Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233362e302f32342d3235203d3e203231353731.roa
File: 3230312e32332e3233362e302f32342d3235203d3e203231353731.roa (raw, json)
Hash identifier: gkf8O3EFXcbXNieTmAu9kuxOv2y8JQZlXHxMEe/EeWc=
Subject key identifier: CE:32:E3:DD:3A:30:6E:48:33:44:D6:95:FE:D0:FF:C9:EB:09:66:1C
Certificate issuer: /CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Certificate serial: 230170F16460E456B303FD27E3710A7694C6DEF7
Authority key identifier: 88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233362e302f32342d3235203d3e203231353731.roa
Signing time: Tue 23 Jul 2024 17:51:47 +0000
ROA not before: Tue 23 Jul 2024 17:46:47 +0000
ROA not after: Tue 22 Jul 2025 17:51:47 +0000
asID: 21571
IP address blocks: 201.23.236.0/24 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:01:70:f1:64:60:e4:56:b3:03:fd:27:e3:71:0a:76:94:c6:de:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3
Validity
Not Before: Jul 23 17:46:47 2024 GMT
Not After : Jul 22 17:51:47 2025 GMT
Subject: CN=CE32E3DD3A306E483344D695FED0FFC9EB09661C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:1f:55:a1:5e:23:be:52:1d:da:0d:4d:59:
28:f8:a7:01:42:3c:9b:3c:48:bb:a7:79:f3:ee:b0:
92:dc:27:95:54:70:31:ae:73:c8:ba:8b:76:19:76:
1d:b2:53:9e:66:a8:d0:2f:12:17:da:2a:84:17:6e:
b1:50:f0:0f:c3:70:11:e3:6d:29:ea:0b:b6:9d:3d:
04:5e:ed:a6:d2:40:eb:e7:e2:cf:63:9e:06:44:eb:
14:e0:bc:18:b4:23:f0:d4:08:2d:ac:62:53:03:ed:
99:01:49:a3:14:92:a5:43:4c:10:e8:bc:44:c7:dd:
6b:f2:59:99:52:c2:43:e3:65:df:95:cf:dc:c7:a4:
f9:07:7d:68:dc:f1:b7:53:84:46:b7:22:47:57:1b:
40:51:6b:2b:97:70:ba:b4:78:f1:ab:6f:58:ae:03:
62:4b:4a:46:a4:d0:ee:40:23:53:c3:d3:f0:b8:78:
0e:53:28:a6:bf:d5:ff:e4:5f:db:92:58:b4:fe:49:
a8:7f:ee:cf:e5:b3:c3:e2:b2:24:d1:d5:07:2e:af:
5b:90:16:34:ea:46:4a:be:1e:0e:6e:f0:b2:e8:7d:
96:a2:6f:06:64:fb:0f:ed:bf:08:d2:ea:c6:73:57:
f0:19:17:94:c6:f7:ba:11:eb:29:2e:e7:1a:db:87:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:E3:DD:3A:30:6E:48:33:44:D6:95:FE:D0:FF:C9:EB:09:66:1C
X509v3 Authority Key Identifier:
keyid:88:2D:0B:99:B0:4E:3B:A0:1C:B6:CC:FB:25:FD:6E:B5:39:A2:8D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882D0B99B04E3BA01CB6CCFB25FD6EB539A28DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3233362e302f32342d3235203d3e203231353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.23.236.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bd:a3:5d:03:e8:18:3d:bd:63:49:4b:c4:a5:8e:c8:4a:4c:
27:f1:f2:61:81:51:29:ef:20:e1:8a:46:75:57:59:f8:11:4e:
5c:8b:77:c7:e9:3e:8a:9f:bd:e0:0e:25:54:27:a2:2b:d3:86:
d9:dd:e2:14:7b:a0:94:bb:29:82:ce:ee:10:df:02:3f:de:3e:
97:8b:53:65:9f:af:b0:c1:5a:cf:d1:af:51:03:4e:35:fa:4a:
88:6d:94:84:f2:97:6a:cd:0a:ae:54:65:76:22:f8:a5:5c:8d:
50:80:21:55:7f:4a:98:29:0b:9c:37:99:fb:59:8e:41:3a:7d:
c4:c5:a6:46:b9:bc:89:2b:6b:12:3a:ff:ef:1c:20:15:e4:bb:
69:d8:ba:00:5f:be:d6:21:6d:84:1e:3b:6f:ce:a9:56:e0:cd:
10:29:08:2a:ec:fe:a9:fe:a4:49:de:59:b4:7b:2b:aa:d6:f2:
d4:03:55:5b:6a:e2:db:5d:a6:99:64:13:65:d1:33:cb:2b:f4:
5d:2a:f7:cc:21:93:75:21:89:cb:c5:94:d2:8a:3e:2d:1b:a1:
51:94:bb:a7:4a:ee:1f:c4:c8:2a:31:9d:69:43:b8:1f:d7:5c:
95:78:4f:f8:3b:87:7f:2b:b2:0f:f0:77:b2:10:15:15:51:d9:
37:db:5f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org