Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233342e302f32342d3235203d3e203231353731.roa
File:                     3230312e32332e3233342e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier:          wiGvjeXtbKzmMth8aqBywsZh58turuO0z8rkLDjnOk4=
Subject key identifier:   C1:5E:C6:D2:0F:1E:98:E8:53:A1:EE:27:D6:31:62:4C:47:39:39:6E
Certificate issuer:       /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial:       782694FAA9A1F151EC1F9E22270D31DA96130CCE
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233342e302f32342d3235203d3e203231353731.roa
Signing time:             Tue 23 Jul 2024 18:30:03 +0000
ROA not before:           Tue 23 Jul 2024 18:25:03 +0000
ROA not after:            Tue 22 Jul 2025 18:30:03 +0000
asID:                     21571
IP address blocks:        201.23.234.0/24 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:26:94:fa:a9:a1:f1:51:ec:1f:9e:22:27:0d:31:da:96:13:0c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
        Validity
            Not Before: Jul 23 18:25:03 2024 GMT
            Not After : Jul 22 18:30:03 2025 GMT
        Subject: CN=C15EC6D20F1E98E853A1EE27D631624C4739396E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:38:65:1e:4a:71:bc:0c:a5:3b:7f:12:29:
                    b3:b9:29:58:dc:1e:50:b0:a4:f5:f7:8a:81:0b:58:
                    e3:67:4d:96:7d:3d:f2:c3:a4:04:c9:f7:b9:d1:99:
                    a6:c9:35:85:1f:5d:77:20:7d:33:69:ab:9f:74:72:
                    de:c1:5e:9a:6b:9a:ab:fa:8c:b0:05:0d:5e:d8:14:
                    6e:14:a1:a6:e3:bc:36:29:5f:9c:72:1f:f2:e4:1e:
                    ab:3f:ba:74:c1:62:58:85:d2:0f:cd:39:ec:9d:0c:
                    a4:74:6d:fe:a4:f8:81:a2:4c:f6:af:08:f6:63:31:
                    75:08:88:61:be:21:6e:8f:e6:7f:a2:03:b7:44:65:
                    72:60:4d:29:dc:e3:12:9e:31:6c:11:53:11:1d:4f:
                    76:a6:43:77:e1:09:40:12:07:1a:35:6a:c4:73:84:
                    39:33:e6:25:27:22:84:c4:83:e5:66:c8:42:82:61:
                    9a:81:aa:0e:78:f8:9c:ad:ba:1a:51:87:5c:87:3d:
                    5d:7e:1a:f0:2f:e3:73:ce:f5:74:8c:86:f1:93:2a:
                    d7:09:ac:d5:57:1f:36:6f:5d:1a:fd:46:09:b1:ee:
                    73:84:af:f3:fa:40:0a:f3:9a:a9:3c:f8:98:b6:29:
                    79:a6:28:6e:6e:bc:c0:e7:41:5b:55:04:d4:dd:a3:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:C6:D2:0F:1E:98:E8:53:A1:EE:27:D6:31:62:4C:47:39:39:6E
            X509v3 Authority Key Identifier:
                keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233342e302f32342d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:fd:9e:6f:2e:a1:4c:e8:97:8f:bd:12:c3:b8:d9:d7:b1:
         18:7f:ba:b3:3a:d2:7a:8c:1f:ab:dd:f9:57:ec:df:8a:96:ba:
         28:12:1d:96:5b:90:3a:4a:ec:eb:97:af:fd:f6:98:51:20:54:
         b8:4e:c3:77:65:8b:8a:78:0a:e2:5a:b5:5a:23:5c:15:08:38:
         39:d5:80:41:61:a2:71:26:d0:ac:84:ab:2c:51:6f:7c:a0:c0:
         a0:04:e9:5f:2a:7b:90:c3:3f:13:92:86:bc:5e:70:0c:90:f5:
         01:96:73:08:b3:6b:eb:73:37:2a:eb:55:f5:93:c1:8f:57:b7:
         d6:44:3e:31:ae:ae:a6:a8:0a:f1:7d:7f:d0:2c:d6:9e:2a:49:
         9e:0d:07:0b:1c:e4:a1:87:55:6c:d3:4b:4f:a0:0e:9e:49:83:
         c1:c9:84:4f:31:07:f6:77:8b:fa:0d:a5:1a:28:46:ff:42:fb:
         41:cc:57:c4:be:aa:1f:bb:36:51:2e:d2:ba:df:6e:4b:48:3b:
         49:4f:64:a1:ed:85:00:6d:49:2a:9a:74:cd:60:31:26:c9:7f:
         23:fa:e8:e7:89:72:2a:f4:87:39:06:b6:5b:2e:c6:5c:af:06:
         51:ba:ca:f7:55:8c:ce:27:c9:8e:79:4d:38:fa:e6:f9:9c:78:
         6d:81:9d:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeCaU+qmh8VHsH54iJw0x2pYTDM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyRDBCOTlCMDRFM0JBMDFDQjZDQ0ZCMjVGRDZFQjUz
OUEyOERFMzAeFw0yNDA3MjMxODI1MDNaFw0yNTA3MjIxODMwMDNaMDMxMTAvBgNV
BAMTKEMxNUVDNkQyMEYxRTk4RTg1M0ExRUUyN0Q2MzE2MjRDNDczOTM5NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvzhlHkpxvAylO38SKbO5KVjc
HlCwpPX3ioELWONnTZZ9PfLDpATJ97nRmabJNYUfXXcgfTNpq590ct7BXpprmqv6
jLAFDV7YFG4UoabjvDYpX5xyH/LkHqs/unTBYliF0g/NOeydDKR0bf6k+IGiTPav
CPZjMXUIiGG+IW6P5n+iA7dEZXJgTSnc4xKeMWwRUxEdT3amQ3fhCUASBxo1asRz
hDkz5iUnIoTEg+VmyEKCYZqBqg54+JytuhpRh1yHPV1+GvAv43PO9XSMhvGTKtcJ
rNVXHzZvXRr9Rgmx7nOEr/P6QArzmqk8+Ji2KXmmKG5uvMDnQVtVBNTdo5mbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwV7G0g8emOhToe4n1jFiTEc5OW4wHwYDVR0j
BBgwFoAUiC0LmbBOO6Actsz7Jf1utTmijeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1qVGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFT
akUvMC84ODJEMEI5OUIwNEUzQkEwMUNCNkNDRkIyNUZENkVCNTM5QTI4REUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkQwQjk5QjA0RTNCQTAx
Q0I2Q0NGQjI1RkQ2RUI1MzlBMjhERTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htalRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAv
MzIzMDMxMmUzMjMzMmUzMjMzMzQyZTMwMmYzMjM0MmQzMjM1MjAzZDNlMjAzMjMx
MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyRfqMA0GCSqGSIb3DQEBCwUAA4IBAQBu2f2eby6h
TOiXj70Sw7jZ17EYf7qzOtJ6jB+r3flX7N+KlrooEh2WW5A6Suzrl6/99phRIFS4
TsN3ZYuKeAriWrVaI1wVCDg51YBBYaJxJtCshKssUW98oMCgBOlfKnuQwz8Tkoa8
XnAMkPUBlnMIs2vrczcq61X1k8GPV7fWRD4xrq6mqArxfX/QLNaeKkmeDQcLHOSh
h1Vs00tPoA6eSYPByYRPMQf2d4v6DaUaKEb/QvtBzFfEvqofuzZRLtK6325LSDtJ
T2Sh7YUAbUkqmnTNYDEmyX8j+ujniXIq9Ic5BrZbLsZcrwZRusr3VYzOJ8mOeU04
+ub5nHhtgZ0g
-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org