Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa
File: 3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa (raw, json)
Hash identifier: 9ziD/ioKeOpeWiJYl46PIW7dbB6M5Q0Zes4Um/0ckKk=
Subject key identifier: FD:FD:94:72:90:CA:1E:98:EA:13:16:9A:43:CA:43:B4:C4:3E:3A:C0
Certificate issuer: /CN=5AD99894988DD0F96A54E3B74753FF224C03A71B
Certificate serial: 44488B72F1BAC00491ABF0CD81863E52CBE0870E
Authority key identifier: 5A:D9:98:94:98:8D:D0:F9:6A:54:E3:B7:47:53:FF:22:4C:03:A7:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa
Signing time: Thu 04 Apr 2024 16:45:58 +0000
ROA not before: Thu 04 Apr 2024 16:40:58 +0000
ROA not after: Thu 03 Apr 2025 16:45:58 +0000
asID: 52873
IP address blocks: 200.229.220.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:48:8b:72:f1:ba:c0:04:91:ab:f0:cd:81:86:3e:52:cb:e0:87:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AD99894988DD0F96A54E3B74753FF224C03A71B
Validity
Not Before: Apr 4 16:40:58 2024 GMT
Not After : Apr 3 16:45:58 2025 GMT
Subject: CN=FDFD947290CA1E98EA13169A43CA43B4C43E3AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:7b:7a:04:dd:4b:8e:e6:89:b5:07:de:dd:
0d:6f:98:33:ca:dc:44:4d:d2:01:dd:c8:ee:e3:cf:
09:16:1f:f8:5a:cd:69:42:ba:de:24:8b:41:61:29:
a0:76:23:67:97:08:4a:35:23:ce:55:0f:de:b1:65:
67:bf:3c:57:bc:dc:72:07:77:c9:8e:6f:49:49:13:
ea:9b:88:d5:2e:a0:92:7f:d5:e3:6a:14:7e:d3:ea:
38:dd:16:bc:d2:57:2e:1c:9e:35:82:51:cf:a7:38:
0a:2d:b6:58:1a:7a:5d:70:25:26:32:dd:ab:25:f2:
40:b0:29:65:68:ea:85:12:ae:c6:e5:ac:33:8a:f7:
28:02:e9:45:b4:56:47:64:e0:f6:0a:43:a8:cd:c7:
85:97:46:fa:3d:ac:21:20:43:eb:fe:dc:0f:d8:a8:
6d:be:21:d1:c9:06:41:a6:c7:7b:fd:14:57:8c:fd:
5f:aa:cf:ca:8e:54:84:2b:f7:59:65:32:bd:a5:08:
b1:cc:40:03:1c:cf:45:39:7e:db:76:c6:fc:c5:ee:
0f:95:2f:74:37:14:0a:02:c2:87:0a:5e:6f:bf:10:
5d:e4:cd:cc:76:3c:a7:be:20:b3:ab:b9:86:99:c5:
52:b0:2a:de:1b:fd:bf:7c:88:5f:51:eb:ce:6d:23:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:94:72:90:CA:1E:98:EA:13:16:9A:43:CA:43:B4:C4:3E:3A:C0
X509v3 Authority Key Identifier:
keyid:5A:D9:98:94:98:8D:D0:F9:6A:54:E3:B7:47:53:FF:22:4C:03:A7:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.220.0/22
Signature Algorithm: sha256WithRSAEncryption
05:a7:c1:7f:58:11:a6:a7:d3:5c:98:cf:29:c3:07:ab:74:9a:
42:53:97:af:21:5c:08:c9:d3:b8:b8:f2:43:d5:f4:cb:51:52:
13:c2:8a:3b:30:4b:51:4d:0d:97:01:42:2e:9b:ba:bd:c4:48:
61:e5:cc:9f:7d:36:50:c3:07:e7:98:c5:7a:c9:26:e2:34:f9:
85:9b:27:cb:53:96:dc:02:da:fc:e5:47:fd:94:24:4b:91:ba:
3f:8a:eb:1b:60:45:70:a6:a1:8a:6b:c6:4d:43:ee:9b:69:ac:
f6:ae:ec:6f:da:42:e5:df:d1:ca:de:81:4a:81:c9:15:e0:6b:
ef:c8:9f:41:c8:54:62:1b:bd:38:8d:06:7e:2a:c5:1e:93:e5:
f6:88:53:f5:4b:35:e6:72:aa:69:88:d0:a3:b5:c1:f5:f9:d0:
a0:cd:fd:d3:b5:5a:f2:1e:e2:4d:d6:a3:cb:73:a2:d4:d8:7a:
a5:a8:82:a5:ab:58:32:cf:48:95:f8:4d:13:9c:c8:3c:87:d6:
13:3f:6a:f4:40:3a:3f:77:29:bf:c8:c6:35:92:86:72:72:0e:
2d:01:35:78:1b:ac:2c:06:76:0d:bc:a4:a2:db:89:f9:2a:84:
5f:87:15:4e:3c:ec:65:22:c9:83:af:83:d5:ea:39:21:90:58:
ba:2c:71:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUREiLcvG6wASRq/DNgYY+Usvghw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFEOTk4OTQ5ODhERDBGOTZBNTRFM0I3NDc1M0ZGMjI0
QzAzQTcxQjAeFw0yNDA0MDQxNjQwNThaFw0yNTA0MDMxNjQ1NThaMDMxMTAvBgNV
BAMTKEZERkQ5NDcyOTBDQTFFOThFQTEzMTY5QTQzQ0E0M0I0QzQzRTNBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+3t6BN1LjuaJtQfe3Q1vmDPK
3ERN0gHdyO7jzwkWH/hazWlCut4ki0FhKaB2I2eXCEo1I85VD96xZWe/PFe83HIH
d8mOb0lJE+qbiNUuoJJ/1eNqFH7T6jjdFrzSVy4cnjWCUc+nOAottlgael1wJSYy
3asl8kCwKWVo6oUSrsblrDOK9ygC6UW0Vkdk4PYKQ6jNx4WXRvo9rCEgQ+v+3A/Y
qG2+IdHJBkGmx3v9FFeM/V+qz8qOVIQr91llMr2lCLHMQAMcz0U5ftt2xvzF7g+V
L3Q3FAoCwocKXm+/EF3kzcx2PKe+ILOruYaZxVKwKt4b/b98iF9R685tI5VvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/f2UcpDKHpjqExaaQ8pDtMQ+OsAwHwYDVR0j
BBgwFoAUWtmYlJiN0PlqVOO3R1P/IkwDpxswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMS81QUQ5OTg5NDk4OEREMEY5NkE1NEUzQjc0NzUzRkYyMjRDMDNBNzFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRDk5ODk0OTg4REQwRjk2
QTU0RTNCNzQ3NTNGRjIyNEMwM0E3MUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzEv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI5dwwDQYJKoZIhvcNAQELBQADggEBAAWnwX9Y
Eaan01yYzynDB6t0mkJTl68hXAjJ07i48kPV9MtRUhPCijswS1FNDZcBQi6bur3E
SGHlzJ99NlDDB+eYxXrJJuI0+YWbJ8tTltwC2vzlR/2UJEuRuj+K6xtgRXCmoYpr
xk1D7ptprPau7G/aQuXf0cregUqByRXga+/In0HIVGIbvTiNBn4qxR6T5faIU/VL
NeZyqmmI0KO1wfX50KDN/dO1WvIe4k3Wo8tzotTYeqWogqWrWDLPSJX4TROcyDyH
1hM/avRAOj93Kb/IxjWShnJyDi0BNXgbrCwGdg28pKLbifkqhF+HFU487GUiyYOv
g9XqOSGQWLoscaM=
-----END CERTIFICATE-----
Generated at Sat Aug 17 12:40:44 2024 by rpki-client on console-ams.rpki-client.org