Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131322e302f32302d3234203d3e203231353731.roa
File:                     3230302e3135322e3131322e302f32302d3234203d3e203231353731.roa (raw, json)
Hash identifier:          5pIx18+UVCJbgmb+BW9ssLbqwZ5Ovp9E/uK0ITlM45c=
Subject key identifier:   E1:58:68:A2:1F:1A:F7:4B:65:C0:8E:F0:19:06:4A:7C:92:E6:10:03
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       66511542CC14430CD6E6473887640F824AE1505D
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131322e302f32302d3234203d3e203231353731.roa
Signing time:             Thu 25 Jul 2024 14:33:31 +0000
ROA not before:           Thu 25 Jul 2024 14:28:31 +0000
ROA not after:            Thu 24 Jul 2025 14:33:31 +0000
asID:                     21571
IP address blocks:        200.152.112.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:51:15:42:cc:14:43:0c:d6:e6:47:38:87:64:0f:82:4a:e1:50:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 25 14:28:31 2024 GMT
            Not After : Jul 24 14:33:31 2025 GMT
        Subject: CN=E15868A21F1AF74B65C08EF019064A7C92E61003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:fe:85:02:07:97:bb:fd:e2:59:c9:b0:24:
                    60:ee:2a:ec:40:10:33:26:a0:47:91:bb:3e:c4:0d:
                    fd:ff:6d:5b:f7:55:5d:47:f5:8f:c8:d7:cb:f0:9d:
                    14:0c:6d:51:ea:31:11:6d:85:fb:45:21:b8:c4:47:
                    22:cb:d4:e7:d9:66:bd:0b:93:13:e9:13:a6:22:59:
                    6a:1c:66:dd:17:5a:11:ce:66:ef:98:af:da:23:00:
                    fd:62:b3:f2:9c:1e:af:66:57:ed:a2:f5:f5:9f:af:
                    fc:60:e9:50:26:aa:3b:a8:a5:2c:2c:85:78:04:3f:
                    d4:ca:56:f2:9e:ac:3c:4c:23:79:f1:90:96:7e:ca:
                    78:64:69:38:c9:1f:9f:17:3b:4b:51:ad:69:2c:6c:
                    61:13:67:21:f2:5c:bb:57:e5:03:a7:d5:ca:f5:b2:
                    21:b2:d9:fc:e7:9d:e6:c0:ab:5b:f6:96:c1:4c:fe:
                    34:43:f6:eb:32:89:50:12:45:20:1b:34:f5:b6:3d:
                    09:e6:f7:30:a7:f2:bc:2c:88:61:1a:69:78:71:1a:
                    66:5d:f1:57:ff:ef:ff:a6:1f:ca:e3:62:61:a8:08:
                    e8:a6:63:b7:36:99:43:6b:20:e2:57:5d:87:5b:8d:
                    ae:0f:eb:82:ef:8d:87:f3:32:51:52:30:96:f2:bd:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:58:68:A2:1F:1A:F7:4B:65:C0:8E:F0:19:06:4A:7C:92:E6:10:03
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131322e302f32302d3234203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:96:34:92:9f:4d:55:85:12:a5:b8:2e:ad:42:71:93:ef:
         27:f9:d7:ec:95:6d:f2:da:15:47:5d:e8:6c:46:97:af:f7:9a:
         28:f5:07:9c:96:23:54:00:c4:01:22:70:e4:34:8b:0f:38:9b:
         51:6c:f3:ff:75:d0:ea:3f:fd:0f:95:b5:9c:a8:5f:78:ff:7d:
         35:19:09:bf:b6:47:d8:c2:4f:65:b9:b4:90:03:a1:55:c7:3b:
         e2:8d:2f:fa:a4:69:e0:c9:ca:c4:4c:99:20:15:fa:b8:3c:1b:
         a6:de:36:c8:0a:bc:d4:99:91:03:58:b0:46:e0:98:dc:58:8f:
         9d:88:3a:85:02:5f:17:ca:1e:1b:ca:e1:ea:7c:e9:2b:78:1a:
         28:24:ee:0f:c3:7d:1e:8c:e3:ed:94:63:ef:bb:b4:0c:5a:15:
         a3:62:cb:87:c8:6e:d8:65:7d:64:f4:1f:61:0f:aa:ff:1f:6a:
         7b:62:c6:2e:f9:14:c3:a3:e7:49:9c:37:fa:1d:d9:4b:cd:a6:
         3f:80:02:0d:26:26:63:73:c2:c6:71:cc:4f:99:6e:63:23:e3:
         9c:89:de:b7:5c:a8:43:49:16:a0:cd:c1:bf:fc:eb:8f:46:f4:
         ad:fa:f3:40:4b:e0:d4:e3:ca:7b:63:b5:42:f2:d3:8a:33:92:
         71:90:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org