:30:3e:ea:99:27:98:c4:ef:28:bb:3a:
         23:e6:22:07:cb:b6:0b:5f:e6:7f:fd:4f:a0:41:31:95:db:fd:
         49:09:df:b6:4f:12:85:99:c7:67:22:be:c7:f5:d4:d7:32:f6:
         91:ec:45:21:15:ce:c7:1b:ea:0d:c3:e3:56:90:18:26:2e:b0:
         4d:ab:f6:aa:8a:ce:09:3e:f8:85:7e:8f:0d:49:17:28:1f:4c:
         f6:12:d7:2c:57:54:1f:f7:63:15:6a:e3:63:14:24:fa:a3:6b:
         0b:dd:bb:ea:f0:5a:60:3c:2c:bb:de:3d:bf:19:1a:92:6b:d1:
         d2:47:7b:f6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeoFt6cbfQcp6NhZtJDzNeG7w4oUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyNEZFMzNDOUY3M0I2NTQ3MURGQTkzQkE4REU5MjFF
NEZBMTE2NjAeFw0yNDA1MjQwMDE3MjFaFw0yNTA1MjMwMDIyMjFaMDMxMTAvBgNV
BAMTKDJGQTFBNjY2RTIyRDY0NDAxN0NENDJEMzI0OUQ0NTMzNUI0REQ4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnxOQukaWNOO8mzSW7MtlAPXEE
XgpdTDZu+TJbh3VAlKnsZCbcCp7eEbj7E3D+ocUVns5x/16KEZaXPMTQq8/uWHrT
28boKLzIpxgnjpJ5ZUN+Ky4Nk5XlCaLlfHEPU01yEqsxzuTnBZ7kc6IfBIOp27KA
AhzpLzM5rogMUflsBNs6tT8PCnTIs84xKv1/fEID7yxeik9oLpS8Jv9b+gCuLp/h
/S0wOu3lR63w+M7KUfz5TA5n5Gpafrtt2sP8RHSiyPqSno+sRlRiSg3wWFS2zAw1
gdWEqPcLGf9MJeqTGE/SZ2CBj0gJfIsllGAm3bWPTTQtEgseiXT/s9wSMgXdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUL6GmZuItZEAXzULTJJ1FM1tN2NgwHwYDVR0j
BBgwFoAU5iT+M8n3O2VHHfqTuo3pIeT6EWYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9FNjI0RkUzM0M5RjczQjY1NDcxREZBOTNCQThERTkyMUU0RkExMTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MjRGRTMzQzlGNzNCNjU0
NzFERkE5M0JBOERFOTIxRTRGQTExNjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZTjANBgkqhkiG9w0BAQsFAAOCAQEAEZ+HviXdx6wQ
7YJHh8e03p2AAKCTRxBNbvrFFHjiEr9U9kpv8hCv0ImzIDqvEH5DPmE7+G9aTl6r
2+5UzYPug/QYUwA/kA0wZSm1Is9ceMLOA86cBJfHGRKXbSGWi8MFCYe3Re6dl9GB
lQ+ag+It5X4nMeEgm7jklhYhsjDIsfP3X/Op1TA+6pknmMTvKLs6I+YiB8u2C1/m
f/1PoEExldv9SQnftk8ShZnHZyK+x/XU1zL2kexFIRXOxxvqDcPjVpAYJi6wTav2
qorOCT74hX6PDUkXKB9M9hLXLFdUH/djFWrjYxQk+qNrC9276vBaYDwsu949vxka
kmvR0kd79g==
-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org