Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3132342e302f32342d3235203d3e203231353731.roa
File: 3230302e3135322e3132342e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier: WIIc7BXKtRHYW9n8PX8mvwsLcQa3DwiSNhyNJ60/EBA=
Subject key identifier: 73:CF:9E:7D:D9:0A:1F:AD:C8:32:20:8F:9D:BE:B8:B6:3F:02:14:76
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 74721920657D5599C63D4E963496C6E91A528DFA
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3132342e302f32342d3235203d3e203231353731.roa
Signing time: Wed 24 Jul 2024 19:16:10 +0000
ROA not before: Wed 24 Jul 2024 19:11:10 +0000
ROA not after: Wed 23 Jul 2025 19:16:10 +0000
asID: 21571
IP address blocks: 200.152.124.0/24 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:72:19:20:65:7d:55:99:c6:3d:4e:96:34:96:c6:e9:1a:52:8d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 24 19:11:10 2024 GMT
Not After : Jul 23 19:16:10 2025 GMT
Subject: CN=73CF9E7DD90A1FADC832208F9DBEB8B63F021476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:bc:44:39:f0:88:71:fe:ef:9f:72:38:c0:
f8:89:32:c6:0b:18:bb:3a:a6:90:93:e9:d1:91:ce:
8c:35:a2:52:32:da:50:96:10:d2:0b:ea:5d:07:87:
e5:9b:5c:40:3f:3f:8d:3f:61:a5:78:6f:92:f2:ef:
07:f9:44:80:6d:0b:09:90:c7:22:ec:e8:ac:b4:63:
bd:e1:da:99:7e:f5:fa:5f:bc:4d:5f:1a:d9:ef:6d:
ed:bd:ae:80:a8:34:ed:a7:0f:db:62:dc:ad:96:f0:
39:be:04:17:c0:06:82:86:75:3d:ea:d7:93:81:90:
d4:19:de:14:f8:59:12:3f:78:18:d0:85:6a:3c:e8:
af:80:24:94:af:fc:0c:2b:92:fe:67:bf:66:fb:44:
84:7d:9f:89:d7:f8:7d:20:26:67:3f:bc:8c:04:41:
fc:13:ee:a1:2a:bd:fc:90:84:13:55:a4:ef:8d:fe:
bc:1d:3a:2b:1c:d6:65:b4:7b:55:41:07:bb:1d:14:
52:d2:de:30:e3:c3:ee:c1:87:60:d7:54:14:33:b2:
5f:84:65:78:81:cb:ca:db:e2:7f:9c:45:ea:67:0f:
65:fa:fc:92:11:bc:43:90:11:72:f8:08:bb:a0:80:
cf:21:5c:3e:1b:7b:d5:18:fd:a5:79:2c:9f:65:a9:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:9E:7D:D9:0A:1F:AD:C8:32:20:8F:9D:BE:B8:B6:3F:02:14:76
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3132342e302f32342d3235203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.124.0/24
Signature Algorithm: sha256WithRSAEncryption
30:78:d3:d9:4c:97:bc:d7:1e:67:b6:53:5b:5e:d7:97:f8:9a:
cc:4b:2b:ff:f2:8c:1d:c3:88:64:d5:7f:32:20:82:45:14:b9:
e8:96:fd:7f:57:56:06:d5:43:6a:91:fe:31:0d:7d:3f:e6:6a:
57:b5:c3:7b:22:d3:7e:ac:d4:92:07:c7:53:4c:32:06:de:14:
4f:ff:55:ee:d1:56:de:6e:40:e8:b9:91:09:a4:0a:a4:42:ba:
1b:39:7d:c5:57:9d:c3:73:f3:24:b3:31:2f:0b:2e:66:0e:c3:
26:88:e0:80:a0:52:ca:dd:f7:5e:2a:fe:e3:9e:2c:b0:e5:02:
45:6b:d4:f2:39:b1:67:79:11:e7:db:79:df:69:82:8f:a9:de:
b5:34:a5:e6:97:d1:7e:70:13:00:fe:f8:2b:86:ba:ee:ba:7a:
7a:7e:45:b6:3c:91:4f:e2:31:35:ce:8d:bb:bf:b8:fd:ea:93:
ec:2c:46:fb:ae:8b:f7:be:c8:f5:81:65:17:87:bb:02:11:0a:
eb:a0:8e:c1:23:54:ef:41:81:83:b8:c2:a5:91:56:e8:26:72:
d7:90:fc:26:07:74:27:23:ac:07:71:29:f8:2e:f9:3b:af:26:
4b:85:f3:ba:0b:7c:5d:6c:13:b8:a5:b2:3d:7d:26:22:8a:c6:
a7:df:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org