Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234322e302f32332d3233203d3e20323730383334.roa
File: 3230302e3232392e3234322e302f32332d3233203d3e20323730383334.roa (raw, json)
Hash identifier: RckHrsbSeFmA9vL2NaOu1GhKgxFhtE15k0s5na7O8Vk=
Subject key identifier: 94:0F:5B:F9:36:EF:3D:4D:14:39:8C:0A:3D:94:E9:80:1E:9F:81:2C
Certificate issuer: /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial: 79E41F3CF06ADA5C0D646EFB5FF91735460A17B7
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234322e302f32332d3233203d3e20323730383334.roa
Signing time: Thu 29 Aug 2024 15:04:17 +0000
ROA not before: Thu 29 Aug 2024 14:59:17 +0000
ROA not after: Thu 28 Aug 2025 15:04:17 +0000
asID: 270834
IP address blocks: 200.229.242.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e4:1f:3c:f0:6a:da:5c:0d:64:6e:fb:5f:f9:17:35:46:0a:17:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Validity
Not Before: Aug 29 14:59:17 2024 GMT
Not After : Aug 28 15:04:17 2025 GMT
Subject: CN=940F5BF936EF3D4D14398C0A3D94E9801E9F812C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:43:b5:a6:4b:18:f9:bf:10:29:f5:63:8f:
91:dd:b8:5a:71:4a:4b:84:0c:50:e7:d4:21:d2:e5:
ba:f5:70:d5:4b:42:aa:52:b0:de:fd:e2:cf:df:cd:
51:a5:ae:89:ec:ca:0b:26:92:a5:f6:0a:d9:8f:07:
5b:af:32:79:6f:16:f4:b2:f9:25:a9:d4:64:e9:b5:
af:f3:3d:ca:cf:93:30:8a:4b:c7:bc:f0:a1:cd:74:
28:34:80:6e:d8:08:62:d5:36:52:7b:4d:b3:fb:bd:
0d:63:69:e5:e1:7b:f2:a4:b4:19:28:cd:cb:b9:a0:
5f:db:aa:6a:30:c9:fb:70:41:36:dc:13:a4:d4:81:
af:c1:79:bb:ff:63:3f:c6:5c:89:05:6f:d1:4d:7b:
b3:07:32:fe:83:ec:23:b2:df:5f:6a:e0:06:bb:66:
28:8b:0d:43:f3:f8:7e:20:03:c0:ba:3d:27:cf:41:
3f:b8:aa:ab:e3:0e:07:07:f4:58:e3:5a:e0:ee:a2:
45:09:9b:ec:cc:f5:0b:20:60:9b:8b:1c:5d:3f:60:
4d:9f:c8:5e:fa:41:a0:85:5e:85:01:e4:30:b7:c4:
4b:66:54:ba:62:1e:e8:7f:19:b6:4d:aa:c8:df:13:
ac:75:93:ea:91:c9:76:1a:2b:e9:a1:40:47:ac:0d:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:5B:F9:36:EF:3D:4D:14:39:8C:0A:3D:94:E9:80:1E:9F:81:2C
X509v3 Authority Key Identifier:
keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234322e302f32332d3233203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:25:50:b1:72:e5:ae:0d:a2:0a:8b:94:b2:8a:f0:95:a5:2c:
c6:da:ea:72:8b:92:cb:17:1f:0e:c0:ab:ee:10:9e:c0:98:28:
76:db:0d:14:4b:93:db:1e:9a:ce:8c:f0:9f:88:8f:49:2c:ee:
c1:fe:3c:17:70:1d:f6:be:3e:87:82:d0:1b:2b:b5:c9:c1:cd:
1b:03:d6:a6:97:eb:9b:41:14:5e:6f:87:d4:5f:7f:d1:9e:4c:
ab:5c:a7:ae:5e:af:36:2d:8c:e0:8a:72:21:10:b7:cc:48:fc:
8c:16:82:29:fc:57:6b:d0:e6:8b:f2:54:bb:2b:77:fb:80:38:
57:6c:17:12:8f:52:ea:d7:14:de:d2:2b:d6:df:de:f9:0d:3b:
21:17:b3:e8:17:9b:fe:95:43:c2:a6:63:99:1e:d4:46:c1:8e:
38:f0:99:42:2d:38:d0:3d:a3:02:e2:db:aa:10:c2:14:f3:a4:
ad:c4:90:98:eb:ac:a1:86:ea:46:36:d5:b2:a1:6e:58:0a:60:
37:ff:63:e3:af:5a:c8:e2:70:a0:e8:91:dc:08:4d:ec:16:1c:
ab:a0:b1:a9:fa:70:c5:47:48:9e:07:5c:d9:87:96:f1:6d:ae:
3f:07:2d:b4:85:50:2f:9c:fb:c2:42:ba:2d:c9:9b:ba:b7:28:
e4:ca:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:26 2024 by rpki-client on console-fra.rpki-client.org