Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130322e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3130322e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          MVG7fgTc+w7O13yqtjf3afpK5Z7oLSnCovTI1A5CX9k=
Subject key identifier:   A0:F2:00:4F:47:F2:43:35:B9:33:F5:72:FE:37:E3:B7:6B:97:7C:F7
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       3FE0175187263D331C762513EE6A2BEEE7429C99
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130322e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 21:12:23 +0000
ROA not before:           Thu 25 Jul 2024 21:07:23 +0000
ROA not after:            Thu 24 Jul 2025 21:12:23 +0000
asID:                     21571
IP address blocks:        200.152.102.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e0:17:51:87:26:3d:33:1c:76:25:13:ee:6a:2b:ee:e7:42:9c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 21:07:23 2024 GMT
            Not After : Jul 24 21:12:23 2025 GMT
        Subject: CN=A0F2004F47F24335B933F572FE37E3B76B977CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:73:1b:b1:1a:0a:43:40:90:4c:bb:cb:5e:
                    5f:33:72:c7:bd:b3:8a:36:9c:b7:c8:2c:6e:e4:ff:
                    67:2f:69:33:97:88:01:25:c0:ab:b6:6e:3e:b1:57:
                    aa:77:38:5e:bf:11:92:f1:c3:e9:3f:c0:ed:96:d0:
                    14:e1:31:0b:29:a8:6b:76:f9:4b:1a:43:38:3a:76:
                    96:af:8a:1c:3a:cb:56:50:2e:ee:17:fe:61:95:1a:
                    2a:9c:a9:86:6e:07:9e:c1:c7:60:8c:c1:04:a2:28:
                    c6:5c:2e:d8:b7:d0:66:97:fa:ed:a0:a6:73:b0:f2:
                    a5:a3:9a:b7:d5:20:1c:e9:58:7d:87:64:56:ee:fb:
                    61:62:af:a6:1c:4f:e2:cd:f4:c3:37:b0:e1:00:b4:
                    42:cb:bc:3c:c1:92:19:97:4b:9e:37:74:3d:27:8c:
                    ec:9a:09:a0:56:0d:79:f7:f6:9b:76:8b:8d:eb:13:
                    6f:41:d4:8d:51:dd:98:a6:18:88:b6:46:fe:74:67:
                    08:df:02:4e:0d:66:96:08:e6:24:ab:28:78:ed:a8:
                    a6:81:73:8e:35:45:cc:53:d6:93:e7:7d:94:6a:9f:
                    eb:fa:c3:e6:e8:f2:ac:2b:44:38:72:01:b5:0b:59:
                    d8:80:8c:68:94:65:1f:a7:8f:8c:b9:c9:9a:2f:82:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F2:00:4F:47:F2:43:35:B9:33:F5:72:FE:37:E3:B7:6B:97:7C:F7
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130322e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:56:11:5e:a9:a3:99:3a:cc:0a:23:2c:ce:ec:03:ae:49:
         5e:6b:79:6b:0a:30:85:a2:b2:ee:f7:f3:1e:af:3a:df:1a:56:
         12:c9:e0:a1:84:15:cd:8d:8c:7f:69:af:e9:6b:17:34:fd:98:
         f2:0a:b3:7b:7e:b1:c9:01:be:9d:2f:80:5f:ff:c2:4d:f1:29:
         b0:6a:b1:09:1a:2b:5b:f9:1d:f8:36:e7:89:a1:91:5f:08:83:
         fe:c0:6e:34:04:bc:73:9e:dc:e7:d9:a7:8a:13:67:d3:64:d6:
         bb:0b:e8:69:01:fc:8f:c3:c0:42:28:aa:98:af:c9:a1:18:76:
         9e:4c:86:cf:9d:41:1b:b1:97:ba:60:21:4a:b0:2b:a2:6a:a9:
         0c:9d:ea:67:00:96:c4:56:a9:9a:b9:e8:7b:2e:d1:89:e9:bb:
         e0:0d:03:a7:0c:89:9d:9a:11:25:20:89:5a:db:33:f2:4e:c4:
         47:50:9b:c9:48:51:f4:82:a5:de:fd:d7:80:15:e0:e6:a3:83:
         30:ef:1b:20:0c:4e:c9:59:70:65:8f:02:19:7b:86:74:dd:94:
         cb:e2:0a:be:01:57:00:6c:2f:95:d3:c7:4c:1e:5d:0b:8b:13:
         8a:66:ee:91:30:4f:14:55:55:05:03:23:7b:84:3d:95:f8:ac:
         7a:1f:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org