Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32342d3332203d3e20323730383334.roa
File: 3230302e3232392e3234302e302f32342d3332203d3e20323730383334.roa (raw, json)
Hash identifier: NOTHvP+yD7C+1bqJHENS9dLCEPnuEfA6rcwIBnAE1Uc=
Subject key identifier: 0D:5F:84:1E:A9:34:CD:F0:44:47:4F:51:22:09:4C:2D:21:0A:73:25
Certificate issuer: /CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
Certificate serial: 6FB7B35B9A60F10035296469E130839C00F41A90
Authority key identifier: 17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32342d3332203d3e20323730383334.roa
Signing time: Tue 08 Oct 2024 15:14:15 +0000
ROA not before: Tue 08 Oct 2024 15:09:15 +0000
ROA not after: Tue 07 Oct 2025 15:14:15 +0000
asID: 270834
IP address blocks: 200.229.240.0/24 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b7:b3:5b:9a:60:f1:00:35:29:64:69:e1:30:83:9c:00:f4:1a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
Validity
Not Before: Oct 8 15:09:15 2024 GMT
Not After : Oct 7 15:14:15 2025 GMT
Subject: CN=0D5F841EA934CDF044474F5122094C2D210A7325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b0:b7:5d:c0:04:9a:04:1c:0b:d2:f3:fc:7a:
19:ea:bd:ef:a5:6d:a7:b9:1c:94:2d:62:4a:19:9c:
e3:18:e6:a8:8a:1d:a8:53:24:e3:c1:1f:4e:aa:2a:
72:a6:f3:03:ed:0b:9f:e5:0f:ff:cf:b5:97:7e:9b:
04:5d:fb:12:de:09:14:a0:35:22:6d:d4:23:57:07:
d6:0e:a1:e5:c2:a4:90:d8:06:46:25:31:8b:ed:96:
26:24:98:14:6e:12:4b:40:a8:58:73:33:34:3b:6e:
90:08:52:e2:20:5f:79:c4:90:cc:62:16:0c:b3:9e:
df:08:12:e0:e4:23:75:4c:26:d8:a4:27:73:eb:f3:
1b:8a:70:b6:03:54:54:48:43:e5:96:08:0a:d8:e1:
89:da:da:85:77:51:12:94:2d:f0:bf:b9:d5:bf:9d:
a7:6d:16:dd:05:b3:ae:65:67:47:c5:c1:18:ef:0a:
95:3a:c6:e6:61:54:20:a1:2f:50:72:1c:09:29:a7:
a2:da:a5:07:6d:4e:58:8c:cc:f9:97:a6:22:02:23:
d8:97:4f:42:d3:81:3a:fc:a7:67:75:52:88:5b:5d:
94:0f:0c:d8:07:10:88:6c:87:f3:36:ff:ba:7a:2d:
05:0b:12:71:ae:3e:38:6c:63:fb:28:ff:a9:c8:fe:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:84:1E:A9:34:CD:F0:44:47:4F:51:22:09:4C:2D:21:0A:73:25
X509v3 Authority Key Identifier:
keyid:17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/1714E24A15B85867FF793EB1A49B70A167B00FA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32342d3332203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fb:7b:4f:d4:86:07:b4:4b:fc:a0:85:31:9b:be:e0:ee:22:
66:38:e0:1f:ca:c2:8a:79:dd:80:cb:5a:74:46:0c:ee:33:18:
f0:8a:72:f4:ef:f9:48:9b:3c:03:f0:aa:ab:ea:bf:ca:df:f3:
83:55:9b:95:fc:c0:a8:5d:cb:81:04:b3:1d:3c:b5:37:48:54:
f8:e5:dc:9b:e2:04:79:aa:36:08:ea:1f:d5:04:c2:ef:39:dd:
c7:e0:6f:55:f5:86:f3:a2:dc:f6:45:5f:ad:37:57:bd:b0:d6:
02:67:23:1f:c7:e7:50:13:1f:1d:d4:ef:7a:ed:be:4c:d6:c7:
af:4b:c9:3b:23:ba:82:fd:f8:6a:ee:21:65:4c:1b:4d:30:78:
0a:64:79:2c:28:52:2c:84:4b:a6:ae:7f:5e:9d:ea:cb:7f:fe:
a7:9c:e9:6f:c5:c9:e6:a6:08:48:41:55:1d:73:1c:73:5d:2a:
2a:cc:d3:4f:a2:c4:dc:71:70:a4:91:9e:20:47:e8:93:b8:8e:
b8:1c:aa:ed:07:4c:c0:51:51:a6:e8:91:5c:6c:13:08:97:52:
f0:c4:af:6d:3a:ee:08:cd:a5:06:ef:a4:79:98:cb:48:be:e3:
2b:ca:b4:7b:56:14:01:fc:c7:22:57:46:74:24:31:b3:c9:d5:
cf:e4:ea:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 17:50:18 2024 by rpki-client on console-ams.rpki-client.org