Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233352e302f32342d3235203d3e203231353731.roa
File: 3230312e32332e3233352e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier: 0kvnjr95tYxIpFHzoSq5kkm6whkivRVgtfhELNx763o=
Subject key identifier: 3A:24:80:FB:B9:F4:4A:98:B1:D1:3C:03:0F:F6:5F:30:11:78:00:EB
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 4AADAB90F0101194468B94EC17A0769D01A1E17C
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233352e302f32342d3235203d3e203231353731.roa
Signing time: Tue 23 Jul 2024 18:29:34 +0000
ROA not before: Tue 23 Jul 2024 18:24:34 +0000
ROA not after: Tue 22 Jul 2025 18:29:34 +0000
asID: 21571
IP address blocks: 201.23.235.0/24 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ad:ab:90:f0:10:11:94:46:8b:94:ec:17:a0:76:9d:01:a1:e1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 23 18:24:34 2024 GMT
Not After : Jul 22 18:29:34 2025 GMT
Subject: CN=3A2480FBB9F44A98B1D13C030FF65F30117800EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:89:8a:a3:a1:be:76:62:a4:26:32:5f:8c:
83:41:b1:1d:68:b0:07:f9:7d:d0:e7:6f:75:10:4f:
db:78:9f:97:d4:a2:08:e4:11:32:f8:dc:ac:3b:77:
cb:4b:9d:d3:98:21:5d:34:43:6c:1a:ed:67:d0:fb:
f7:46:f1:83:1a:c2:20:2d:e0:65:93:0a:46:31:0c:
66:67:00:cb:16:05:1f:15:3a:7d:1b:e7:71:b0:7d:
1c:aa:00:3f:59:21:3b:73:d0:47:82:2f:9f:89:66:
61:a6:17:7e:c4:6d:ee:20:69:2e:93:6c:df:10:21:
4b:4a:bc:00:09:a3:12:6e:87:05:e1:1b:65:52:56:
52:a2:c0:73:08:ad:4e:fe:59:27:4a:10:2d:12:e5:
f9:5c:fa:78:bc:e0:84:c5:27:35:9f:cb:ed:e0:7a:
ce:2c:04:02:ad:0c:ba:87:c2:be:ac:14:51:0b:2b:
a1:9c:b3:40:20:bb:21:05:c3:eb:0a:aa:ba:4e:e0:
51:7b:ad:f3:ac:3b:ef:43:d8:b0:59:b0:3a:ff:59:
65:fd:4b:f8:1e:34:9e:0d:bf:6b:5a:8e:c9:65:8f:
45:80:2e:4e:c5:d7:de:cb:56:dc:f7:51:30:d1:ee:
23:e4:e7:1c:9f:a5:a6:97:d8:20:36:40:ad:7c:8a:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:80:FB:B9:F4:4A:98:B1:D1:3C:03:0F:F6:5F:30:11:78:00:EB
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233352e302f32342d3235203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.23.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:93:0d:c1:8a:77:ff:49:a8:87:51:c9:7f:b9:3a:64:7a:e9:
24:8d:da:1a:c4:8a:8f:82:e9:f5:be:93:09:92:4f:c1:31:a6:
ec:68:5e:24:e6:9e:31:a3:28:c4:8b:b5:28:d6:fc:4c:19:c6:
57:6a:b3:4b:bc:82:4b:2d:20:66:6c:92:b4:7e:83:9f:0a:e1:
e4:74:4c:e0:3f:10:43:c1:58:62:c2:19:70:89:fe:af:09:9f:
16:8e:70:9c:c5:0d:fe:35:c6:56:fe:76:83:d4:8e:c9:2c:d7:
1d:fa:65:10:71:b1:09:f2:4b:f2:80:8b:52:5a:8d:a7:ff:c4:
55:8d:1a:10:ae:7f:b1:35:79:62:ac:04:f2:6e:f9:f1:c4:5a:
8d:75:e8:96:30:90:68:13:54:a9:a3:cc:0e:d3:bb:e9:0c:a4:
1d:85:f4:e4:94:9a:ff:69:a2:27:33:69:22:0e:0e:24:c2:2f:
bc:60:65:12:84:76:d7:8f:35:a2:43:93:93:02:f5:f3:c7:7c:
a6:40:46:df:b6:09:c0:22:ae:f7:3f:5d:2a:ba:31:d2:3c:30:
aa:df:98:f0:0b:75:68:b0:6d:1d:ff:d5:49:ce:67:94:2c:fe:
24:8e:67:98:8a:15:e9:69:3b:7f:33:04:46:cb:0c:b1:79:9a:
06:57:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org