Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130392e302f32342d3235203d3e203231353731.roa
File: 3230302e3135322e3130392e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier: 2KGcII836B/MiL1B9cgauWeiXOIRxEAg5ekP9kggzs4=
Subject key identifier: C0:99:C7:B5:5E:21:CD:CF:BF:D6:0D:60:F6:73:DA:56:08:18:E3:10
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 2EE6BD21099040FD378BEAE769B6662324D97127
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130392e302f32342d3235203d3e203231353731.roa
Signing time: Thu 25 Jul 2024 20:19:34 +0000
ROA not before: Thu 25 Jul 2024 20:14:34 +0000
ROA not after: Thu 24 Jul 2025 20:19:34 +0000
asID: 21571
IP address blocks: 200.152.109.0/24 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e6:bd:21:09:90:40:fd:37:8b:ea:e7:69:b6:66:23:24:d9:71:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 25 20:14:34 2024 GMT
Not After : Jul 24 20:19:34 2025 GMT
Subject: CN=C099C7B55E21CDCFBFD60D60F673DA560818E310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:d4:c1:b9:87:83:cf:cb:08:8e:6e:95:6d:
97:7b:71:b4:69:8c:1a:18:6a:68:d2:67:70:b2:29:
4b:9c:a8:8c:4f:ed:14:f2:4a:2d:aa:21:ea:11:3a:
32:78:c3:48:04:98:94:a8:33:2c:79:0a:10:ab:6a:
00:3a:00:f7:5e:fa:1c:4e:09:38:12:1b:6c:29:a4:
4c:82:72:94:9f:25:4f:8c:3e:12:e2:12:46:93:f8:
bf:39:42:ee:a8:65:67:8d:ab:a8:ed:22:1b:1f:7d:
89:7a:da:76:8c:ce:eb:06:cd:0f:7f:e0:a4:5a:37:
7b:45:8a:d2:ce:1b:68:0e:79:98:e6:57:3b:9e:55:
c2:6f:f9:ff:14:f1:f8:cb:7d:d9:7f:e7:7e:63:17:
f0:aa:bc:65:ee:0a:96:dc:bb:d9:25:85:ae:14:32:
55:e8:78:47:4c:bf:4e:f9:fc:a8:66:6c:e4:20:ed:
7f:b1:03:51:8b:c5:47:6c:cc:38:7a:62:c9:22:f3:
93:2e:16:d0:6b:d9:0d:85:9f:1b:3b:c3:88:15:ce:
51:fd:6f:6a:bb:e7:45:20:52:24:05:ef:56:f9:56:
10:76:df:34:e1:00:1f:df:dc:e7:b6:89:e4:8c:bb:
ce:72:0e:11:ba:2a:28:69:1e:e2:8d:b9:a9:0f:bf:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:C7:B5:5E:21:CD:CF:BF:D6:0D:60:F6:73:DA:56:08:18:E3:10
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3130392e302f32342d3235203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:a3:f3:cd:42:91:41:84:f0:3b:ae:91:aa:31:31:43:26:de:
c9:59:85:b3:5b:6b:c5:01:90:6d:f1:f4:5e:d1:aa:9f:3a:01:
8b:da:c5:1f:85:8d:fb:d0:74:ae:bb:b0:9d:11:d2:dc:88:f2:
f2:e2:46:c1:5a:6c:0b:b5:fb:7e:73:75:ce:47:d4:5d:49:ef:
5d:bd:35:a4:32:81:13:58:27:2e:b6:bb:df:e3:16:9d:5a:6f:
ab:83:b3:c9:a0:61:f1:b0:ca:76:4f:15:66:3e:41:0f:2c:14:
16:54:dc:57:8e:61:a4:13:15:c2:93:a5:6f:ce:39:64:a8:d6:
8d:7d:08:d8:40:88:de:0e:14:3b:06:a0:c6:55:b8:99:f4:09:
d1:5b:3f:85:f0:22:2f:47:41:dd:f9:61:eb:45:d3:db:a4:d7:
eb:85:75:18:fa:c0:c9:c7:c3:3e:eb:49:5e:38:58:5c:31:23:
6e:36:c8:02:85:6a:5f:12:14:80:86:da:2a:6e:9a:f4:4d:f9:
62:1d:c0:4f:8f:1d:1a:fd:a5:34:72:7f:aa:02:6a:10:20:82:
ac:4a:28:6a:98:5c:5c:13:b2:a3:fa:25:d8:0e:e1:13:e4:81:
76:92:cf:90:da:65:ad:df:13:43:2a:ed:da:9d:58:af:1c:11:
05:71:d9:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULua9IQmQQP03i+rnabZmIyTZcScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyRDBCOTlCMDRFM0JBMDFDQjZDQ0ZCMjVGRDZFQjUz
OUEyOERFMzAeFw0yNDA3MjUyMDE0MzRaFw0yNTA3MjQyMDE5MzRaMDMxMTAvBgNV
BAMTKEMwOTlDN0I1NUUyMUNEQ0ZCRkQ2MEQ2MEY2NzNEQTU2MDgxOEUzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ENTBuYeDz8sIjm6VbZd7cbRp
jBoYamjSZ3CyKUucqIxP7RTySi2qIeoROjJ4w0gEmJSoMyx5ChCragA6APde+hxO
CTgSG2wppEyCcpSfJU+MPhLiEkaT+L85Qu6oZWeNq6jtIhsffYl62naMzusGzQ9/
4KRaN3tFitLOG2gOeZjmVzueVcJv+f8U8fjLfdl/535jF/CqvGXuCpbcu9klha4U
MlXoeEdMv075/KhmbOQg7X+xA1GLxUdszDh6Yski85MuFtBr2Q2Fnxs7w4gVzlH9
b2q750UgUiQF71b5VhB23zThAB/f3Oe2ieSMu85yDhG6KihpHuKNuakPv6gjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwJnHtV4hzc+/1g1g9nPaVggY4xAwHwYDVR0j
BBgwFoAUiC0LmbBOO6Actsz7Jf1utTmijeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1qVGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFT
akUvMC84ODJEMEI5OUIwNEUzQkEwMUNCNkNDRkIyNUZENkVCNTM5QTI4REUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkQwQjk5QjA0RTNCQTAx
Q0I2Q0NGQjI1RkQ2RUI1MzlBMjhERTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htalRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAv
MzIzMDMwMmUzMTM1MzIyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDMy
MzEzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADImG0wDQYJKoZIhvcNAQELBQADggEBALaj881C
kUGE8DuukaoxMUMm3slZhbNba8UBkG3x9F7Rqp86AYvaxR+FjfvQdK67sJ0R0tyI
8vLiRsFabAu1+35zdc5H1F1J7129NaQygRNYJy62u9/jFp1ab6uDs8mgYfGwynZP
FWY+QQ8sFBZU3FeOYaQTFcKTpW/OOWSo1o19CNhAiN4OFDsGoMZVuJn0CdFbP4Xw
Ii9HQd35YetF09uk1+uFdRj6wMnHwz7rSV44WFwxI242yAKFal8SFICG2ipumvRN
+WIdwE+PHRr9pTRyf6oCahAggqxKKGqYXFwTsqP6JdgO4RPkgXaSz5DaZa3fE0Mq
7dqdWK8cEQVx2Q4=
-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org