Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa
File: 3230302e35332e38362e302f32342d3234203d3e20323731323938.roa (raw, json)
Hash identifier: 3xUTIDagg0GGdy1m5KpcrnFUMTnqJEpVr43DEH7aHss=
Subject key identifier: F1:41:6B:5B:59:9F:81:4F:78:47:CC:77:62:06:76:5E:14:3F:CD:B0
Certificate issuer: /CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
Certificate serial: 728AF8FF3582E16C7E5D679DC9C1EA45A2F1627D
Authority key identifier: 41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa
Signing time: Wed 03 Apr 2024 23:04:41 +0000
ROA not before: Wed 03 Apr 2024 22:59:41 +0000
ROA not after: Wed 02 Apr 2025 23:04:41 +0000
asID: 271298
IP address blocks: 200.53.86.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8a:f8:ff:35:82:e1:6c:7e:5d:67:9d:c9:c1:ea:45:a2:f1:62:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
Validity
Not Before: Apr 3 22:59:41 2024 GMT
Not After : Apr 2 23:04:41 2025 GMT
Subject: CN=F1416B5B599F814F7847CC776206765E143FCDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bb:f9:41:d2:ac:9d:b9:37:eb:35:41:3e:34:
f2:27:55:e6:23:f3:78:20:a5:9b:be:5c:6d:e1:67:
a7:08:b5:7c:9f:59:dd:d5:cf:26:5c:ef:79:ff:ab:
d3:be:52:d6:23:62:85:56:60:96:3e:f0:1f:b5:0d:
37:92:28:8a:ed:76:cf:5b:f2:8f:3a:6c:14:aa:ef:
1c:3d:c5:58:5b:3f:ce:58:22:8a:96:ac:bd:2d:82:
c8:af:33:a9:97:a6:5d:1f:6b:5d:07:66:b5:12:4d:
d4:70:56:a0:21:b2:41:17:49:6b:a1:f0:c7:49:35:
bc:df:74:05:44:f4:84:d3:2a:55:71:72:ed:9a:7e:
40:dc:b2:f2:9a:52:ef:8e:a9:a2:02:35:6a:a0:76:
b7:83:bd:47:fe:45:91:04:ef:cb:dd:ad:89:7a:99:
fc:27:84:2a:dc:8c:10:dc:14:31:fd:59:38:63:51:
2c:34:99:c0:d1:a1:5b:60:2e:ec:a5:27:3e:17:92:
4e:b9:29:39:d1:af:a0:8b:b9:b0:53:2c:07:73:f9:
3d:8f:a3:20:67:a8:0b:35:62:0f:d9:e0:43:9b:ee:
2d:4c:48:c8:9d:9c:94:0a:0f:d6:94:eb:24:ce:df:
44:ca:8e:56:10:01:b2:9d:4b:6a:53:e9:a7:c5:e3:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:6B:5B:59:9F:81:4F:78:47:CC:77:62:06:76:5E:14:3F:CD:B0
X509v3 Authority Key Identifier:
keyid:41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.86.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:d0:c0:1e:6f:9a:91:62:b9:3f:7c:8c:99:fd:7a:d2:ff:
ff:35:0f:23:68:4c:d9:46:ce:6b:d1:99:f7:ba:d3:47:07:88:
7e:48:45:f0:d9:f3:3b:51:5e:d7:fb:ec:23:98:a3:1b:6c:4f:
f5:04:b0:72:7c:7f:03:68:12:31:77:73:a6:29:cb:1c:7e:f5:
bc:01:65:4d:86:8a:f1:d8:2f:cb:14:1d:3a:63:96:6b:d7:2a:
ee:de:51:06:5a:d6:ab:ba:51:72:e6:9f:ed:80:80:b3:d0:d2:
ea:43:ff:81:97:0b:09:32:5b:6f:48:39:0d:5b:b2:2c:8f:fa:
b1:23:55:0c:78:55:12:83:0d:7b:92:f7:2f:e6:bd:4b:a0:d2:
3d:60:4b:56:e0:ae:d9:4a:78:d7:00:72:48:42:1f:dd:ec:ff:
c6:48:4d:c5:29:1c:d4:36:59:39:3e:0c:c9:55:fb:d4:39:84:
c6:03:3b:41:a0:30:cf:b4:f0:0d:3c:96:23:9c:07:1e:c5:5f:
ee:ec:57:5c:74:c2:4e:2f:36:cf:32:f7:11:bc:d1:fc:5a:96:
08:84:97:87:a1:09:1f:43:b3:b7:46:9c:b6:18:7a:bf:19:f1:
75:98:51:b5:79:79:ad:62:aa:7c:74:d2:49:15:17:57:e1:f4:
1f:1d:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 13:39:22 2024 by rpki-client on console-ams.rpki-client.org