Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130342e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3130342e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          WoKxconmPatCppbqS4G7ELjs8A+2gyMUGwWaRHs9Hco=
Subject key identifier:   61:03:54:C0:5F:2C:CF:78:F1:70:58:08:4A:60:6C:3D:42:6C:F3:90
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       67E20B0C4BD1BF614E22716BBEFDD32249A0CAC6
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130342e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 20:58:52 +0000
ROA not before:           Thu 25 Jul 2024 20:53:52 +0000
ROA not after:            Thu 24 Jul 2025 20:58:52 +0000
asID:                     21571
IP address blocks:        200.152.104.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e2:0b:0c:4b:d1:bf:61:4e:22:71:6b:be:fd:d3:22:49:a0:ca:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 20:53:52 2024 GMT
            Not After : Jul 24 20:58:52 2025 GMT
        Subject: CN=610354C05F2CCF78F17058084A606C3D426CF390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:9a:64:a0:89:68:b0:6d:42:bd:a4:16:7e:
                    a5:75:db:5c:8c:ea:b5:d4:49:0d:53:5f:20:71:28:
                    c7:65:74:3c:bc:e2:92:aa:7b:57:4d:9a:c0:0d:f6:
                    71:4c:c0:7e:59:b9:ab:70:ca:90:13:98:2a:06:2f:
                    b7:fb:ef:7f:c6:76:49:e5:04:88:2a:99:e4:8b:ba:
                    dc:90:6c:a5:bc:94:8a:c4:c7:4c:1c:f8:67:65:6e:
                    1e:79:27:56:28:3e:96:78:6e:1f:2e:0b:18:ae:dc:
                    18:b5:20:59:b8:0d:c4:e6:8d:0a:e6:9c:bd:b9:59:
                    4f:c3:df:7a:04:27:fd:34:da:91:4e:18:1c:6e:16:
                    43:5d:6d:c7:63:5c:ef:19:95:d7:6a:b4:cd:7a:99:
                    f5:17:cb:41:55:d2:c2:d0:12:d7:de:ff:43:e2:a1:
                    4a:bb:e7:bb:9f:5d:aa:e7:b7:9c:16:48:9d:aa:1d:
                    60:e4:60:9a:14:d4:74:6d:bd:68:3e:a4:47:3c:dd:
                    a4:bf:4b:e1:a5:59:d0:2c:92:fe:1b:14:4c:5d:d0:
                    34:54:31:a3:6c:c2:87:1f:c3:31:ef:8a:12:15:ca:
                    d5:83:21:78:e5:27:fe:84:a5:d5:6e:2f:05:b6:e6:
                    08:f4:1b:7b:53:c3:b1:41:fe:35:54:32:bf:65:44:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:03:54:C0:5F:2C:CF:78:F1:70:58:08:4A:60:6C:3D:42:6C:F3:90
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130342e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:ea:bd:d3:a5:77:9a:44:77:3a:ff:f3:82:34:f0:13:cb:
         83:55:a5:0a:a8:f6:9f:29:8e:e8:45:00:be:18:d4:80:5a:ea:
         6c:9f:a7:0b:30:2e:ab:41:2f:cf:a6:18:de:e7:fb:e1:ee:9e:
         ae:16:2d:db:e6:be:4e:2e:8f:2e:84:0c:ac:30:38:53:2c:f5:
         c7:03:22:57:3a:c7:59:7d:fa:64:db:e8:21:14:fd:08:91:29:
         47:47:1a:df:fe:bf:d9:21:e2:13:da:8b:35:f0:06:3f:50:bc:
         b3:10:4b:5f:8a:aa:9d:a3:9c:5e:d4:b2:0e:43:bd:61:74:09:
         c6:c8:80:57:8b:89:00:4a:6e:8c:ae:59:54:c1:f9:2e:c3:54:
         1e:0d:15:58:d4:64:2f:a3:60:2f:75:6f:08:f5:6e:19:eb:73:
         4a:05:8e:1b:e3:b4:44:60:d1:bb:f0:a9:26:4a:48:49:b6:e7:
         f5:63:2e:51:05:fe:a8:c1:80:e6:04:bd:2b:59:1f:ac:35:3a:
         d0:dd:f5:56:bc:0b:8e:3f:9e:17:0f:d9:28:29:88:02:7e:12:
         57:7b:cd:8d:b8:48:8f:30:e6:5a:dc:41:36:1f:a8:f8:65:9c:
         6a:0a:46:f8:f6:30:e7:68:d4:22:97:a7:e9:57:b1:f8:87:13:
         68:e2:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org