Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130352e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3130352e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          iWpks0fveHXB2eY65Ivjf+RAi82kX0nijnnmRVSam9E=
Subject key identifier:   A6:3B:4E:13:6B:3D:98:AF:6C:27:E8:BD:24:8C:B4:40:54:07:6A:54
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       5ED036F768B4C558870AE4A8F3AAB466C56AD644
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130352e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 20:58:44 +0000
ROA not before:           Thu 25 Jul 2024 20:53:44 +0000
ROA not after:            Thu 24 Jul 2025 20:58:44 +0000
asID:                     21571
IP address blocks:        200.152.105.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d0:36:f7:68:b4:c5:58:87:0a:e4:a8:f3:aa:b4:66:c5:6a:d6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 20:53:44 2024 GMT
            Not After : Jul 24 20:58:44 2025 GMT
        Subject: CN=A63B4E136B3D98AF6C27E8BD248CB44054076A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:32:1d:e6:99:3f:c1:09:13:ef:72:0e:21:
                    62:da:17:c3:b0:b5:55:99:d7:19:65:b5:f9:20:f1:
                    71:7f:67:89:80:9e:e9:c6:1e:fb:47:97:8e:2e:fc:
                    c3:95:7f:8a:0a:ae:f5:7a:39:e9:1f:03:90:0a:1f:
                    17:44:2d:2b:03:e0:2a:04:25:a5:bb:5e:85:04:3b:
                    79:84:08:28:1c:ea:35:72:02:56:9f:ac:c9:f3:8e:
                    ae:0a:8d:66:c2:29:23:73:b2:28:68:b9:82:b3:c7:
                    af:af:c3:c8:37:ca:0b:db:ac:ad:44:f6:57:36:7e:
                    5a:cb:70:82:40:a2:38:46:d2:5b:c0:a0:ee:c2:e3:
                    65:6c:4d:a6:98:0a:6b:b8:21:98:2a:47:ea:7d:35:
                    d3:0f:f7:e1:54:f7:81:89:ad:6f:25:87:e2:aa:dc:
                    d2:f7:4e:d1:4c:f9:1d:87:37:d4:3c:54:2c:46:b2:
                    62:53:33:e2:14:2e:36:86:9b:23:81:eb:33:49:9f:
                    7e:e7:8f:11:a5:a3:bd:49:7e:0a:79:42:55:c2:9d:
                    c9:4d:fd:85:79:d0:d3:6c:e6:d4:6e:84:91:a5:52:
                    f9:ea:a0:5f:8d:96:44:db:b0:25:dd:92:da:12:14:
                    99:e4:25:21:b7:b2:27:77:77:f0:a6:94:8f:dc:bb:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:4E:13:6B:3D:98:AF:6C:27:E8:BD:24:8C:B4:40:54:07:6A:54
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130352e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:f3:1a:64:83:47:4f:b7:d1:72:ae:60:d3:5d:9b:03:19:
         b2:d9:4e:cb:82:86:e9:02:b0:e4:32:56:40:5a:a9:28:e5:0a:
         ba:fa:c1:15:77:00:45:5d:a2:74:c4:72:8c:63:d5:a1:ba:e9:
         3a:41:ea:f5:18:f3:79:5d:1c:b9:b6:59:6b:8d:fa:e2:23:d8:
         f6:1c:37:4c:5b:48:e5:31:b5:8b:82:53:33:43:cb:de:4b:bc:
         bc:5a:ad:94:82:02:bd:c8:fa:9e:58:cb:fd:e5:93:c3:f2:02:
         66:4e:61:8e:91:b5:db:9f:89:ee:88:48:61:fa:c6:a8:99:3f:
         d7:00:fd:da:4d:2a:99:b4:d9:30:05:8c:98:2a:fa:13:d9:e6:
         f1:45:a8:5c:fd:64:23:50:5a:e4:d7:5a:b8:a6:e1:7e:46:4a:
         ea:05:ba:6f:0a:89:12:8d:c7:53:35:e9:bd:75:be:cb:96:4e:
         9f:a3:e6:04:49:06:87:83:27:c8:19:79:28:03:44:8a:46:22:
         ac:73:f8:47:01:34:05:d7:9f:f4:a6:b2:f7:07:50:f5:58:1d:
         a9:fd:71:6d:9c:4d:c4:2c:5f:b8:5b:c9:86:6e:eb:8b:59:2f:
         c2:30:08:8a:8e:ce:32:67:8b:fe:a5:7b:02:3c:07:5b:37:4d:
         12:1a:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org