Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131352e302f32342d3235203d3e203231353731.roa
File: 3230302e3135322e3131352e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier: l9Vi3bejh+zX9Mm51YzZZGGnkSFb78wesvsKZePSHng=
Subject key identifier: A9:B5:8E:8A:49:68:61:EB:61:BE:77:FF:D5:29:93:D8:FF:DF:91:43
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 5439E1F8AA6BE1060F294543C5E3DA8986662A09
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131352e302f32342d3235203d3e203231353731.roa
Signing time: Wed 24 Jul 2024 19:23:09 +0000
ROA not before: Wed 24 Jul 2024 19:18:09 +0000
ROA not after: Wed 23 Jul 2025 19:23:09 +0000
asID: 21571
IP address blocks: 200.152.115.0/24 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:39:e1:f8:aa:6b:e1:06:0f:29:45:43:c5:e3:da:89:86:66:2a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 24 19:18:09 2024 GMT
Not After : Jul 23 19:23:09 2025 GMT
Subject: CN=A9B58E8A496861EB61BE77FFD52993D8FFDF9143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:ce:96:52:1e:51:d0:a7:b7:c6:ad:c1:d3:
ee:1c:f8:69:80:85:8f:35:ea:4a:b5:ed:c6:16:54:
32:ee:61:9b:ef:e0:6b:cc:32:77:29:d1:9a:fe:22:
89:57:9d:0e:6b:be:89:4a:7a:7e:1f:f9:e8:98:00:
69:9e:1d:d4:ae:09:de:f7:69:ce:50:e1:0e:52:af:
46:a9:72:45:72:29:bd:f3:ad:c5:21:4f:5f:c4:07:
48:06:99:eb:19:1d:88:10:2b:9b:ac:1e:41:6e:a6:
7f:3c:74:69:b1:8c:12:aa:8e:e2:e8:ca:68:0c:66:
d5:e4:12:83:cd:e6:8c:6f:98:44:2f:25:4e:5e:ae:
8b:fb:6a:48:fb:78:48:fc:b2:e1:ae:fe:8a:99:6c:
b7:e9:3c:1a:e2:50:5e:4a:78:58:6b:88:35:24:55:
cf:b3:1a:85:70:84:1f:ed:c1:88:4a:9f:1c:21:24:
c8:cb:ad:69:3f:c0:7b:fe:12:da:5e:57:d9:d5:78:
04:69:44:0c:3c:f2:24:42:76:cd:33:ff:21:dd:76:
e3:9a:3f:69:eb:a6:89:d5:9e:7f:e6:7e:d7:0e:89:
50:56:a8:d3:6c:85:b1:34:79:42:68:6d:41:27:6b:
37:9d:af:e8:09:40:ac:f9:16:4c:68:f6:df:bb:c6:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:8E:8A:49:68:61:EB:61:BE:77:FF:D5:29:93:D8:FF:DF:91:43
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131352e302f32342d3235203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.115.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:19:11:09:94:16:20:39:2b:dc:f3:ce:c4:53:0d:35:62:2e:
fe:93:a0:8c:2e:1b:40:da:20:5b:c8:3d:9b:fb:6e:67:ee:70:
75:dd:3d:c2:19:ff:84:0c:5e:58:36:9e:2f:98:21:f7:8d:4d:
cf:80:38:fb:eb:7b:b7:7b:22:41:17:66:86:66:d5:64:52:6f:
d0:3b:e4:92:39:b0:74:49:03:00:73:53:f0:65:b6:78:01:42:
c1:ee:72:b8:20:97:25:65:6d:8a:82:10:f1:02:d6:98:ae:66:
9e:d4:35:72:47:72:14:df:60:e2:e8:dd:ca:81:aa:42:32:b2:
b2:59:89:36:3b:df:df:2b:06:ac:49:e9:a0:ec:80:b5:97:0c:
cc:e3:bd:03:5c:05:97:93:f2:b7:7e:c9:4c:e0:3f:a7:03:d1:
c1:21:02:02:04:3e:cc:2e:9d:e0:74:95:15:be:f3:95:29:f6:
5a:f6:19:13:ec:8d:38:fa:50:b5:b1:32:b7:bf:4f:08:34:9f:
0c:0d:fc:a2:a2:84:1a:a9:2f:ca:1e:61:bb:38:54:86:bc:dc:
64:88:49:c0:03:26:7a:b8:3f:de:84:18:c8:77:c7:da:fa:d6:
9a:4f:a4:f1:2c:4a:62:0a:78:7f:cc:51:dd:df:18:49:2f:4e:
32:ca:92:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVDnh+Kpr4QYPKUVDxePaiYZmKgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyRDBCOTlCMDRFM0JBMDFDQjZDQ0ZCMjVGRDZFQjUz
OUEyOERFMzAeFw0yNDA3MjQxOTE4MDlaFw0yNTA3MjMxOTIzMDlaMDMxMTAvBgNV
BAMTKEE5QjU4RThBNDk2ODYxRUI2MUJFNzdGRkQ1Mjk5M0Q4RkZERjkxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZss6WUh5R0Ke3xq3B0+4c+GmA
hY816kq17cYWVDLuYZvv4GvMMncp0Zr+IolXnQ5rvolKen4f+eiYAGmeHdSuCd73
ac5Q4Q5Sr0apckVyKb3zrcUhT1/EB0gGmesZHYgQK5usHkFupn88dGmxjBKqjuLo
ymgMZtXkEoPN5oxvmEQvJU5erov7akj7eEj8suGu/oqZbLfpPBriUF5KeFhriDUk
Vc+zGoVwhB/twYhKnxwhJMjLrWk/wHv+EtpeV9nVeARpRAw88iRCds0z/yHdduOa
P2nrponVnn/mftcOiVBWqNNshbE0eUJobUEnazedr+gJQKz5Fkxo9t+7xnYrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqbWOikloYethvnf/1SmT2P/fkUMwHwYDVR0j
BBgwFoAUiC0LmbBOO6Actsz7Jf1utTmijeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1qVGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFT
akUvMC84ODJEMEI5OUIwNEUzQkEwMUNCNkNDRkIyNUZENkVCNTM5QTI4REUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkQwQjk5QjA0RTNCQTAx
Q0I2Q0NGQjI1RkQ2RUI1MzlBMjhERTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htalRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAv
MzIzMDMwMmUzMTM1MzIyZTMxMzEzNTJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDMy
MzEzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADImHMwDQYJKoZIhvcNAQELBQADggEBAKoZEQmU
FiA5K9zzzsRTDTViLv6ToIwuG0DaIFvIPZv7bmfucHXdPcIZ/4QMXlg2ni+YIfeN
Tc+AOPvre7d7IkEXZoZm1WRSb9A75JI5sHRJAwBzU/BltngBQsHucrgglyVlbYqC
EPEC1piuZp7UNXJHchTfYOLo3cqBqkIysrJZiTY7398rBqxJ6aDsgLWXDMzjvQNc
BZeT8rd+yUzgP6cD0cEhAgIEPswuneB0lRW+85Up9lr2GRPsjTj6ULWxMre/Twg0
nwwN/KKihBqpL8oeYbs4VIa83GSIScADJnq4P96EGMh3x9r61ppPpPEsSmIKeH/M
Ud3fGEkvTjLKkto=
-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org