Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131332e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3131332e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          73/s/UVtn8XDMVgyoT6sZg2swrBKl5esIOR1KvOue54=
Subject key identifier:   1D:2B:95:8C:FC:6E:8A:4A:D4:2B:24:3C:67:1C:6C:80:D2:AB:E6:98
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       768810865B17CF869DFEF6707D604FF74F0B8830
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131332e302f32342d3235203d3e203231353731.roa
Signing time:             Wed 24 Jul 2024 19:24:06 +0000
ROA not before:           Wed 24 Jul 2024 19:19:06 +0000
ROA not after:            Wed 23 Jul 2025 19:24:06 +0000
asID:                     21571
IP address blocks:        200.152.113.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:88:10:86:5b:17:cf:86:9d:fe:f6:70:7d:60:4f:f7:4f:0b:88:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 24 19:19:06 2024 GMT
            Not After : Jul 23 19:24:06 2025 GMT
        Subject: CN=1D2B958CFC6E8A4AD42B243C671C6C80D2ABE698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:39:02:2b:6b:00:08:3f:b0:e2:6d:01:c0:
                    90:87:79:57:81:f2:49:7d:91:d5:8a:90:07:d1:90:
                    9d:89:89:8d:6c:6e:19:13:04:23:7f:0e:e6:c9:60:
                    47:7f:4d:68:bc:d3:2a:6b:aa:59:fb:71:53:04:d6:
                    37:f7:60:1c:6b:c4:c0:c0:e1:ec:ac:3c:8b:1a:12:
                    d4:c2:90:df:b2:d2:dd:23:09:a4:1c:67:29:ed:54:
                    66:bc:a8:29:cc:c0:47:04:53:6e:c3:98:73:cc:ef:
                    01:2f:9c:43:23:4e:72:a0:c7:50:84:22:ef:44:62:
                    09:4a:b2:15:97:b4:93:06:d4:e8:7d:a0:aa:aa:b2:
                    f0:3c:3d:ab:ff:1a:55:63:0c:c1:ad:52:c4:fc:b3:
                    4a:35:10:32:16:e4:78:fc:e7:62:16:ee:e3:01:71:
                    fe:97:fb:c6:d3:5d:50:b4:b3:5f:0f:0b:9f:ba:97:
                    7e:3d:f6:43:84:c1:30:e9:99:02:eb:fb:67:e6:c6:
                    3d:f3:10:20:c1:18:9b:02:ac:74:43:7e:10:96:49:
                    bc:92:e2:ad:75:3d:0f:3b:d9:83:fc:b8:dc:6d:3d:
                    51:86:77:9b:50:96:f1:f6:8b:1c:4f:8f:9b:30:8b:
                    e9:7d:7f:75:70:a5:4e:0a:42:03:80:02:c6:75:5c:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2B:95:8C:FC:6E:8A:4A:D4:2B:24:3C:67:1C:6C:80:D2:AB:E6:98
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131332e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:08:bc:e4:24:6f:50:08:74:2f:8c:6d:14:50:9c:4f:55:86:
         d8:e2:07:80:8e:a4:10:a7:81:82:8c:cd:a6:6e:1b:42:76:7d:
         e2:23:d1:d0:57:ed:63:76:2e:5a:10:eb:70:2e:2f:8d:1c:f3:
         f7:42:d4:45:d2:38:a1:c3:8d:b3:5d:d9:d1:5c:cc:a1:2e:05:
         7b:4a:0e:52:02:ec:9b:cb:55:2c:d6:1e:00:82:0e:71:36:50:
         7f:5b:59:e1:75:ce:e8:4e:ea:f2:92:07:50:1b:12:a0:89:c3:
         16:25:d6:39:2c:6f:f0:46:ab:6a:78:e0:49:9a:72:75:4a:c9:
         cc:d1:77:62:00:48:ac:41:d3:b7:f4:f4:3c:7e:1b:5e:32:7f:
         6b:46:33:f3:2f:95:20:03:38:01:bd:68:90:7f:e0:42:0d:91:
         6d:1a:da:b7:08:3b:ec:b8:52:60:9e:b7:3c:03:97:62:82:62:
         b7:00:73:2e:88:0a:80:eb:e9:5a:80:90:35:e7:f9:44:01:d2:
         0d:3e:2e:31:7b:ac:cf:b4:fd:dd:02:13:97:d8:d0:a3:02:96:
         c0:02:19:5d:57:c2:78:2d:a3:1f:a5:79:3b:71:c5:ad:7b:07:
         09:6a:d3:66:81:d5:9c:c7:68:c9:b4:47:ab:e4:7a:8b:93:f5:
         df:0a:70:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org