Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130382e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3130382e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          eNGwo9fW2sjDxCdTeqQYs/jRxUGQRkWhu8Dyl7Y1xPw=
Subject key identifier:   41:52:64:02:2B:F0:7A:34:A0:BD:05:64:AC:3D:1B:DA:85:9D:3D:49
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       38945B17483DEC87FC89C895D90A83CF85EA6234
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130382e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 20:19:50 +0000
ROA not before:           Thu 25 Jul 2024 20:14:50 +0000
ROA not after:            Thu 24 Jul 2025 20:19:50 +0000
asID:                     21571
IP address blocks:        200.152.108.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:94:5b:17:48:3d:ec:87:fc:89:c8:95:d9:0a:83:cf:85:ea:62:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 20:14:50 2024 GMT
            Not After : Jul 24 20:19:50 2025 GMT
        Subject: CN=415264022BF07A34A0BD0564AC3D1BDA859D3D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:d1:92:e3:02:26:0c:a6:1d:b4:b7:85:fd:
                    11:b2:ef:9a:6a:4f:33:05:71:df:46:dc:08:32:8d:
                    b5:28:52:a9:76:0e:9d:67:91:d8:2e:91:03:75:36:
                    d3:a9:9b:d7:42:ae:af:d4:b7:ba:99:5a:c7:d4:35:
                    9e:6c:f5:2e:1d:23:2a:b7:b4:04:cb:8d:c0:01:df:
                    ca:67:72:88:ed:53:d5:cf:c4:4f:cb:18:1c:94:ac:
                    2f:dd:e9:4f:c6:e8:3c:ea:62:4a:5a:c3:94:58:ff:
                    c4:ae:35:45:47:df:48:dc:b1:da:b4:e0:66:3b:05:
                    3b:2d:50:35:29:5c:6f:68:71:83:78:ca:87:e6:4e:
                    1f:4f:7d:93:96:23:44:7a:c5:4b:a0:77:89:a6:23:
                    85:8a:ed:6d:5e:66:be:2f:37:77:aa:75:f1:00:04:
                    d2:21:72:b6:38:f7:16:37:28:25:13:2c:eb:d7:c6:
                    a2:6b:38:ca:9d:43:d6:2f:fe:ed:82:b0:84:54:bb:
                    5e:a0:dd:ce:06:9e:b1:c9:cf:ba:3e:d7:7f:40:79:
                    22:ed:02:f1:58:3f:f5:72:15:a5:ae:97:54:8a:cc:
                    98:bc:0b:ae:93:af:d7:b1:56:f7:50:22:55:fa:bd:
                    e2:0e:48:a0:74:51:fc:2f:f7:51:4f:74:b9:50:bf:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:64:02:2B:F0:7A:34:A0:BD:05:64:AC:3D:1B:DA:85:9D:3D:49
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130382e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:bc:79:ac:34:cc:ef:fd:c3:b3:cc:cd:22:4c:e0:71:c5:42:
         f6:bc:00:75:5d:aa:8f:5e:21:b8:7d:e1:8d:98:b7:7f:83:a1:
         a1:19:81:3d:29:71:a5:b9:ad:52:2c:54:46:44:ae:e2:6e:69:
         cd:30:83:08:b4:57:2a:de:4b:b0:d4:94:87:5c:5a:b8:4b:9a:
         8b:89:17:31:c6:fb:69:d1:ac:b0:ce:58:30:01:b4:b9:e5:3a:
         5c:3c:ae:5f:c7:40:48:bf:3f:25:13:a5:c6:fc:19:95:01:51:
         85:d6:fe:9b:02:a5:34:2e:2e:59:c1:f0:01:7b:c0:81:b3:d5:
         77:18:0a:cc:eb:38:7c:32:cd:92:59:27:2a:ea:cf:1d:a4:27:
         d4:8b:83:e2:39:e9:5d:b5:da:75:27:94:99:00:cf:f8:b2:17:
         2c:30:15:c9:11:3c:39:6e:6a:34:91:fa:66:97:b9:d1:f0:19:
         22:08:1d:2d:09:f2:df:ac:4b:d8:f8:32:8c:44:81:20:e9:9f:
         c2:73:48:84:9e:40:41:43:96:9c:7d:0c:08:95:0b:b1:d0:eb:
         b8:70:7d:00:a7:5e:61:7d:52:35:20:cc:65:89:6d:5e:db:c2:
         83:ed:4b:50:81:c2:20:66:35:ee:a2:1e:c9:d8:dd:d1:3b:91:
         c7:58:8a:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOJRbF0g97If8iciV2QqDz4XqYjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyRDBCOTlCMDRFM0JBMDFDQjZDQ0ZCMjVGRDZFQjUz
OUEyOERFMzAeFw0yNDA3MjUyMDE0NTBaFw0yNTA3MjQyMDE5NTBaMDMxMTAvBgNV
BAMTKDQxNTI2NDAyMkJGMDdBMzRBMEJEMDU2NEFDM0QxQkRBODU5RDNENDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEtGS4wImDKYdtLeF/RGy75pq
TzMFcd9G3AgyjbUoUql2Dp1nkdgukQN1NtOpm9dCrq/Ut7qZWsfUNZ5s9S4dIyq3
tATLjcAB38pncojtU9XPxE/LGByUrC/d6U/G6DzqYkpaw5RY/8SuNUVH30jcsdq0
4GY7BTstUDUpXG9ocYN4yofmTh9PfZOWI0R6xUugd4mmI4WK7W1eZr4vN3eqdfEA
BNIhcrY49xY3KCUTLOvXxqJrOMqdQ9Yv/u2CsIRUu16g3c4GnrHJz7o+139AeSLt
AvFYP/VyFaWul1SKzJi8C66Tr9exVvdQIlX6veIOSKB0Ufwv91FPdLlQv1I9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQVJkAivwejSgvQVkrD0b2oWdPUkwHwYDVR0j
BBgwFoAUiC0LmbBOO6Actsz7Jf1utTmijeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1qVGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFT
akUvMC84ODJEMEI5OUIwNEUzQkEwMUNCNkNDRkIyNUZENkVCNTM5QTI4REUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkQwQjk5QjA0RTNCQTAx
Q0I2Q0NGQjI1RkQ2RUI1MzlBMjhERTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htalRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAv
MzIzMDMwMmUzMTM1MzIyZTMxMzAzODJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDMy
MzEzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADImGwwDQYJKoZIhvcNAQELBQADggEBALu8eaw0
zO/9w7PMzSJM4HHFQva8AHVdqo9eIbh94Y2Yt3+DoaEZgT0pcaW5rVIsVEZEruJu
ac0wgwi0VyreS7DUlIdcWrhLmouJFzHG+2nRrLDOWDABtLnlOlw8rl/HQEi/PyUT
pcb8GZUBUYXW/psCpTQuLlnB8AF7wIGz1XcYCszrOHwyzZJZJyrqzx2kJ9SLg+I5
6V212nUnlJkAz/iyFywwFckRPDluajSR+maXudHwGSIIHS0J8t+sS9j4MoxEgSDp
n8JzSISeQEFDlpx9DAiVC7HQ67hwfQCnXmF9UjUgzGWJbV7bwoPtS1CBwiBmNe6i
HsnY3dE7kcdYivc=
-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org