Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131392e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3131392e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          +7fINHaKGBrfPDTuhWvN7Z/B42Ua5zfucJWxGh1UJBU=
Subject key identifier:   7A:C4:27:FE:CA:21:DD:1B:9D:AC:DF:AC:65:60:05:D1:95:EE:6E:D8
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       551143DF7C43AEB9D1B5D0DEC22FC29751787C03
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131392e302f32342d3235203d3e203231353731.roa
Signing time:             Wed 24 Jul 2024 19:17:21 +0000
ROA not before:           Wed 24 Jul 2024 19:12:21 +0000
ROA not after:            Wed 23 Jul 2025 19:17:21 +0000
asID:                     21571
IP address blocks:        200.152.119.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:43:df:7c:43:ae:b9:d1:b5:d0:de:c2:2f:c2:97:51:78:7c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 24 19:12:21 2024 GMT
            Not After : Jul 23 19:17:21 2025 GMT
        Subject: CN=7AC427FECA21DD1B9DACDFAC656005D195EE6ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:58:4f:cc:5c:9d:5e:31:ee:a0:d6:13:cc:
                    7b:ca:e9:5d:fb:33:c1:a0:83:f7:73:20:a9:8b:ea:
                    4d:4e:63:4c:46:29:17:cb:06:13:3e:1f:8c:b3:31:
                    18:6d:af:ca:43:48:6c:ab:44:46:28:14:33:d3:ea:
                    56:dd:42:f2:39:80:b1:8a:3e:f2:c6:52:08:7a:16:
                    1a:1a:f0:53:0c:38:eb:8e:25:cb:36:e9:e0:d9:fe:
                    d6:17:e7:24:bf:eb:30:ad:b6:47:95:e6:ba:1e:2d:
                    ab:91:3c:d9:e6:bd:34:d0:54:3f:21:cc:ec:68:44:
                    72:43:a8:9b:a1:40:18:19:0a:a1:29:47:57:ec:79:
                    c4:f4:5d:d2:72:1a:16:70:dc:08:fe:6b:20:71:0b:
                    75:1d:4d:31:b7:92:0c:54:24:2f:73:a3:6c:21:d6:
                    a2:5c:bf:01:be:10:c3:aa:76:43:cc:3a:f4:04:f7:
                    34:44:c4:7a:61:e0:ca:38:bf:9d:94:85:2f:d3:73:
                    b5:be:23:83:59:72:38:28:21:de:e4:54:e5:00:2e:
                    f8:51:79:4e:f6:f3:dd:bb:58:72:85:23:57:0a:26:
                    9c:a4:4c:5c:1f:dc:d4:92:20:9b:01:f2:90:d5:67:
                    fc:d1:df:6a:76:c8:fd:f1:b7:13:9f:89:cb:6b:7b:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:27:FE:CA:21:DD:1B:9D:AC:DF:AC:65:60:05:D1:95:EE:6E:D8
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131392e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9a:92:76:ff:da:ab:bf:2b:5a:e1:55:18:82:86:41:c2:46:
         37:12:d6:f2:83:c5:f1:3f:6f:00:97:95:e4:c8:9a:e9:35:ab:
         c7:a2:75:b6:59:b9:cb:3b:57:1e:73:83:08:85:5d:f0:d6:96:
         ec:a3:e0:77:a6:32:8a:8c:51:3c:14:c9:8a:51:bc:5f:d5:0e:
         24:33:5c:2b:49:44:ba:59:58:a2:c2:cc:63:f5:77:51:4c:36:
         4a:ba:26:bc:21:6b:31:94:d1:88:21:a5:89:1e:c2:41:75:e6:
         ed:0d:2a:5f:ea:b6:19:05:84:6a:11:2d:54:3c:e9:50:df:ba:
         7e:d3:50:28:16:fa:49:db:9b:ba:53:89:7b:0d:ce:cf:e2:09:
         23:50:8a:cd:0e:7a:e9:11:ce:33:d7:aa:9c:17:fb:04:ea:fb:
         71:74:3f:46:14:f3:eb:d4:da:23:8c:13:bd:d8:0c:55:ff:c0:
         3f:bb:6f:35:09:2d:11:a4:da:4f:e0:12:1d:c7:72:bb:11:8f:
         5b:48:6c:a5:15:8c:db:5e:b7:d1:09:cb:54:8c:d5:80:79:69:
         11:74:4c:dd:18:a4:03:a6:c4:b9:d9:35:94:9c:37:ff:5e:c7:
         5a:9a:3a:c0:b0:48:c0:5a:75:ed:bd:b1:63:67:9a:60:9a:6c:
         7f:e9:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org