Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa
File: 3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa (raw, json)
Hash identifier: nTRdyVGzad1XPBcKBQdQkmuDwPv2MXykpPy1cBz6KwE=
Subject key identifier: 12:44:15:67:11:80:24:72:4E:30:C1:69:BC:33:9F:B1:9E:BD:B2:DB
Certificate issuer: /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial: 149B5502556CE81F7E74CE9BC279C9CDA2A3A0A5
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa
Signing time: Thu 04 Apr 2024 12:47:30 +0000
ROA not before: Thu 04 Apr 2024 12:42:30 +0000
ROA not after: Thu 03 Apr 2025 12:47:30 +0000
asID: 270834
IP address blocks: 200.229.240.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9b:55:02:55:6c:e8:1f:7e:74:ce:9b:c2:79:c9:cd:a2:a3:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Validity
Not Before: Apr 4 12:42:30 2024 GMT
Not After : Apr 3 12:47:30 2025 GMT
Subject: CN=12441567118024724E30C169BC339FB19EBDB2DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:e4:c5:a3:b4:a3:3d:78:f5:3d:ab:a3:70:
f9:67:84:d3:d2:13:34:95:80:2c:a3:a3:05:27:b7:
e4:0d:f0:54:77:78:1d:43:f0:13:ab:06:f1:4d:a0:
4c:eb:64:85:6c:15:1c:0c:74:62:b8:06:90:2c:23:
37:b3:ef:60:44:76:c7:f2:52:44:22:6c:65:8e:e7:
00:04:b7:bd:ce:45:33:78:09:0f:04:a7:a9:28:99:
68:92:6e:d0:fc:3e:4f:55:7c:45:81:cd:6b:b2:22:
10:fc:34:b9:5f:5b:cc:db:7c:0f:ec:79:43:fc:69:
de:92:f0:a4:4c:c1:aa:67:3f:0e:e2:39:6d:9d:b8:
50:25:a8:63:b3:8d:0c:3b:09:50:07:f6:5a:53:f2:
eb:36:6f:dc:dd:d2:e8:62:73:5b:8f:f5:39:60:23:
07:62:bb:7c:c6:d5:79:c3:45:01:92:ec:99:0a:d2:
e7:02:3c:c8:54:ab:67:e5:85:58:04:8d:34:ae:01:
f1:06:f3:38:ba:9c:f9:de:65:40:b0:d6:9a:e9:f8:
91:2d:3b:12:e3:11:e2:8c:d1:e0:a4:df:1b:fe:20:
c9:00:95:0f:ad:de:1d:eb:fa:f9:a3:35:a6:ff:42:
5c:c2:d2:00:52:ad:15:1c:50:80:51:fa:dc:53:63:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:44:15:67:11:80:24:72:4E:30:C1:69:BC:33:9F:B1:9E:BD:B2:DB
X509v3 Authority Key Identifier:
keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9e:76:c1:a0:80:14:70:1d:0b:dd:1e:1d:df:c7:0f:10:d8:
e5:38:d5:4e:57:a2:92:a8:6e:22:ab:ef:63:fb:03:2b:26:af:
cc:76:13:ee:7e:06:22:dd:13:1a:d4:d2:e6:18:cc:60:f2:07:
11:62:0c:3f:fe:8a:eb:84:3c:9a:8c:b1:99:93:a7:a0:55:af:
ae:a6:6a:f3:c4:52:2d:e9:53:52:0b:1f:7b:82:f9:9b:c3:90:
97:45:6a:11:c0:0b:a9:42:fb:db:b3:69:9c:84:8e:50:f7:f6:
9a:84:75:9f:1c:c2:08:be:4f:e9:99:14:e6:bc:e3:0d:c6:c1:
f8:85:85:7d:36:6f:75:f5:cd:91:68:42:d7:37:11:90:70:74:
1e:cd:37:4d:02:f7:e5:46:38:c1:22:f4:8a:11:ec:93:8d:81:
e1:c9:cd:4a:a9:78:5f:fd:5d:64:50:57:33:08:32:02:94:d8:
7c:2b:a7:3b:d0:40:53:72:a4:7d:bd:f9:16:73:73:f7:70:01:
d9:1f:65:29:8d:9b:93:06:05:a0:fe:0f:88:9b:68:47:30:57:
c3:06:10:a0:26:40:32:15:e1:d1:ac:dc:9f:e8:21:0d:0a:1e:
f3:d4:cb:c0:cb:56:27:b8:53:eb:64:88:9d:c2:8f:81:3b:be:
47:0d:f5:5c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFJtVAlVs6B9+dM6bwnnJzaKjoKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0REQ0EzRkY4RkIyNDJEMEMyQzIxRUYxNDNCNDc0RDFF
MDNGN0FFMjAeFw0yNDA0MDQxMjQyMzBaFw0yNTA0MDMxMjQ3MzBaMDMxMTAvBgNV
BAMTKDEyNDQxNTY3MTE4MDI0NzI0RTMwQzE2OUJDMzM5RkIxOUVCREIyREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHuTFo7SjPXj1PaujcPlnhNPS
EzSVgCyjowUnt+QN8FR3eB1D8BOrBvFNoEzrZIVsFRwMdGK4BpAsIzez72BEdsfy
UkQibGWO5wAEt73ORTN4CQ8Ep6komWiSbtD8Pk9VfEWBzWuyIhD8NLlfW8zbfA/s
eUP8ad6S8KRMwapnPw7iOW2duFAlqGOzjQw7CVAH9lpT8us2b9zd0uhic1uP9Tlg
Iwdiu3zG1XnDRQGS7JkK0ucCPMhUq2flhVgEjTSuAfEG8zi6nPneZUCw1prp+JEt
OxLjEeKM0eCk3xv+IMkAlQ+t3h3r+vmjNab/QlzC0gBSrRUcUIBR+txTY1NhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEkQVZxGAJHJOMMFpvDOfsZ69stswHwYDVR0j
BBgwFoAUPdyj/4+yQtDCwh7xQ7R00eA/euIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRxWndmdEdOTmRFb3ZrS0szN3FLMTVobVpTeHYyaWI2eTR0OEhobnBz
NWMvMS8zRERDQTNGRjhGQjI0MkQwQzJDMjFFRjE0M0I0NzREMUUwM0Y3QUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNERENBM0ZGOEZCMjQyRDBD
MkMyMUVGMTQzQjQ3NEQxRTAzRjdBRTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pEcVp3ZnRHTk5kRW92a0tLMzdxSzE1aG1aU3h2MmliNnk0dDhIaG5wczVjLzEv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcjl8DANBgkqhkiG9w0BAQsFAAOCAQEAcJ52
waCAFHAdC90eHd/HDxDY5TjVTleikqhuIqvvY/sDKyavzHYT7n4GIt0TGtTS5hjM
YPIHEWIMP/6K64Q8moyxmZOnoFWvrqZq88RSLelTUgsfe4L5m8OQl0VqEcALqUL7
27NpnISOUPf2moR1nxzCCL5P6ZkU5rzjDcbB+IWFfTZvdfXNkWhC1zcRkHB0Hs03
TQL35UY4wSL0ihHsk42B4cnNSql4X/1dZFBXMwgyApTYfCunO9BAU3Kkfb35FnNz
93AB2R9lKY2bkwYFoP4PiJtoRzBXwwYQoCZAMhXh0azcn+ghDQoe89TLwMtWJ7hT
62SIncKPgTu+Rw31XA==
-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:26 2024 by rpki-client on console-fra.rpki-client.org