Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3132352e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e3132352e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          cDlj6N/McfvUTfWNLDTEpoHD9Hu9QTcGmbxKMSRByQs=
Subject key identifier:   13:A3:A3:56:27:43:02:80:F8:CD:A7:75:FF:E9:18:9E:39:83:EA:F6
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       69EEDB9743748B73BC4CB91CCC6687852690AC5B
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3132352e302f32342d3235203d3e203231353731.roa
Signing time:             Wed 24 Jul 2024 19:01:33 +0000
ROA not before:           Wed 24 Jul 2024 18:56:33 +0000
ROA not after:            Wed 23 Jul 2025 19:01:33 +0000
asID:                     21571
IP address blocks:        200.152.125.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ee:db:97:43:74:8b:73:bc:4c:b9:1c:cc:66:87:85:26:90:ac:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 24 18:56:33 2024 GMT
            Not After : Jul 23 19:01:33 2025 GMT
        Subject: CN=13A3A35627430280F8CDA775FFE9189E3983EAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:e3:09:0f:13:28:95:90:24:5f:4c:c8:75:
                    1f:45:78:d5:ff:28:39:60:bc:23:73:4b:e4:0f:6e:
                    a2:5b:d2:c7:44:5b:ba:e9:ed:62:d8:9e:e0:12:68:
                    56:5f:f6:43:f3:f9:40:d7:16:54:e3:53:3e:cb:a7:
                    82:6e:4d:64:c6:e9:6a:db:41:e6:18:2b:a5:30:19:
                    8a:7d:e9:0c:90:42:1f:c5:2b:d6:be:14:7f:ef:bd:
                    47:42:fb:04:41:f3:d4:8f:ec:3d:72:5c:df:56:ec:
                    88:b7:af:aa:23:ee:30:8f:89:9b:9a:a3:56:9b:54:
                    f0:2c:24:5b:72:07:ff:c2:90:11:37:7b:55:2d:21:
                    26:80:e3:32:cc:ed:b3:5d:62:ce:ea:26:44:a3:e2:
                    31:a1:c5:ed:16:9c:fd:28:79:2c:31:e5:8f:3a:3f:
                    05:d4:88:5c:84:47:94:d0:c3:81:6d:8e:f0:26:a8:
                    5e:b1:cf:46:7e:b9:a2:4e:64:41:f6:69:0d:bb:f5:
                    d5:9e:82:ff:53:98:de:d1:3f:68:81:05:18:68:22:
                    0d:98:bc:81:a2:38:d5:1f:bb:50:82:d7:03:1f:b4:
                    a5:ea:77:82:53:33:5b:bd:6a:f7:22:04:a4:0e:1a:
                    3c:31:61:11:7e:a2:8f:7e:a6:30:45:ae:ab:5d:b3:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A3:A3:56:27:43:02:80:F8:CD:A7:75:FF:E9:18:9E:39:83:EA:F6
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3132352e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:16:1a:44:95:ff:54:66:69:aa:32:47:38:d0:66:51:66:
         6e:06:85:fb:1c:13:93:bf:9e:31:33:3b:44:9a:91:ac:f1:5e:
         34:f9:10:e7:70:a6:72:a9:46:03:8d:e3:13:53:d0:58:53:c5:
         70:53:90:b3:db:4e:f1:44:df:08:7f:1f:f4:c7:b8:27:a5:cb:
         b9:45:87:5c:3c:bc:da:d9:21:bb:7a:c7:84:2d:07:03:eb:0f:
         4f:cf:8f:dc:e5:91:91:54:1e:26:4a:ef:11:69:48:5b:7a:bf:
         29:b2:01:f2:65:5a:29:f0:1a:ea:0a:dd:15:43:6b:07:45:04:
         d5:82:79:73:90:19:bc:b9:1a:96:1e:38:76:40:1a:66:03:72:
         f7:98:3f:11:4f:2e:65:f2:3e:8f:8a:cc:d0:0a:fd:ad:0a:14:
         41:82:80:4d:d5:a7:c1:e4:08:64:ce:ff:43:b6:a1:8b:64:c8:
         10:31:c6:a7:d6:93:72:d5:4a:40:ce:2a:a8:4f:b0:60:40:68:
         b2:67:32:6d:61:41:60:03:b1:d5:95:3f:dc:b5:c2:7e:19:21:
         bb:97:d0:17:82:25:0e:a6:b9:92:55:b4:4c:fb:65:a0:2c:88:
         b5:69:98:5e:f7:bc:c4:4c:f5:66:8a:98:03:3d:05:0a:2e:e6:
         b1:cc:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org