Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37392e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          dfeq6qzjU2jaz9dBCFHs2+IXwThmoO6UC9db82RbYSU=
Subject key identifier:   33:DF:03:12:B9:9B:91:17:B5:F8:7B:01:1B:C1:AB:E0:7A:BC:3C:D0
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       467E511C03894844DB8ABC923478550C9E14B256
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:22:25 +0000
ROA not before:           Fri 24 May 2024 00:17:25 +0000
ROA not after:            Fri 23 May 2025 00:22:25 +0000
asID:                     28184
IP address blocks:        189.89.79.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7e:51:1c:03:89:48:44:db:8a:bc:92:34:78:55:0c:9e:14:b2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:17:25 2024 GMT
            Not After : May 23 00:22:25 2025 GMT
        Subject: CN=33DF0312B99B9117B5F87B011BC1ABE07ABC3CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:5f:3a:60:9e:fb:d7:74:55:e9:30:cf:6b:
                    23:46:68:38:79:a5:98:ae:f2:d4:10:bd:80:03:5a:
                    b3:fe:d0:43:46:5a:1c:35:8e:15:3b:d2:18:1d:76:
                    f5:58:86:33:55:e6:f7:21:31:36:dd:df:de:56:a9:
                    6e:2e:ef:aa:c8:53:61:67:75:93:22:bb:a6:ad:e8:
                    70:15:9e:44:0b:df:8e:4f:62:9d:0e:ac:2d:b6:41:
                    49:af:f9:cb:9c:80:61:71:69:0b:42:06:68:04:f7:
                    0e:ba:e8:de:ab:0e:4c:e3:ff:7c:bd:cb:37:e0:e2:
                    24:d2:53:e2:4d:61:04:e8:24:7c:e4:4d:29:54:3c:
                    c2:15:1c:21:d7:4d:cc:12:bb:bd:13:c0:2e:a7:4f:
                    15:91:48:14:dd:9b:01:30:d6:75:58:af:10:d9:aa:
                    c8:53:af:ef:4d:f9:f9:f1:7d:1f:ea:f7:e6:36:84:
                    99:a6:e1:7a:4c:01:12:8b:d6:cf:7a:03:bc:91:de:
                    78:43:28:ee:0d:96:58:65:ec:82:8b:e1:cc:ae:f5:
                    17:5e:42:50:34:71:f8:c2:94:42:e9:27:ea:d0:ce:
                    5a:f5:26:2b:cb:af:6a:6b:09:06:77:c8:bb:b9:cf:
                    dd:fb:92:ad:e3:3d:f9:ef:5c:12:b9:23:73:29:98:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DF:03:12:B9:9B:91:17:B5:F8:7B:01:1B:C1:AB:E0:7A:BC:3C:D0
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:69:0e:0f:ea:5c:6d:1f:b7:91:e2:84:12:60:b9:52:b4:
         b5:9d:03:cd:d2:a7:b2:80:71:ed:8d:af:78:91:ce:c7:b3:70:
         4e:df:b9:88:d6:28:c5:59:54:fd:04:23:fe:b7:d1:a0:ae:f7:
         92:58:52:e2:9d:dc:aa:a4:6c:0d:07:76:38:fb:d6:cf:87:a8:
         8d:31:d9:1e:a7:1e:c6:87:56:5c:27:50:c1:3e:8e:43:29:b1:
         71:b7:0d:be:a9:69:ce:cf:44:c6:b2:e9:8b:5e:73:4b:0b:d7:
         02:72:79:90:15:5d:d6:3d:2d:99:89:c1:b3:94:ef:49:c7:7a:
         75:1a:61:1d:2e:88:4b:8b:9a:d9:f3:db:aa:d7:05:28:ab:91:
         62:00:6c:ef:39:0b:d6:a5:4d:b6:68:11:b6:3c:f9:12:11:cd:
         0a:07:dc:4c:36:5a:0e:06:45:31:70:79:df:10:97:c3:e2:79:
         1f:cd:18:81:3c:0d:1d:cf:53:01:14:c4:b0:06:95:7e:87:79:
         43:47:26:22:7a:da:a8:ac:c3:99:1f:84:2d:29:5f:48:f7:34:
         be:18:6d:41:e0:b1:56:db:f3:a8:b8:a6:89:76:a8:5d:64:bb:
         d7:99:af:65:4d:1e:ac:fa:06:1f:b4:7c:15:7d:76:28:af:77:
         16:57:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org