Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39362e302f32342d3234203d3e203231353731.roa
File: 3230302e3135322e39362e302f32342d3234203d3e203231353731.roa (raw, json)
Hash identifier: VgC2nZBOczMLlkss+/pHPz1nt6My4Kx2pGk+DOgpnv4=
Subject key identifier: 5E:87:5A:2B:EC:9D:F9:07:84:9C:5C:08:E2:67:54:A0:70:FC:08:4A
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 0B15A603D2F767FFDE44A71248F7EB36938B3886
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39362e302f32342d3234203d3e203231353731.roa
Signing time: Fri 26 Jul 2024 13:04:26 +0000
ROA not before: Fri 26 Jul 2024 12:59:26 +0000
ROA not after: Fri 25 Jul 2025 13:04:26 +0000
asID: 21571
IP address blocks: 200.152.96.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:15:a6:03:d2:f7:67:ff:de:44:a7:12:48:f7:eb:36:93:8b:38:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 26 12:59:26 2024 GMT
Not After : Jul 25 13:04:26 2025 GMT
Subject: CN=5E875A2BEC9DF907849C5C08E26754A070FC084A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:70:d8:67:ff:d5:aa:b3:57:18:83:25:44:
cf:f6:95:e9:78:83:62:c5:d5:4c:25:5f:d9:bf:a8:
bb:b4:ad:20:ef:67:92:4a:10:3c:32:5f:a8:c2:cb:
91:9c:6c:a1:31:98:68:7a:36:c8:7a:ad:20:00:d0:
ae:fb:c3:54:f6:39:52:38:68:4e:d1:d0:9d:50:50:
4c:e2:70:43:fe:43:86:a3:f6:24:fd:88:87:d6:6f:
57:a5:c6:4a:44:0c:7e:19:fb:d3:57:26:1a:bd:04:
6a:e1:af:73:ab:a3:2f:20:25:da:25:fd:8b:05:c5:
46:cb:f2:b9:7c:51:08:f1:20:1e:5d:76:78:79:0c:
64:0c:85:68:4f:37:17:21:f3:bf:30:ea:55:ef:1f:
3f:3b:0f:36:be:e3:0d:4b:48:ff:30:c0:5a:ff:37:
0c:8d:d9:a4:41:12:24:e6:5c:42:c3:61:b8:ba:25:
94:13:8f:e8:cb:5b:51:30:0d:2c:79:22:d4:dc:d0:
50:c8:02:75:05:c5:9c:a8:a8:57:f7:f8:ee:43:32:
b1:c6:20:63:4f:28:98:d3:e0:48:50:94:37:8f:c2:
94:2f:a1:31:aa:80:c9:62:3e:ae:89:a3:c7:a2:0b:
5c:87:56:a7:fa:0f:74:1d:b7:2a:c5:9a:60:f6:90:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:5A:2B:EC:9D:F9:07:84:9C:5C:08:E2:67:54:A0:70:FC:08:4A
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39362e302f32342d3234203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:07:d0:f4:9f:ca:0e:9e:a8:28:7e:81:fb:11:bc:b7:1d:5f:
ef:ff:4f:e5:7a:49:10:71:03:bb:36:4e:ea:0b:3a:46:91:c4:
f9:fe:1c:a1:72:83:51:d0:35:e7:af:9f:5e:f3:20:ad:76:a7:
36:76:f0:51:0c:6a:83:37:8a:16:3d:a6:f7:07:fe:5c:72:4e:
a0:60:29:f5:b8:11:53:2f:5a:fb:09:0f:4c:28:0a:34:f2:9e:
9a:7e:46:82:11:ab:8e:cd:62:2f:17:82:59:39:80:a1:59:4a:
1a:b2:dd:1e:3b:b0:4f:e3:77:64:31:b7:d9:2a:a8:e9:3f:69:
af:7d:a6:1b:5d:12:5a:18:94:b4:15:4e:1c:09:98:17:5e:27:
a9:95:8d:40:7a:17:96:66:0d:59:e5:cd:dc:a1:b8:b2:b5:d9:
4d:6d:d6:b8:05:a3:f8:6a:45:7d:ce:1f:d6:65:14:d9:fa:5f:
04:bc:52:df:ae:09:1b:27:ff:fb:40:02:90:7d:c7:82:e7:f0:
7a:08:26:fa:57:ae:38:6f:a5:39:53:21:b0:21:a0:50:e0:47:
02:53:c7:d0:89:f0:3e:bd:48:a4:83:93:c4:20:4c:e7:32:ad:
12:60:cc:0d:5b:9c:4b:e3:a5:8c:b1:b8:16:d2:a7:48:f3:ad:
4b:c3:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org