Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39382e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e39382e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          8YvC8Kaki6Yxalubo8p1Wv13t79d/VwB0cDVvzsrWTc=
Subject key identifier:   EF:01:75:BB:E0:5E:0C:8F:BB:78:3B:21:DB:E4:6B:FE:98:2D:E0:46
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       26216CD6BCF3949BAC85A368D5F5A1D395136070
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39382e302f32342d3235203d3e203231353731.roa
Signing time:             Fri 26 Jul 2024 13:04:07 +0000
ROA not before:           Fri 26 Jul 2024 12:59:07 +0000
ROA not after:            Fri 25 Jul 2025 13:04:07 +0000
asID:                     21571
IP address blocks:        200.152.98.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:21:6c:d6:bc:f3:94:9b:ac:85:a3:68:d5:f5:a1:d3:95:13:60:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 26 12:59:07 2024 GMT
            Not After : Jul 25 13:04:07 2025 GMT
        Subject: CN=EF0175BBE05E0C8FBB783B21DBE46BFE982DE046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:6b:26:14:9c:34:b6:0a:f5:bd:a6:60:ad:
                    f6:5d:3b:ac:cf:51:25:bc:49:55:e1:e5:3d:a5:4a:
                    25:73:d4:9f:c8:2b:bc:01:d2:dd:de:87:05:4e:0d:
                    b5:d2:cd:c4:61:1e:b4:43:37:0e:89:6d:74:df:dc:
                    ae:01:cb:f3:12:19:ad:81:8b:32:04:af:4e:fc:2e:
                    e8:45:67:02:68:fd:8c:d1:c3:8b:54:c4:02:5e:93:
                    3f:48:e1:35:24:df:a4:47:cd:f0:30:b2:ca:29:0f:
                    10:20:fd:aa:bb:8c:af:f0:10:a8:67:26:82:7a:08:
                    3d:b2:3e:bf:2d:98:33:1b:62:98:63:41:da:46:4e:
                    59:0f:63:58:94:af:2f:12:0f:2b:37:5b:22:f1:b5:
                    e5:eb:17:8d:51:16:59:ab:80:1f:71:ea:67:3f:e0:
                    be:35:3a:7d:9b:81:81:b8:f7:cc:45:da:05:7c:ba:
                    ff:a6:d2:f5:d1:e6:9b:92:56:7e:40:3c:c7:27:f8:
                    9c:47:4c:16:8e:ee:99:13:10:9f:85:d8:ce:af:c4:
                    25:89:7c:13:e0:72:58:0a:65:4b:19:8b:95:40:5c:
                    f9:cc:89:06:f4:b8:2d:7b:2c:40:e9:ce:0d:71:c1:
                    07:b4:5f:36:b7:3c:27:4d:2f:32:ea:0a:58:4f:d4:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:01:75:BB:E0:5E:0C:8F:BB:78:3B:21:DB:E4:6B:FE:98:2D:E0:46
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39382e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:f2:34:d1:e1:69:5b:f7:31:e0:0a:ba:64:d3:02:4c:cd:
         d8:15:a0:14:0e:49:bd:aa:e2:5e:a8:6c:93:59:30:9b:ec:93:
         88:10:09:63:ed:e8:7d:a4:01:59:9f:3f:b6:b7:61:a3:96:c1:
         25:34:5a:ba:29:d7:a4:b6:75:30:d0:21:8c:34:ed:12:c1:fd:
         d3:34:11:40:52:8f:e8:1e:7e:a2:8e:d5:e1:57:6e:51:e5:02:
         6a:28:cc:77:bd:2e:3a:b1:e1:36:3e:0c:d0:46:c5:12:46:26:
         02:d2:8b:0b:fa:dd:2e:1d:8b:69:03:c1:5a:bc:8f:85:fa:27:
         4b:cd:b5:6c:26:0c:65:ce:3f:ca:ff:60:7e:ec:d3:87:e6:21:
         67:16:3d:71:c3:25:31:15:14:8c:4f:ec:9a:1b:62:49:dc:46:
         aa:97:89:96:44:4f:7d:e5:57:13:00:a7:cb:aa:fe:74:4c:dd:
         73:04:29:fe:57:84:45:0d:86:3d:05:f9:15:4b:4e:16:03:8b:
         1e:13:e0:ce:55:42:95:cc:25:d8:4f:29:5a:93:89:42:81:15:
         3e:8d:a4:aa:f0:c1:d5:bb:a8:ec:46:05:55:a4:f3:ba:6b:fe:
         c4:f6:69:9e:5c:1d:06:0a:df:a2:33:63:8f:08:34:c5:8e:98:
         27:f9:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org