Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39392e302f32342d3235203d3e203231353731.roa
File:                     3230302e3135322e39392e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          x5q2ufBQKfYxMTTs2mByElV8y8NpgO2Pdta951sk9dU=
Subject key identifier:   EE:B2:EA:4D:34:5D:F9:33:AD:76:C3:E6:D2:99:F5:ED:4E:1F:CF:CC
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       73982AA7CF035C0EA6A00B8425BFA92050BA8312
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39392e302f32342d3235203d3e203231353731.roa
Signing time:             Fri 26 Jul 2024 13:03:58 +0000
ROA not before:           Fri 26 Jul 2024 12:58:58 +0000
ROA not after:            Fri 25 Jul 2025 13:03:58 +0000
asID:                     21571
IP address blocks:        200.152.99.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:98:2a:a7:cf:03:5c:0e:a6:a0:0b:84:25:bf:a9:20:50:ba:83:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 26 12:58:58 2024 GMT
            Not After : Jul 25 13:03:58 2025 GMT
        Subject: CN=EEB2EA4D345DF933AD76C3E6D299F5ED4E1FCFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:20:51:ad:1d:f9:fa:c7:59:dc:60:45:f9:
                    13:71:c1:18:8c:cd:c9:54:1e:4c:a8:96:1a:28:43:
                    67:fd:00:44:60:f1:0a:5c:01:fc:b9:84:a4:63:a5:
                    5e:b3:14:60:60:8a:ee:0c:04:d8:4a:43:b0:6c:5d:
                    41:ba:69:04:e5:12:01:18:d8:a0:c8:c2:d0:32:fe:
                    a6:68:06:ba:bc:a3:1a:e8:a3:c4:57:06:c0:58:56:
                    0d:82:db:68:07:e2:49:14:16:67:de:3c:76:2e:57:
                    4b:5a:59:e4:03:27:d9:2d:6a:4d:07:2b:7a:e4:ef:
                    64:20:c5:70:44:7e:b6:a0:72:65:fe:ac:f4:e6:d0:
                    b0:bc:94:e7:2a:9a:24:22:a8:9d:d7:ce:8e:27:5d:
                    60:b6:99:d0:dc:2f:fe:52:9b:01:2c:a2:4e:e5:47:
                    b0:10:c4:39:71:c3:d3:8d:f5:e6:39:e2:fd:11:4d:
                    d9:fc:85:83:77:fe:9f:3c:78:d8:9c:aa:e8:6f:df:
                    ca:6b:ef:d0:dd:30:e8:50:e5:b1:2e:95:33:0d:e3:
                    13:fe:2b:a3:02:8f:4d:a9:27:92:67:65:f0:3c:76:
                    b7:f2:99:c1:98:b8:20:78:e0:0c:90:da:83:37:08:
                    86:ed:ad:05:42:81:25:c2:25:95:04:d3:b4:4d:88:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B2:EA:4D:34:5D:F9:33:AD:76:C3:E6:D2:99:F5:ED:4E:1F:CF:CC
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39392e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:62:e0:30:0c:a5:fa:d5:31:c5:f9:b3:56:5b:d8:c2:48:
         6a:6b:a9:0e:47:65:4b:61:b6:22:d3:c6:d2:56:f6:14:34:cb:
         b4:26:1c:40:c8:ea:9e:eb:47:ad:4a:2a:20:4d:ea:73:99:d5:
         38:43:88:c9:96:bd:d5:4b:b5:85:3e:b5:71:23:d9:a6:d0:9f:
         72:e7:c3:3d:49:3d:ef:fc:59:9d:aa:e3:e5:f3:ca:1d:5e:9e:
         73:7c:0f:e1:10:c9:ec:22:34:22:00:4e:44:d7:6e:3b:70:40:
         81:fb:c1:fc:3c:00:28:c0:6e:e6:d9:fa:6b:97:dd:3f:a4:7c:
         3e:6d:4f:00:d6:8c:a0:eb:4d:f3:04:e9:a8:10:3c:70:cc:8a:
         d7:6e:d5:8e:52:fc:40:b6:b2:9c:67:a0:d6:c8:17:f5:20:d3:
         eb:3c:8a:8d:0c:d3:cb:4e:27:d1:cc:ad:a1:5b:7c:40:68:69:
         eb:87:5f:ae:31:62:c9:1a:c5:50:99:e1:a7:ef:d4:ac:88:33:
         d3:db:62:e1:47:f0:97:8f:7c:ea:c3:ef:c1:79:a0:9b:95:74:
         21:47:ac:b1:66:b0:b9:0e:c1:cb:cb:94:9e:86:99:27:a8:8d:
         d4:3f:ef:02:19:23:1d:67:8f:7d:c8:cc:33:89:34:14:ff:86:
         7c:3d:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org