Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39372e302f32342d3235203d3e203231353731.roa
File: 3230302e3135322e39372e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier: sLDM6AwYu3Z4iaDKixctUUQiU3azTJ818jzfMfddLp4=
Subject key identifier: B5:F8:0E:92:2A:DE:66:56:0D:F9:24:16:A1:75:14:C9:33:FE:C1:AA
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 17BE14116BD6EC2A3849F1E25CA45F4FF708F840
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39372e302f32342d3235203d3e203231353731.roa
Signing time: Fri 26 Jul 2024 13:04:15 +0000
ROA not before: Fri 26 Jul 2024 12:59:15 +0000
ROA not after: Fri 25 Jul 2025 13:04:15 +0000
asID: 21571
IP address blocks: 200.152.97.0/24 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:be:14:11:6b:d6:ec:2a:38:49:f1:e2:5c:a4:5f:4f:f7:08:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 26 12:59:15 2024 GMT
Not After : Jul 25 13:04:15 2025 GMT
Subject: CN=B5F80E922ADE66560DF92416A17514C933FEC1AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:14:f7:99:75:4f:82:3f:95:fa:8c:50:42:
fc:e2:16:0d:05:b2:8f:cb:f7:1b:91:3a:22:b3:e3:
ea:2d:16:73:ea:56:2b:92:eb:25:2b:e4:77:cd:e2:
09:f8:11:70:39:3d:d7:63:35:0d:fb:23:d8:3a:2d:
53:6f:36:2c:37:f4:33:c0:71:57:57:dd:41:5e:96:
8c:09:44:c2:be:68:4b:54:ae:3b:7e:a2:bb:f2:14:
e4:cc:68:9d:1c:c3:e6:f2:ea:15:f3:3d:92:d7:33:
40:d5:39:37:12:47:bf:a7:f1:71:53:eb:c9:39:52:
76:3d:9d:24:f2:db:67:5c:7a:3a:2f:2e:01:3c:24:
08:58:b7:fc:0e:c1:08:c4:ea:8f:86:0a:2e:23:7a:
ac:15:af:6d:07:9c:ec:72:ed:21:8e:0f:49:b2:bf:
be:b6:e5:7d:ca:37:e2:c1:6e:41:76:2c:d8:ae:fe:
1d:c4:6b:c7:b4:ab:8d:74:59:1e:59:78:db:ca:c7:
21:4e:70:fd:7c:20:23:6a:fe:39:59:78:cf:26:6c:
4b:cf:4e:26:ea:65:dc:ef:05:d9:29:d4:8f:07:ea:
a7:1a:4b:d3:0c:ea:29:f2:88:90:71:bb:c6:e8:81:
76:c7:5f:3f:30:a2:10:fe:b1:0c:e4:4b:75:f2:da:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:0E:92:2A:DE:66:56:0D:F9:24:16:A1:75:14:C9:33:FE:C1:AA
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39372e302f32342d3235203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.97.0/24
Signature Algorithm: sha256WithRSAEncryption
23:32:bd:a4:38:7f:a7:4f:e7:ec:29:f9:1d:e8:de:59:89:2b:
11:d3:ae:0f:00:58:49:d3:59:62:39:46:39:51:b8:ca:42:98:
58:85:a6:77:13:9e:f3:b2:5c:a7:5c:d7:71:23:14:c4:e8:6d:
f6:57:06:bf:01:f1:a9:7b:38:a3:fd:e9:81:25:78:77:55:41:
ec:4c:98:14:12:f6:0d:73:49:05:1b:fa:f7:c9:53:95:04:f6:
34:de:d3:c5:57:27:90:2b:d5:88:cc:f1:f4:db:8d:b7:49:0a:
9d:3b:45:8d:3d:f3:fa:43:d7:4d:ac:57:0b:81:66:80:8b:b6:
76:d0:8d:b8:9c:18:ad:72:66:33:a9:56:77:76:b2:9a:22:36:
9b:7b:86:2e:f6:94:96:75:64:fa:b4:29:0e:a6:4b:96:99:0f:
94:1d:94:e8:a8:d6:09:d3:36:4c:86:43:cb:21:34:a0:32:09:
eb:e2:dd:8c:a5:3f:d5:15:57:6a:3c:4c:1e:aa:b4:8c:3b:ea:
f7:92:85:fe:21:6d:3f:2a:3f:39:5e:cc:80:8a:9c:8e:c7:81:
cd:94:3c:b6:df:28:4d:af:c7:73:ca:e3:db:f0:94:df:25:b0:
5f:cb:fd:9e:4f:37:a1:71:a7:b4:88:14:87:b8:9e:36:2c:ed:
d6:45:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org