Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131362e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3131362e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          b7fNFiNLC1B8Zp0aXDUhGVyYVHSsw5r2yB1CiAmXxNo=
Subject key identifier:   70:7A:DC:D9:F1:9B:6B:EB:88:16:A5:57:73:9C:BB:F9:04:79:6C:56
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       5B7725D0698D140DA4AAD476D107648B5E895D96
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131362e302f32342d3235203d3e203231353731.roa
Signing time:             Wed 24 Jul 2024 19:17:46 +0000
ROA not before:           Wed 24 Jul 2024 19:12:46 +0000
ROA not after:            Wed 23 Jul 2025 19:17:46 +0000
asID:                     21571
IP address blocks:        200.152.116.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:77:25:d0:69:8d:14:0d:a4:aa:d4:76:d1:07:64:8b:5e:89:5d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 24 19:12:46 2024 GMT
            Not After : Jul 23 19:17:46 2025 GMT
        Subject: CN=707ADCD9F19B6BEB8816A557739CBBF904796C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:c4:6e:38:9e:0e:de:a7:28:b0:bb:e5:30:
                    1a:77:f7:28:57:81:52:b5:1e:4a:5f:61:1f:2f:de:
                    48:dc:37:da:bc:5b:e5:7b:1b:04:fd:4a:97:8e:8f:
                    60:b0:99:e0:9b:3a:99:1d:13:a8:7d:a2:55:d5:62:
                    81:d1:1b:81:93:63:38:de:aa:39:5e:b6:ea:47:82:
                    ef:0b:93:6c:cb:54:d7:be:5d:a5:96:83:ac:63:f3:
                    9d:90:39:2b:2b:b9:66:fc:60:46:d5:68:8d:b3:83:
                    7e:fd:8d:33:e0:67:b0:7f:b3:d0:eb:10:c5:58:ad:
                    fd:57:f4:ae:25:c8:1e:54:90:88:73:50:02:c1:be:
                    71:5c:54:61:d6:b7:1c:d8:d9:9d:7e:1e:80:20:dd:
                    e0:9f:64:9c:b3:7e:09:db:5c:f0:39:0a:9d:a8:88:
                    f4:ef:c0:43:fb:6c:e0:50:f7:ee:09:d8:e9:bf:c8:
                    2c:79:ce:fc:35:51:9f:b5:df:23:88:9d:6b:ae:f0:
                    2f:00:41:ec:e8:87:86:2e:aa:18:df:bb:cf:9a:60:
                    24:06:1b:00:b0:89:a7:36:7a:67:b7:a3:a8:35:c9:
                    e4:87:7b:58:44:4f:c0:18:f2:6c:8d:c0:32:64:f1:
                    2f:e7:9b:83:08:6f:87:08:e8:97:ac:5b:8d:00:32:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7A:DC:D9:F1:9B:6B:EB:88:16:A5:57:73:9C:BB:F9:04:79:6C:56
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131362e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:d1:38:24:82:32:41:79:4d:9b:b4:3e:22:fe:dd:d9:c6:
         c4:7b:e2:99:da:5d:7c:45:ea:0b:86:89:0a:38:4b:24:c6:02:
         47:4b:45:a2:ba:8c:dc:36:c8:e4:14:7d:07:f7:cc:96:59:98:
         df:b7:b7:fc:83:52:99:cf:da:c0:e5:1a:e5:99:da:99:6d:52:
         3c:bb:7d:c2:ed:35:1d:52:52:5e:5b:c2:ce:8a:65:34:98:40:
         04:70:c2:65:2b:77:38:9d:6d:34:7f:2e:15:85:11:6b:42:a3:
         5d:1d:40:8e:f4:3c:c6:ce:ec:7b:45:5c:f9:f3:10:db:bf:96:
         52:c3:90:88:71:27:55:c5:91:02:55:4f:20:e3:13:bc:6f:9b:
         e2:7e:77:7e:3f:48:72:58:f6:d5:4f:00:9f:6b:1c:b2:4d:9e:
         13:5f:b3:ae:88:6b:88:50:b1:94:9d:ef:27:7b:2c:1b:a4:25:
         f2:ac:dc:a7:9d:33:ff:68:fc:2f:f2:eb:24:3c:b1:3c:aa:40:
         95:2f:b6:67:28:71:dd:de:12:0c:7b:98:dd:3e:77:1a:b4:7a:
         43:e7:46:5a:49:c1:3c:6d:f0:2c:ae:e2:20:1f:4b:96:79:0e:
         23:7f:a8:08:b0:e3:b5:55:78:96:18:f0:b5:bd:47:fc:fe:b7:
         9c:20:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org