Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130362e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3130362e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          kGaZrK8y5A9gMKjEGbj9HMQQ1VOb+Obhfn/Pz3OXtqE=
Subject key identifier:   DD:81:D2:59:90:6F:6B:73:5D:52:A2:A4:77:9C:AB:5A:D9:B7:98:84
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       40AF6E944856A96BF8E4FFD76327592AD7E9A48F
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130362e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 20:27:25 +0000
ROA not before:           Thu 25 Jul 2024 20:22:25 +0000
ROA not after:            Thu 24 Jul 2025 20:27:25 +0000
asID:                     21571
IP address blocks:        200.152.106.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:af:6e:94:48:56:a9:6b:f8:e4:ff:d7:63:27:59:2a:d7:e9:a4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 20:22:25 2024 GMT
            Not After : Jul 24 20:27:25 2025 GMT
        Subject: CN=DD81D259906F6B735D52A2A4779CAB5AD9B79884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:63:53:36:ef:2b:2c:7c:6d:d8:1e:6d:bc:
                    e6:3e:9b:f8:25:38:f0:3e:46:25:72:5f:25:4b:b2:
                    74:c0:16:ba:14:35:6c:ef:a0:bf:b3:51:2b:80:26:
                    26:86:83:e6:04:aa:2b:f1:01:54:95:59:73:ef:d3:
                    1b:01:06:2f:5a:8c:41:36:1a:2d:80:25:c1:bb:40:
                    6e:cf:4b:fc:82:ed:ce:cd:0b:3f:37:76:24:9a:43:
                    fe:8f:0e:e3:0c:0a:b2:28:1c:6d:58:50:2e:b2:6e:
                    71:f7:16:3a:59:fe:80:59:9a:07:df:8a:53:09:70:
                    9a:f4:6e:d1:b5:8c:ce:b9:83:49:a9:c6:f0:22:ff:
                    39:8e:ac:b8:bc:fb:d3:dd:f9:d2:82:f1:9d:bf:ed:
                    6a:53:4a:63:56:b7:bd:37:38:63:5f:d5:43:37:bd:
                    65:d8:aa:4a:0d:03:91:52:77:37:94:76:2d:a7:c0:
                    c9:6e:9e:96:9d:30:43:23:98:03:2e:89:8e:07:c6:
                    18:14:58:a7:d5:8a:5e:fc:57:81:a4:91:02:8e:fe:
                    27:f4:73:84:54:54:93:26:74:25:0f:24:20:c0:07:
                    67:64:39:58:0f:3d:72:61:4a:3e:9d:c1:97:51:7f:
                    9b:50:c1:03:c6:87:3f:73:d3:28:67:ed:eb:03:e9:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:D2:59:90:6F:6B:73:5D:52:A2:A4:77:9C:AB:5A:D9:B7:98:84
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130362e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:9c:8b:c0:71:78:13:e8:0c:78:5a:ca:34:96:62:da:ba:17:
         9c:03:7d:ba:14:82:82:ab:82:7c:c7:ea:d4:c2:95:5e:c9:b3:
         bd:28:c8:84:ce:e3:3a:55:ba:72:49:30:81:b8:0e:5d:55:71:
         fe:96:81:e8:af:6d:7b:b5:b8:ec:df:7f:fb:f9:50:25:8c:af:
         50:c4:5c:59:db:0e:b9:ad:7c:72:4b:80:1d:e2:68:1d:3d:83:
         a3:53:a3:2c:d4:ab:7f:a0:42:32:7e:7f:ae:2e:cc:6f:06:b2:
         0e:4c:ba:ff:e8:87:38:14:12:af:73:e5:33:7f:03:e3:7c:3b:
         64:93:2a:07:b6:f1:55:4e:a3:e0:2f:8c:5c:ac:65:63:ce:99:
         aa:a8:85:17:3a:3a:cf:5d:d8:8c:bf:05:43:9c:6d:b7:fb:08:
         65:8a:36:d3:62:dd:10:ca:b7:9c:0e:bc:e5:56:2c:55:62:5d:
         f6:ca:d9:75:7d:e8:fd:41:88:94:d3:ad:82:a8:2a:62:72:a2:
         62:5c:15:e1:05:8d:a2:31:65:d5:88:0a:32:f6:a7:08:e7:68:
         b0:72:40:09:ca:7f:f8:4f:4f:30:36:5d:6f:cc:48:61:45:2c:
         6e:fb:e4:b1:d9:44:3d:ca:e1:4e:34:b4:4e:bd:30:e1:b9:b8:
         31:bb:64:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQK9ulEhWqWv45P/XYydZKtfppI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyRDBCOTlCMDRFM0JBMDFDQjZDQ0ZCMjVGRDZFQjUz
OUEyOERFMzAeFw0yNDA3MjUyMDIyMjVaFw0yNTA3MjQyMDI3MjVaMDMxMTAvBgNV
BAMTKEREODFEMjU5OTA2RjZCNzM1RDUyQTJBNDc3OUNBQjVBRDlCNzk4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroWNTNu8rLHxt2B5tvOY+m/gl
OPA+RiVyXyVLsnTAFroUNWzvoL+zUSuAJiaGg+YEqivxAVSVWXPv0xsBBi9ajEE2
Gi2AJcG7QG7PS/yC7c7NCz83diSaQ/6PDuMMCrIoHG1YUC6ybnH3FjpZ/oBZmgff
ilMJcJr0btG1jM65g0mpxvAi/zmOrLi8+9Pd+dKC8Z2/7WpTSmNWt703OGNf1UM3
vWXYqkoNA5FSdzeUdi2nwMlunpadMEMjmAMuiY4HxhgUWKfVil78V4GkkQKO/if0
c4RUVJMmdCUPJCDAB2dkOVgPPXJhSj6dwZdRf5tQwQPGhz9z0yhn7esD6U2tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3YHSWZBva3NdUqKkd5yrWtm3mIQwHwYDVR0j
BBgwFoAUiC0LmbBOO6Actsz7Jf1utTmijeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1qVGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFT
akUvMC84ODJEMEI5OUIwNEUzQkEwMUNCNkNDRkIyNUZENkVCNTM5QTI4REUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkQwQjk5QjA0RTNCQTAx
Q0I2Q0NGQjI1RkQ2RUI1MzlBMjhERTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htalRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAv
MzIzMDMwMmUzMTM1MzIyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDMy
MzEzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADImGowDQYJKoZIhvcNAQELBQADggEBAKCci8Bx
eBPoDHhayjSWYtq6F5wDfboUgoKrgnzH6tTClV7Js70oyITO4zpVunJJMIG4Dl1V
cf6WgeivbXu1uOzff/v5UCWMr1DEXFnbDrmtfHJLgB3iaB09g6NToyzUq3+gQjJ+
f64uzG8Gsg5Muv/ohzgUEq9z5TN/A+N8O2STKge28VVOo+AvjFysZWPOmaqohRc6
Os9d2Iy/BUOcbbf7CGWKNtNi3RDKt5wOvOVWLFViXfbK2XV96P1BiJTTrYKoKmJy
omJcFeEFjaIxZdWICjL2pwjnaLByQAnKf/hPTzA2XW/MSGFFLG775LHZRD3K4U40
tE69MOG5uDG7ZHM=
-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org