Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234302e302f32342d3234203d3e20323730383334.roa
File: 3230302e3232392e3234302e302f32342d3234203d3e20323730383334.roa (raw, json)
Hash identifier: Zv6vwbduSSUzpmOZQ2/2HLpYG8EeYcYG9I2yMVcmJSw=
Subject key identifier: 5D:A5:FE:C2:8D:C8:C3:82:8A:EF:8D:48:D5:75:56:6A:29:69:CC:D4
Certificate issuer: /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial: 6510AE243A5A42EFEF028D34EC4CF6F48DF1AB0B
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234302e302f32342d3234203d3e20323730383334.roa
Signing time: Thu 29 Aug 2024 14:56:22 +0000
ROA not before: Thu 29 Aug 2024 14:51:22 +0000
ROA not after: Thu 28 Aug 2025 14:56:22 +0000
asID: 270834
IP address blocks: 200.229.240.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:10:ae:24:3a:5a:42:ef:ef:02:8d:34:ec:4c:f6:f4:8d:f1:ab:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Validity
Not Before: Aug 29 14:51:22 2024 GMT
Not After : Aug 28 14:56:22 2025 GMT
Subject: CN=5DA5FEC28DC8C3828AEF8D48D575566A2969CCD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:08:79:40:38:12:d0:85:75:ad:40:3a:27:
32:90:f1:3f:9f:00:d5:15:3b:ca:bb:a4:43:4e:d5:
91:21:27:30:9e:9b:62:29:b7:bf:33:d6:1a:3f:ee:
91:a3:f7:18:a7:9a:e3:6f:1b:c1:a9:9e:09:55:d0:
ab:fc:ef:5f:60:94:ce:49:77:f3:f0:8c:0f:9b:2b:
3d:ca:57:8c:4c:c2:30:80:22:d9:c7:0c:48:ee:ea:
3f:33:d5:82:c1:f9:1e:f1:a0:c4:9d:3e:93:ec:e9:
bc:7c:de:9f:e5:59:ae:ae:1d:e2:8a:40:f4:91:fe:
0e:ee:99:84:76:43:03:4d:4e:53:56:73:55:9b:6a:
7f:0c:65:5b:03:69:b1:32:54:5d:cf:d3:b8:d4:16:
ee:29:c4:6d:e1:bc:3d:4d:48:97:32:7c:12:f8:60:
04:00:dd:a9:09:9f:18:58:21:60:14:e9:da:53:b9:
ca:42:a1:a9:3c:96:d0:71:ee:eb:09:f7:40:ed:b5:
6f:c3:ce:62:ff:cc:bd:9d:a1:c3:0b:5b:35:0b:f3:
9c:35:30:c5:f4:b0:72:6d:fa:1e:27:38:3d:88:4c:
3c:1d:12:ab:4b:86:03:8e:39:59:27:bc:88:11:f3:
c5:ee:be:cf:7c:81:83:e5:ae:a6:c1:1c:05:6c:b6:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A5:FE:C2:8D:C8:C3:82:8A:EF:8D:48:D5:75:56:6A:29:69:CC:D4
X509v3 Authority Key Identifier:
keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234302e302f32342d3234203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d9:57:c5:d6:19:64:97:22:fa:e9:d4:d9:e5:89:ba:31:8b:
97:f2:7b:da:f0:4d:ec:ca:ab:11:c2:26:f9:06:ad:74:88:a4:
e1:2c:14:c8:25:b5:f9:36:ab:a6:92:e2:d6:44:dc:da:81:b6:
90:e7:56:f9:43:9b:75:8e:52:09:85:c6:87:38:61:76:ab:4d:
aa:07:68:f7:d7:e5:eb:e0:e6:54:11:d1:50:84:d1:b3:57:a8:
63:94:56:c2:8c:3a:27:b1:b0:01:fa:6d:54:ca:29:42:d9:96:
93:7f:05:e7:d4:a7:00:b5:4c:39:2c:8c:d3:81:63:e5:5e:d1:
4e:11:37:0c:48:b0:1e:00:ea:59:f6:56:63:42:69:40:0c:86:
ba:df:93:01:e3:01:cc:21:9c:28:3a:1a:d2:3f:ee:70:d5:b7:
98:73:63:9e:6d:df:cd:d9:a2:72:09:ff:32:a8:4e:dd:7a:88:
31:c3:a3:87:8c:0e:2f:36:5f:c6:a3:3f:df:e7:f0:06:6b:7f:
dd:72:65:7e:d7:1b:c1:60:94:a6:c8:e2:49:78:0e:08:52:7c:
99:b7:bf:76:be:a1:e9:4c:0b:e7:04:28:83:df:c6:e5:76:64:
0a:bf:40:a9:ca:d0:76:da:6b:0b:1b:23:7b:d9:a6:ad:16:1f:
ff:10:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:07:15 2024 by rpki-client on console-ams.rpki-client.org