Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234312e302f32342d3332203d3e20323730383334.roa
File: 3230302e3232392e3234312e302f32342d3332203d3e20323730383334.roa (raw, json)
Hash identifier: Qo8wc1PIHIxpG5qAOPAsOoB9djmde4D2OvN4zCXBi9c=
Subject key identifier: DB:8D:20:03:FA:B1:D4:0B:AB:43:10:E8:80:01:1E:09:6D:02:AE:D6
Certificate issuer: /CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
Certificate serial: 6EBEC2BB6D5D19EC0F6A63C9E29949264EE969C6
Authority key identifier: 17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234312e302f32342d3332203d3e20323730383334.roa
Signing time: Tue 08 Oct 2024 15:14:31 +0000
ROA not before: Tue 08 Oct 2024 15:09:31 +0000
ROA not after: Tue 07 Oct 2025 15:14:31 +0000
asID: 270834
IP address blocks: 200.229.241.0/24 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:be:c2:bb:6d:5d:19:ec:0f:6a:63:c9:e2:99:49:26:4e:e9:69:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
Validity
Not Before: Oct 8 15:09:31 2024 GMT
Not After : Oct 7 15:14:31 2025 GMT
Subject: CN=DB8D2003FAB1D40BAB4310E880011E096D02AED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:4c:25:9f:7e:7f:7c:eb:c1:ad:d4:39:49:
c2:76:d1:1c:74:9a:bc:b3:ef:b7:ba:f4:76:13:4f:
5d:c3:0b:78:30:bf:81:a9:fa:ff:d2:4e:0f:bd:b8:
13:a3:86:b6:68:e5:3c:3f:7d:8d:34:25:8d:42:88:
32:38:7f:99:98:64:aa:77:a3:f4:ba:22:c7:51:31:
d9:3c:e6:8f:b0:90:c2:10:f9:41:eb:fb:00:3f:b8:
2e:9a:68:fe:73:a3:88:24:58:80:b6:ab:05:2a:3f:
c1:a5:98:f3:54:c9:49:a5:91:d4:6f:59:d3:6f:7d:
85:6c:ac:6e:f1:af:ad:ce:9a:ad:92:a3:eb:b0:c1:
24:24:33:89:d0:a9:fc:1d:34:08:e6:f8:f1:f1:e6:
46:18:43:50:5a:36:f0:1f:0f:60:34:cf:cb:bc:2f:
e2:01:68:5a:b2:9d:d7:e9:bc:74:bf:62:16:c5:80:
0a:e4:e1:91:e2:39:c9:bb:43:c3:ea:52:14:c6:2c:
ba:23:3a:45:3f:71:db:88:dd:6f:6f:25:0b:b5:ef:
e5:71:1f:4f:2b:2d:48:e2:46:97:8a:df:78:5b:14:
cd:aa:73:f1:23:ca:18:8d:73:70:39:d0:be:99:2c:
5a:ba:86:80:ce:37:98:fc:ba:85:b0:35:4b:f3:b0:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8D:20:03:FA:B1:D4:0B:AB:43:10:E8:80:01:1E:09:6D:02:AE:D6
X509v3 Authority Key Identifier:
keyid:17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/1714E24A15B85867FF793EB1A49B70A167B00FA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234312e302f32342d3332203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.241.0/24
Signature Algorithm: sha256WithRSAEncryption
00:53:26:27:58:b7:8a:65:5c:3b:14:24:d1:d4:24:0c:7c:a4:
58:67:37:1d:1f:bc:85:a5:35:ab:8d:ef:de:81:c6:8c:db:f7:
86:fe:e2:fd:1e:48:17:99:2e:07:0d:45:9c:c9:92:be:2d:47:
cb:41:7c:2f:63:53:de:5d:bc:0a:41:62:5c:e8:6e:c4:d8:87:
d4:0e:34:86:42:58:6f:fc:06:af:d5:9b:3d:f3:71:40:d7:ea:
aa:ea:ba:b2:e2:6e:c1:ad:30:ac:23:ca:4e:f4:4b:3c:6f:47:
26:68:25:75:69:38:d5:0e:f9:29:fd:ab:3e:a6:cd:92:e0:b2:
31:3e:76:86:99:5c:3f:e1:f2:55:fe:32:61:9c:0c:fd:bc:7c:
8f:dc:78:b0:a4:fc:34:4a:6e:a7:4c:fc:ac:85:03:6b:8f:2c:
1c:33:1b:66:98:a9:28:ff:af:8d:ec:a6:b0:9c:b7:4c:31:89:
12:6c:93:37:87:d7:f5:77:29:33:a7:96:e2:65:a1:de:f0:da:
06:52:69:73:e3:40:da:dd:d7:84:fc:49:b2:6b:71:23:65:b8:
02:42:7e:b5:0b:9e:63:28:ec:50:23:0b:af:5c:d9:e0:8e:ff:
1e:9e:95:0a:8a:d3:03:9f:84:a3:1e:d0:0e:23:6a:8d:45:47:
0f:d1:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 17:50:18 2024 by rpki-client on console-ams.rpki-client.org