Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130332e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3130332e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          UIrqqEkJXEBUzNEGLlCazUk58PAvpiZ0IP8pEQtaqLI=
Subject key identifier:   E1:05:61:23:A0:B7:6D:F8:CA:BE:9E:E8:AA:81:DC:6F:26:10:97:C9
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       6E8C2F1C3CC90613A9F8EC2928B5E4F041022BCF
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130332e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 21:12:16 +0000
ROA not before:           Thu 25 Jul 2024 21:07:16 +0000
ROA not after:            Thu 24 Jul 2025 21:12:16 +0000
asID:                     21571
IP address blocks:        200.152.103.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:2f:1c:3c:c9:06:13:a9:f8:ec:29:28:b5:e4:f0:41:02:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 21:07:16 2024 GMT
            Not After : Jul 24 21:12:16 2025 GMT
        Subject: CN=E1056123A0B76DF8CABE9EE8AA81DC6F261097C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:59:bf:d7:2c:ee:18:ad:15:05:b9:e7:f4:
                    b2:63:f3:c9:bb:b8:a0:18:ec:5a:ed:61:ff:ff:6a:
                    ea:5d:bf:e3:84:4c:cf:bf:85:b9:8a:b0:82:f3:18:
                    4f:6a:28:c1:33:61:8b:09:90:0a:b0:6d:5f:01:40:
                    40:dc:c7:a4:f7:e8:20:b7:61:e0:00:4b:ad:27:2a:
                    c3:65:08:f5:0f:74:ab:34:7d:4e:7f:87:bc:50:07:
                    3b:fc:7a:97:5e:d5:7e:b0:75:2c:a7:df:a4:05:5d:
                    df:43:db:af:b8:f2:80:93:33:81:d5:3f:53:6c:05:
                    b1:53:2e:8a:fd:51:57:d8:d1:2e:a4:74:44:9a:28:
                    ac:84:4a:6a:6d:36:af:2f:3d:76:2e:a2:22:3d:ac:
                    18:01:f4:15:b7:60:09:c1:1a:cb:47:9a:69:d9:5f:
                    99:6f:76:23:a5:cd:68:2c:bd:49:44:84:28:b2:cb:
                    00:99:e0:5a:de:83:03:a1:e1:55:cd:cc:d9:67:89:
                    44:38:2f:d2:8f:13:c1:41:72:8d:0b:a2:63:c1:59:
                    34:81:5b:25:29:3e:fa:e0:c2:97:ab:c0:83:92:c6:
                    7a:88:7e:c2:da:b8:3a:72:c1:25:9d:09:7d:c4:94:
                    2d:44:ab:49:65:66:8c:9c:68:d0:5a:74:b8:07:12:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:61:23:A0:B7:6D:F8:CA:BE:9E:E8:AA:81:DC:6F:26:10:97:C9
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130332e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:ea:52:e9:8c:7f:4f:d8:0f:21:50:f7:89:a7:8c:cc:71:
         10:42:77:dd:fe:27:d8:61:6c:7c:12:66:c2:34:a0:bf:f3:4a:
         4d:ae:16:03:52:2d:c2:a0:f6:62:9c:02:40:eb:c4:69:da:a1:
         a9:c3:d4:bc:a7:55:19:71:a2:5c:76:b0:28:c7:4b:74:ec:e5:
         1c:87:bd:72:a5:2d:51:7d:c4:ea:27:58:ee:f6:3b:28:11:1f:
         fa:c8:80:73:d4:d8:ec:10:7d:f5:82:16:61:f1:90:f8:bd:3c:
         a1:34:10:d4:3f:b5:67:14:be:13:47:ce:b6:dc:51:ac:f5:13:
         23:10:cc:fb:0d:c0:d1:1f:16:21:db:8b:6f:03:c7:c6:bc:8d:
         10:eb:2c:93:0e:55:8f:a4:19:fd:af:d5:4d:6c:23:23:97:e3:
         8f:52:2a:54:d7:22:47:b2:da:1b:5e:d6:02:70:fe:94:d8:59:
         9a:33:03:10:81:8d:73:be:b7:8b:9a:f5:97:0b:26:f1:c2:bd:
         55:2d:ca:20:a7:f0:5b:e5:ba:61:92:69:57:dd:70:91:f9:94:
         b7:e0:fa:8d:5d:7e:aa:b6:ef:7c:1f:ee:37:d2:e5:a4:70:bc:
         2e:f2:20:cd:56:ae:ab:96:a5:41:d2:c2:5e:ef:e4:5b:6d:0d:
         f6:60:d1:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbowvHDzJBhOp+OwpKLXk8EECK88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyRDBCOTlCMDRFM0JBMDFDQjZDQ0ZCMjVGRDZFQjUz
OUEyOERFMzAeFw0yNDA3MjUyMTA3MTZaFw0yNTA3MjQyMTEyMTZaMDMxMTAvBgNV
BAMTKEUxMDU2MTIzQTBCNzZERjhDQUJFOUVFOEFBODFEQzZGMjYxMDk3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYlm/1yzuGK0VBbnn9LJj88m7
uKAY7FrtYf//aupdv+OETM+/hbmKsILzGE9qKMEzYYsJkAqwbV8BQEDcx6T36CC3
YeAAS60nKsNlCPUPdKs0fU5/h7xQBzv8epde1X6wdSyn36QFXd9D26+48oCTM4HV
P1NsBbFTLor9UVfY0S6kdESaKKyESmptNq8vPXYuoiI9rBgB9BW3YAnBGstHmmnZ
X5lvdiOlzWgsvUlEhCiyywCZ4FregwOh4VXNzNlniUQ4L9KPE8FBco0LomPBWTSB
WyUpPvrgwperwIOSxnqIfsLauDpywSWdCX3ElC1Eq0llZoycaNBadLgHEnXHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4QVhI6C3bfjKvp7oqoHcbyYQl8kwHwYDVR0j
BBgwFoAUiC0LmbBOO6Actsz7Jf1utTmijeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1qVGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFT
akUvMC84ODJEMEI5OUIwNEUzQkEwMUNCNkNDRkIyNUZENkVCNTM5QTI4REUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkQwQjk5QjA0RTNCQTAx
Q0I2Q0NGQjI1RkQ2RUI1MzlBMjhERTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htalRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAv
MzIzMDMwMmUzMTM1MzIyZTMxMzAzMzJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDMy
MzEzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADImGcwDQYJKoZIhvcNAQELBQADggEBAF6r6lLp
jH9P2A8hUPeJp4zMcRBCd93+J9hhbHwSZsI0oL/zSk2uFgNSLcKg9mKcAkDrxGna
oanD1LynVRlxolx2sCjHS3Ts5RyHvXKlLVF9xOonWO72OygRH/rIgHPU2OwQffWC
FmHxkPi9PKE0ENQ/tWcUvhNHzrbcUaz1EyMQzPsNwNEfFiHbi28Dx8a8jRDrLJMO
VY+kGf2v1U1sIyOX449SKlTXIkey2hte1gJw/pTYWZozAxCBjXO+t4ua9ZcLJvHC
vVUtyiCn8FvlumGSaVfdcJH5lLfg+o1dfqq273wf7jfS5aRwvC7yIM1WrquWpUHS
wl7v5FttDfZg0ac=
-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org