Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131302e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3131302e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          fcTbYJue4BMb0aR5re0gGMdHbQOLgYWTLy+hU97iRps=
Subject key identifier:   48:1C:5D:C8:C6:14:EB:54:DA:C5:B0:75:66:DC:A3:96:EF:0F:62:A0
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       622E10BEEF651B1A4D090D3463CF54FF0E2A6426
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131302e302f32342d3235203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 20:09:20 +0000
ROA not before:           Thu 25 Jul 2024 20:04:20 +0000
ROA not after:            Thu 24 Jul 2025 20:09:20 +0000
asID:                     21571
IP address blocks:        200.152.110.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2e:10:be:ef:65:1b:1a:4d:09:0d:34:63:cf:54:ff:0e:2a:64:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 20:04:20 2024 GMT
            Not After : Jul 24 20:09:20 2025 GMT
        Subject: CN=481C5DC8C614EB54DAC5B07566DCA396EF0F62A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:c1:e5:2b:ca:e3:33:d6:c0:03:be:23:08:
                    cb:cc:08:f9:9b:52:c0:d6:78:df:63:5d:b7:13:5d:
                    5b:0d:d6:08:be:20:44:c3:ff:78:bb:10:30:c6:0a:
                    97:28:f4:55:7b:e7:81:ca:40:d1:0a:e8:42:5d:79:
                    a1:59:9b:78:eb:94:7e:52:f4:c9:cd:64:4d:8b:79:
                    03:c6:38:30:eb:43:0d:a9:74:43:b8:3a:20:10:14:
                    51:77:f3:0a:1f:09:05:4a:85:78:35:fb:30:dc:45:
                    d4:e9:9a:55:03:80:69:05:84:8d:36:c9:87:66:43:
                    4f:57:a2:1b:fc:ee:f2:dc:d7:16:c2:ae:1f:2d:b9:
                    0a:46:9b:bf:88:ad:8b:a0:2e:5a:b1:4f:91:77:bf:
                    59:07:46:8b:53:fe:96:ca:dd:c7:24:c5:35:5c:d1:
                    5d:12:73:f6:9a:14:10:58:89:e4:61:13:13:60:d3:
                    9b:10:6b:0f:d7:4f:bd:87:78:b2:39:b6:9b:7c:f2:
                    4d:4a:e7:52:99:ad:e1:79:3c:14:de:7b:36:5f:ca:
                    fc:0b:98:41:ad:f9:00:bd:80:42:fd:47:c0:ed:f4:
                    f0:c9:07:61:3b:04:8e:0a:d8:13:20:2c:9f:4a:bf:
                    0f:5e:8f:52:ef:bc:24:2d:84:9e:80:e0:6c:68:de:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:5D:C8:C6:14:EB:54:DA:C5:B0:75:66:DC:A3:96:EF:0F:62:A0
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131302e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:23:a0:2c:2a:f0:19:ba:ab:8a:f5:a2:37:01:98:bc:29:17:
         10:bc:10:f2:96:bd:65:24:ce:b9:46:e2:e0:8e:3a:21:e2:a7:
         6a:f9:6c:63:9c:e6:d1:60:b1:dc:f8:20:a7:11:72:69:1c:94:
         5e:2c:7a:5e:15:d2:68:a3:f4:88:12:9e:b1:b0:06:dd:50:56:
         84:4c:1b:94:0f:14:78:87:86:e1:3e:92:25:68:a4:dd:da:6a:
         25:84:5f:25:e0:99:37:6e:bf:6f:be:b4:57:d0:19:aa:51:71:
         3f:56:0e:54:70:7d:e7:b9:c0:99:99:6a:ce:69:d3:c2:70:a5:
         a4:fe:50:79:aa:1c:99:89:3c:12:d6:3f:8f:be:c4:19:06:4b:
         d8:71:b7:14:b1:63:bf:df:00:60:58:6a:b8:f3:ab:aa:cb:11:
         0f:4e:c3:19:db:d5:92:f4:cb:d9:79:62:e6:c6:9d:9b:2b:c5:
         70:b3:d3:cf:12:28:65:89:34:d3:54:cb:04:ad:75:c1:d1:9c:
         dc:eb:db:87:c4:13:7c:69:7c:65:9c:6f:ef:c6:79:0a:fe:6f:
         6e:b9:bb:df:e2:da:c7:a3:64:88:fa:30:49:ed:e0:a1:45:a3:
         83:39:56:20:82:c7:68:a9:b5:bf:8a:54:37:5c:6e:8e:a8:65:
         9a:41:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org