Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130372e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3130372e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          fW/i7rFXRuLhDGyhJeJO8JN6WwQu2fycLCFQibgGBU8=
Subject key identifier:   F4:A9:A5:BA:67:D2:E6:06:30:9E:8C:57:F2:8E:26:20:1B:D3:A9:F3
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       38CD11DD613DCF0226FB9E137B3126D400B8219D
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130372e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 20:27:15 +0000
ROA not before:           Thu 25 Jul 2024 20:22:15 +0000
ROA not after:            Thu 24 Jul 2025 20:27:15 +0000
asID:                     21571
IP address blocks:        200.152.107.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cd:11:dd:61:3d:cf:02:26:fb:9e:13:7b:31:26:d4:00:b8:21:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 20:22:15 2024 GMT
            Not After : Jul 24 20:27:15 2025 GMT
        Subject: CN=F4A9A5BA67D2E606309E8C57F28E26201BD3A9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:5a:28:b7:74:dd:d0:96:8a:97:7e:fa:4d:
                    04:f8:d5:95:24:12:5b:f2:bb:76:14:04:cd:ac:8c:
                    96:55:07:9c:cc:46:3e:90:7f:ab:79:f7:28:4a:35:
                    14:ca:1c:32:47:e6:c2:5b:9b:4e:97:c7:d1:6c:51:
                    07:ca:b6:7e:ff:26:65:d7:cc:a2:22:c5:e6:15:c9:
                    07:b3:e5:5c:3b:b9:43:9a:5a:4e:c8:78:bb:4a:1c:
                    08:ce:44:e9:4b:20:3b:8f:5b:6b:44:4e:54:32:c1:
                    a3:23:8c:4e:7b:80:fd:37:84:f3:56:9a:9e:6d:d4:
                    91:b3:a4:24:0e:97:0c:5d:bd:cc:1d:e2:78:de:39:
                    ae:78:7c:a8:c8:b0:7b:1a:00:ae:ac:88:37:ff:10:
                    02:5d:2c:72:be:f8:ae:c6:0a:6b:04:35:4e:c0:75:
                    a0:44:fb:87:47:c4:06:a8:d0:aa:25:30:19:b5:7f:
                    b9:ad:4f:4c:fc:94:4c:f8:ad:81:c9:8c:8d:cd:3a:
                    1e:cc:c9:78:fe:c5:77:de:eb:3a:55:94:95:47:be:
                    8c:cf:1b:a7:23:ff:38:b7:12:5c:36:7e:8e:4c:bc:
                    a3:a8:c1:1c:fc:a8:a7:ba:93:b4:e2:49:19:fa:6f:
                    dd:60:f9:56:55:2f:7a:b7:6a:17:a8:04:7d:a6:55:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A9:A5:BA:67:D2:E6:06:30:9E:8C:57:F2:8E:26:20:1B:D3:A9:F3
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130372e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:f9:41:98:1e:7c:f5:b7:21:c5:f7:dc:e5:31:f4:58:bb:
         14:35:75:b8:b7:ec:d6:3c:82:05:8f:9d:dc:f7:8b:45:4f:ca:
         7a:23:5c:43:92:9d:55:1f:5a:4c:95:82:5e:63:53:51:cf:03:
         65:5a:ce:b4:10:e8:f2:a5:7a:60:4d:c1:1b:f5:1a:b2:02:a6:
         a2:1c:91:30:cc:85:59:f9:cc:16:4c:b8:c5:d8:09:4d:7f:02:
         c2:5b:4f:5a:07:d5:f3:9d:4a:00:87:90:57:aa:94:2c:3a:57:
         fd:84:e7:8b:29:e9:b6:a5:8d:88:ba:d5:e6:f2:9b:49:08:5c:
         01:c1:b4:ac:92:fc:09:95:dd:c4:f0:39:03:1b:ee:16:98:7a:
         78:da:64:3f:8b:ee:d6:04:eb:54:08:a5:24:7e:97:0f:01:bc:
         7a:ab:83:71:cd:fe:16:2d:cf:4a:4f:55:d4:e7:da:b7:69:8b:
         7c:e2:a8:06:a6:c1:f7:d1:4e:9a:f7:2f:ca:8e:ac:79:fe:e4:
         7d:53:63:ca:9a:c9:f7:f2:e3:8f:ea:54:c5:6a:c1:e6:62:4c:
         2f:4c:d1:71:71:08:26:20:91:15:6d:21:dd:89:fd:e3:0d:0e:
         79:f5:2c:f8:ce:b2:a7:3e:87:3d:53:ff:e2:c3:78:b9:4c:db:
         82:1c:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org