Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
File: 3230302e35332e36362e302f32332d3233203d3e20323731353034.roa (raw, json)
Hash identifier: 5Qf4C1WghA4syGMt96RUh2HUFLQXBOLpYS1701FBdrA=
Subject key identifier: 03:3B:C0:58:6A:E2:D3:C9:E7:38:DB:5F:98:53:18:45:46:24:F9:B2
Certificate issuer: /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial: 42A2EF936980D5806535F4CB041A0A31F50DFDF0
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
Signing time: Mon 19 Aug 2024 18:28:14 +0000
ROA not before: Mon 19 Aug 2024 18:23:14 +0000
ROA not after: Mon 18 Aug 2025 18:28:14 +0000
asID: 271504
IP address blocks: 200.53.66.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a2:ef:93:69:80:d5:80:65:35:f4:cb:04:1a:0a:31:f5:0d:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Validity
Not Before: Aug 19 18:23:14 2024 GMT
Not After : Aug 18 18:28:14 2025 GMT
Subject: CN=033BC0586AE2D3C9E738DB5F985318454624F9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:e8:8f:d5:9c:df:24:d7:19:47:82:7c:aa:
78:36:69:76:67:69:93:aa:65:64:0d:28:53:80:1c:
69:00:37:43:b8:95:75:c9:62:d5:e8:cd:01:22:b9:
75:71:7f:d8:28:c2:2f:bb:b7:6a:41:36:20:2d:81:
a9:37:bc:af:7f:0c:1a:fe:d7:5b:4e:30:61:06:80:
b9:7d:e1:d0:24:6a:7b:eb:7e:23:32:23:5c:3a:ad:
aa:ab:e2:65:a6:e2:ea:1e:50:77:ab:8d:0d:2c:16:
c5:58:0b:70:88:c5:b5:8c:fd:2b:8d:ad:0b:ce:74:
ec:65:0f:b2:9e:a2:6f:2d:7f:be:ff:61:77:a5:63:
c8:dc:42:46:0c:69:75:1f:c7:8e:10:54:c6:83:6b:
c1:06:64:f1:e8:81:18:23:c6:7b:87:0f:6c:1e:35:
16:32:c1:df:61:a9:6a:90:0c:ec:33:79:0f:f8:65:
8d:ef:57:f6:5c:79:d9:4d:45:73:c2:a4:3b:2b:87:
6e:4d:24:a7:7b:db:b5:d0:9c:d4:cf:d0:e0:c6:69:
7e:f6:28:76:02:bd:dd:ce:21:72:ab:5c:96:b0:af:
8b:b3:58:ed:9a:85:35:81:e4:44:49:d3:d3:7e:fb:
75:11:94:4c:19:b6:3a:70:3d:64:70:fa:dc:90:67:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:C0:58:6A:E2:D3:C9:E7:38:DB:5F:98:53:18:45:46:24:F9:B2
X509v3 Authority Key Identifier:
keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.66.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:ac:17:66:7e:ba:e3:a4:57:16:77:f6:c8:ba:98:d9:f9:48:
eb:83:2d:77:51:e4:c6:3e:59:fa:48:76:cb:dc:46:0f:bb:39:
6c:41:57:1d:fd:d6:49:d8:d5:e8:f1:c5:ce:cb:c5:f1:27:09:
97:a9:08:df:68:aa:48:ae:96:78:9e:bc:e5:ce:bc:0c:36:48:
e0:58:c1:ca:0f:cd:97:95:d5:6b:0f:4c:b3:41:a1:8c:26:55:
50:b9:69:f1:84:f6:5a:99:e3:9a:6c:b1:54:b7:14:7e:93:92:
59:68:e1:84:20:04:bd:fd:20:f1:9c:5d:a1:92:07:27:9e:e9:
56:e5:3c:bc:a1:1d:c0:db:73:90:c9:9c:39:c2:11:e4:ee:8f:
13:b3:45:31:43:1e:b9:37:ce:cb:d7:53:e0:29:a0:fe:a4:03:
c1:46:fd:5c:9f:21:32:e7:ad:99:1f:d7:98:67:3c:02:f5:bf:
d3:09:be:38:13:eb:99:2c:c6:d7:f3:10:4f:2a:39:b3:12:28:
b3:10:c5:4d:2a:f3:35:e9:d9:ed:5e:3c:3d:43:15:76:60:a4:
03:80:5d:a5:1f:56:49:47:99:ee:04:1d:88:80:0a:f6:60:2f:
1a:9b:9e:38:d9:8e:62:15:bc:4d:ee:d3:43:45:12:be:13:95:
a1:0d:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:00:41 2024 by rpki-client on console-ams.rpki-client.org