Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234332e302f32342d3234203d3e20323730383334.roa
File: 3230302e3232392e3234332e302f32342d3234203d3e20323730383334.roa (raw, json)
Hash identifier: fQHc4KvT2x5wEDiWb2rAMboRGs7abCLa6vUgRQQysB0=
Subject key identifier: EC:D7:DD:5B:8D:76:08:8D:88:BA:C2:A2:C0:4B:97:92:2C:BF:F9:9B
Certificate issuer: /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial: 7ED59AA4E0D17018A61190A5E9904C242BCDC406
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234332e302f32342d3234203d3e20323730383334.roa
Signing time: Thu 04 Apr 2024 12:47:30 +0000
ROA not before: Thu 04 Apr 2024 12:42:30 +0000
ROA not after: Thu 03 Apr 2025 12:47:30 +0000
asID: 270834
IP address blocks: 200.229.243.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d5:9a:a4:e0:d1:70:18:a6:11:90:a5:e9:90:4c:24:2b:cd:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Validity
Not Before: Apr 4 12:42:30 2024 GMT
Not After : Apr 3 12:47:30 2025 GMT
Subject: CN=ECD7DD5B8D76088D88BAC2A2C04B97922CBFF99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:4c:21:31:91:76:62:be:e6:f5:4c:37:be:
74:23:98:23:26:4e:6a:29:77:70:c0:0a:af:1a:c6:
10:75:41:6d:74:81:a7:13:66:ce:c3:3e:40:74:a3:
05:73:aa:e4:9a:4e:d3:db:73:86:ce:f1:54:9c:92:
2c:b5:16:a5:d6:95:cd:75:58:e6:1f:5a:66:a6:5f:
72:a0:65:e8:62:3d:7a:63:82:49:65:b2:26:37:34:
0c:1a:66:08:64:6a:d2:a2:eb:93:69:00:a0:82:11:
b0:cd:18:ac:d8:5b:82:9d:9c:26:3f:40:0b:43:9c:
b4:0c:06:c8:bd:ad:c2:4d:3a:74:45:1a:bb:7e:e4:
29:f5:6c:5f:1a:71:a2:fb:dc:16:4f:7f:e4:45:f0:
ad:67:f7:35:68:69:7c:5d:af:cb:17:5f:c1:2e:01:
98:fe:c8:6f:d1:c5:3f:d6:17:97:99:b5:cc:d1:d5:
c2:03:33:8a:1d:63:ef:e9:32:d1:75:ef:43:bb:98:
27:90:85:04:34:8a:3e:2f:42:f6:f0:4f:a4:8d:e0:
c7:50:a4:98:24:ec:12:47:aa:a6:31:02:31:41:db:
25:17:a1:4e:e2:d3:3c:48:d8:c6:9e:94:1a:d4:a8:
81:ee:41:5b:4b:7f:3a:f3:81:02:cb:4f:5b:72:33:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:DD:5B:8D:76:08:8D:88:BA:C2:A2:C0:4B:97:92:2C:BF:F9:9B
X509v3 Authority Key Identifier:
keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234332e302f32342d3234203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0d:e6:33:82:11:62:cf:76:56:cc:c2:dd:2b:38:d4:a9:1e:
bf:01:73:f8:90:3e:00:f7:1c:2e:7a:6d:56:e4:6d:cd:8a:02:
8a:12:4b:b7:ac:30:7c:ab:3f:ac:4a:93:44:1d:5c:e9:a3:27:
f0:9b:bf:f4:09:9b:00:d8:5e:e3:31:0b:4a:aa:f3:c6:9c:df:
13:b9:87:a7:ce:df:73:d8:01:d3:9e:b4:40:93:bd:27:b0:71:
1d:f8:e5:ec:27:2d:d9:f4:36:b2:3f:44:ce:2c:a6:0a:17:0d:
ce:f9:8f:cf:e3:c4:c0:3c:89:61:8f:62:9b:8d:bd:e5:6c:72:
a2:9f:b2:06:83:81:a0:89:43:c3:a3:a8:58:8f:87:9f:33:09:
61:a8:60:e7:fb:11:f8:d9:05:dd:3d:2d:ed:f4:96:0e:e7:0f:
c9:a4:9e:bc:28:bc:c1:e5:2b:bf:98:aa:9d:dd:43:ed:ad:43:
43:3b:5d:0e:32:4e:31:10:d0:06:6d:18:9f:eb:9d:81:96:93:
9d:98:46:04:4c:f2:01:90:d8:2b:45:9a:ae:99:3d:19:6d:21:
ca:fc:6b:3c:3f:7d:26:70:05:51:da:11:f2:a0:a0:4a:2d:10:
c6:42:4d:ac:77:09:02:2b:77:bf:f4:75:9d:08:05:41:cd:6b:
ff:39:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:26 2024 by rpki-client on console-fra.rpki-client.org