Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/3230312e38372e3234302e302f32302d3234203d3e203533313935.roa
File: 3230312e38372e3234302e302f32302d3234203d3e203533313935.roa (raw, json)
Hash identifier: OnjSQGNjJjZEzU8SOa7QRLpsZkEZilLKk8hqaC+jHUE=
Subject key identifier: 80:D6:16:51:62:47:ED:6B:AA:98:A6:63:48:B2:3F:23:F6:A7:AF:3B
Certificate issuer: /CN=C21506A6156B7F8310321D898139CEE0A28D6935
Certificate serial: 24DD14B139C9AA1DD94EF8A12ACEA2F69E960D37
Authority key identifier: C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/3230312e38372e3234302e302f32302d3234203d3e203533313935.roa
Signing time: Wed 10 Apr 2024 13:30:54 +0000
ROA not before: Wed 10 Apr 2024 13:25:54 +0000
ROA not after: Wed 09 Apr 2025 13:30:54 +0000
asID: 53195
IP address blocks: 201.87.240.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:dd:14:b1:39:c9:aa:1d:d9:4e:f8:a1:2a:ce:a2:f6:9e:96:0d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C21506A6156B7F8310321D898139CEE0A28D6935
Validity
Not Before: Apr 10 13:25:54 2024 GMT
Not After : Apr 9 13:30:54 2025 GMT
Subject: CN=80D616516247ED6BAA98A66348B23F23F6A7AF3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:41:64:aa:94:0c:5c:de:54:47:6a:50:44:
19:ba:83:f2:46:54:98:9f:ca:7f:25:eb:bb:81:96:
a0:08:40:fa:47:78:40:07:89:68:30:40:b9:6b:01:
58:45:5b:4d:b9:0d:99:aa:5a:ef:42:41:2a:d4:81:
a4:58:84:c9:1f:7d:04:94:9c:7d:7d:30:4d:d9:6f:
b7:e3:42:a0:17:f4:ce:2a:91:35:b8:16:f0:a6:30:
7c:89:91:15:32:cf:5d:7b:3e:31:6a:65:92:7c:74:
f3:4a:1c:8d:ca:d3:3f:3b:73:24:aa:16:87:1a:ee:
51:51:87:32:c1:0a:aa:56:16:81:d4:76:55:77:96:
4e:45:e0:7c:aa:86:f2:70:b2:15:39:ad:69:60:23:
8f:09:d7:08:4b:47:f0:fa:dc:64:4f:3e:3f:d6:5a:
9c:fa:bd:d4:1c:37:e4:2e:0e:40:7c:a5:a7:c9:06:
13:4e:70:13:49:90:f8:89:5f:f8:cf:e1:ed:04:3c:
a5:d0:ed:4e:a7:1b:eb:f9:3d:b0:45:d1:d8:e6:cf:
c7:59:e2:d8:c1:f4:e2:45:fd:f6:10:9d:5d:fb:3c:
22:9f:c7:57:bf:c9:11:fb:20:ab:41:f1:54:24:da:
48:2d:9c:09:c4:23:8a:d9:0c:46:37:9b:58:68:db:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D6:16:51:62:47:ED:6B:AA:98:A6:63:48:B2:3F:23:F6:A7:AF:3B
X509v3 Authority Key Identifier:
keyid:C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/C21506A6156B7F8310321D898139CEE0A28D6935.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/3230312e38372e3234302e302f32302d3234203d3e203533313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.240.0/20
Signature Algorithm: sha256WithRSAEncryption
56:a3:93:2d:b9:61:22:51:2c:49:3b:2f:89:a6:c1:ff:fd:32:
2e:b6:44:c6:63:dd:15:5f:bf:7a:da:26:13:42:4c:01:da:a9:
99:58:9d:76:14:19:9e:39:e4:e4:1e:66:82:33:13:56:5d:20:
ba:03:07:e2:b1:0f:da:4f:74:6a:1a:b0:4f:f7:56:d0:e8:05:
db:3f:ad:29:28:0e:68:2d:09:75:3b:da:10:38:3d:ab:d2:66:
04:f8:b5:38:f4:7e:79:b5:43:f1:3a:57:25:e7:32:b2:85:e0:
24:6c:4a:27:7c:b9:b9:59:68:1f:4c:dc:d8:1e:22:aa:06:2e:
ab:a5:42:e2:6f:fd:ba:22:cc:df:c5:67:5d:38:cd:e1:9c:98:
63:ee:ec:a7:8d:c6:49:60:61:54:de:5e:2b:25:b4:1a:ba:44:
c1:7a:b0:78:aa:ab:76:34:f2:b4:3e:3b:b4:56:9d:6b:8f:9b:
ff:30:dc:2c:10:b9:9c:c6:c2:92:f8:fd:10:85:b6:7e:79:cd:
d3:7e:cb:47:de:59:e3:77:e8:75:42:12:26:43:fd:16:c9:d8:
63:71:cd:6b:2a:61:af:bf:31:14:5f:9a:14:13:e1:ca:12:40:
31:71:b0:fe:1e:38:a9:fd:30:f5:17:e7:c0:70:e5:7f:c8:a6:
5b:55:e2:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJN0UsTnJqh3ZTvihKs6i9p6WDTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIxNTA2QTYxNTZCN0Y4MzEwMzIxRDg5ODEzOUNFRTBB
MjhENjkzNTAeFw0yNDA0MTAxMzI1NTRaFw0yNTA0MDkxMzMwNTRaMDMxMTAvBgNV
BAMTKDgwRDYxNjUxNjI0N0VENkJBQTk4QTY2MzQ4QjIzRjIzRjZBN0FGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0UFkqpQMXN5UR2pQRBm6g/JG
VJifyn8l67uBlqAIQPpHeEAHiWgwQLlrAVhFW025DZmqWu9CQSrUgaRYhMkffQSU
nH19ME3Zb7fjQqAX9M4qkTW4FvCmMHyJkRUyz117PjFqZZJ8dPNKHI3K0z87cySq
Foca7lFRhzLBCqpWFoHUdlV3lk5F4HyqhvJwshU5rWlgI48J1whLR/D63GRPPj/W
Wpz6vdQcN+QuDkB8pafJBhNOcBNJkPiJX/jP4e0EPKXQ7U6nG+v5PbBF0djmz8dZ
4tjB9OJF/fYQnV37PCKfx1e/yRH7IKtB8VQk2kgtnAnEI4rZDEY3m1ho26qjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgNYWUWJH7WuqmKZjSLI/I/anrzswHwYDVR0j
BBgwFoAUwhUGphVrf4MQMh2JgTnO4KKNaTUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1MYkV4a21zclFUaTNHV3BaVTVnOXBob2dwYkdiNmhKbVg3WlYyVzJN
U0ovMS9DMjE1MDZBNjE1NkI3RjgzMTAzMjFEODk4MTM5Q0VFMEEyOEQ2OTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyMTUwNkE2MTU2QjdGODMx
MDMyMUQ4OTgxMzlDRUUwQTI4RDY5MzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hNTGJFeGttc3JRVGkzR1dwWlU1ZzlwaG9ncGJHYjZoSm1YN1pWMlcyTVNKLzEv
MzIzMDMxMmUzODM3MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMz
MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyVfwMA0GCSqGSIb3DQEBCwUAA4IBAQBWo5MtuWEi
USxJOy+JpsH//TIutkTGY90VX7962iYTQkwB2qmZWJ12FBmeOeTkHmaCMxNWXSC6
AwfisQ/aT3RqGrBP91bQ6AXbP60pKA5oLQl1O9oQOD2r0mYE+LU49H55tUPxOlcl
5zKyheAkbEonfLm5WWgfTNzYHiKqBi6rpULib/26IszfxWddOM3hnJhj7uynjcZJ
YGFU3l4rJbQaukTBerB4qqt2NPK0Pju0Vp1rj5v/MNwsELmcxsKS+P0QhbZ+ec3T
fstH3lnjd+h1QhImQ/0Wydhjcc1rKmGvvzEUX5oUE+HKEkAxcbD+Hjip/TD1F+fA
cOV/yKZbVeLU
-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:35 2024 by rpki-client on console-ams.rpki-client.org