Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131372e302f32342d3235203d3e203231353731.roa
File: 3230302e3135322e3131372e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier: qhD94YrrAE0laeFqwmXvtBNowysp7IL/Sx+ivmStV4g=
Subject key identifier: D1:F5:EA:0E:F6:26:34:B5:18:2C:8E:B0:66:3C:70:1A:E1:33:6B:2A
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 278461073596CEC85ABAD906B80A551310D63217
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131372e302f32342d3235203d3e203231353731.roa
Signing time: Wed 24 Jul 2024 19:17:38 +0000
ROA not before: Wed 24 Jul 2024 19:12:38 +0000
ROA not after: Wed 23 Jul 2025 19:17:38 +0000
asID: 21571
IP address blocks: 200.152.117.0/24 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:84:61:07:35:96:ce:c8:5a:ba:d9:06:b8:0a:55:13:10:d6:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 24 19:12:38 2024 GMT
Not After : Jul 23 19:17:38 2025 GMT
Subject: CN=D1F5EA0EF62634B5182C8EB0663C701AE1336B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:a6:37:b8:4a:2a:70:a1:4b:b6:45:eb:73:
95:27:99:67:3a:da:51:d1:58:aa:10:89:b1:fb:07:
26:c3:38:82:32:bc:43:e8:fe:45:e9:07:cf:e1:0a:
bc:f2:aa:e8:50:22:3d:a9:3f:fa:21:de:e1:15:f2:
18:e8:e0:22:89:e3:22:8d:fa:c3:5d:7c:e9:07:a9:
db:3d:7c:64:d0:53:c2:a3:c7:e5:01:a6:ac:dc:f9:
83:db:63:b2:b4:09:f7:78:da:6d:7f:05:08:c1:17:
64:e5:74:1d:98:80:e5:4c:88:e7:a7:0d:30:24:62:
f7:66:19:eb:47:84:75:15:11:ee:6c:6d:cd:0d:9a:
1e:6f:2b:bd:68:53:ad:5c:44:4a:86:0d:3a:db:8d:
98:fa:77:65:59:b6:63:c8:5f:b4:7d:d8:ae:f9:41:
01:2f:f5:e3:03:58:78:ec:c4:0b:53:fa:9d:4d:82:
f2:2b:cb:b8:74:7d:a5:4d:51:a0:7e:83:7b:4d:47:
5f:8e:c5:2c:03:65:29:a3:f0:7d:d6:52:40:1f:a0:
76:5a:02:67:52:5f:0f:35:9b:a7:cf:5b:1d:f5:9e:
d8:10:b8:c1:48:0b:1b:4e:a6:d6:b4:be:bf:2a:31:
59:e4:1c:50:81:6b:20:b1:55:56:92:30:45:50:41:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:EA:0E:F6:26:34:B5:18:2C:8E:B0:66:3C:70:1A:E1:33:6B:2A
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131372e302f32342d3235203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.117.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:46:97:07:d5:5f:de:3d:8c:04:a5:b1:e0:b4:4f:89:90:ef:
bb:fe:21:45:9a:b2:39:22:7b:a5:31:91:5b:bc:38:6e:9b:32:
32:3a:93:85:da:44:c3:9e:35:aa:44:ec:84:4b:98:fd:d9:88:
fe:38:9d:30:71:09:bf:58:f1:2c:24:c3:cd:cb:4a:6f:72:6d:
01:78:74:ca:4b:b0:60:67:66:3a:4e:0f:d7:00:15:08:dd:8e:
d2:ae:ab:f3:38:f6:78:1f:17:6c:2d:5b:59:e0:b8:6d:5b:d8:
30:b3:38:80:ca:05:2b:58:76:4e:2c:c2:7b:76:e9:05:c2:da:
0b:98:ea:b7:9d:5b:9c:67:53:37:f8:aa:70:9c:15:7c:8a:1b:
af:16:ae:c6:99:ed:e6:0d:7a:a7:36:ec:fb:4d:a9:b3:0f:04:
4e:03:e4:8b:41:7f:de:84:56:d4:69:c1:69:6c:82:d5:4c:da:
f5:e9:09:98:0c:23:68:fd:c7:a8:7d:a8:80:93:2a:a3:c0:1a:
c3:12:3b:1c:c2:69:d9:0c:68:f9:35:10:6d:59:ef:cb:49:a5:
8e:8c:50:96:9d:16:a5:88:6d:91:b3:cd:3b:d4:c0:77:21:79:
c6:7a:89:6b:5b:27:8a:86:1a:0f:71:36:d6:f7:3d:f2:0b:e1:
31:da:7b:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ4RhBzWWzshautkGuApVExDWMhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyRDBCOTlCMDRFM0JBMDFDQjZDQ0ZCMjVGRDZFQjUz
OUEyOERFMzAeFw0yNDA3MjQxOTEyMzhaFw0yNTA3MjMxOTE3MzhaMDMxMTAvBgNV
BAMTKEQxRjVFQTBFRjYyNjM0QjUxODJDOEVCMDY2M0M3MDFBRTEzMzZCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0taY3uEoqcKFLtkXrc5UnmWc6
2lHRWKoQibH7BybDOIIyvEPo/kXpB8/hCrzyquhQIj2pP/oh3uEV8hjo4CKJ4yKN
+sNdfOkHqds9fGTQU8Kjx+UBpqzc+YPbY7K0Cfd42m1/BQjBF2TldB2YgOVMiOen
DTAkYvdmGetHhHUVEe5sbc0Nmh5vK71oU61cREqGDTrbjZj6d2VZtmPIX7R92K75
QQEv9eMDWHjsxAtT+p1NgvIry7h0faVNUaB+g3tNR1+OxSwDZSmj8H3WUkAfoHZa
AmdSXw81m6fPWx31ntgQuMFICxtOpta0vr8qMVnkHFCBayCxVVaSMEVQQbOXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0fXqDvYmNLUYLI6wZjxwGuEzayowHwYDVR0j
BBgwFoAUiC0LmbBOO6Actsz7Jf1utTmijeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1qVGRLcnlaRGtwVkNoY0d3Um9kSkp5amlvc2ZqUVhLY3IyNkN3SHFT
akUvMC84ODJEMEI5OUIwNEUzQkEwMUNCNkNDRkIyNUZENkVCNTM5QTI4REUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkQwQjk5QjA0RTNCQTAx
Q0I2Q0NGQjI1RkQ2RUI1MzlBMjhERTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htalRkS3J5WkRrcFZDaGNHd1JvZEpKeWppb3NmalFYS2NyMjZDd0hxU2pFLzAv
MzIzMDMwMmUzMTM1MzIyZTMxMzEzNzJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDMy
MzEzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADImHUwDQYJKoZIhvcNAQELBQADggEBACtGlwfV
X949jASlseC0T4mQ77v+IUWasjkie6UxkVu8OG6bMjI6k4XaRMOeNapE7IRLmP3Z
iP44nTBxCb9Y8Swkw83LSm9ybQF4dMpLsGBnZjpOD9cAFQjdjtKuq/M49ngfF2wt
W1nguG1b2DCzOIDKBStYdk4swnt26QXC2guY6redW5xnUzf4qnCcFXyKG68WrsaZ
7eYNeqc27PtNqbMPBE4D5ItBf96EVtRpwWlsgtVM2vXpCZgMI2j9x6h9qICTKqPA
GsMSOxzCadkMaPk1EG1Z78tJpY6MUJadFqWIbZGzzTvUwHchecZ6iWtbJ4qGGg9x
Ntb3PfIL4THaewc=
-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org