Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
File: 3230302e31382e32342e302f32312d3332203d3e2031393136.roa (raw, json)
Hash identifier: VHovUI79Bz4NYoyGTG6oSnGpQA1RZ/GjgKUG/a6Ktvo=
Subject key identifier: BE:9D:58:E1:53:8E:3B:D7:95:B3:5B:86:AE:2E:9E:11:75:BA:4E:03
Certificate issuer: /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial: 4E8CD5C9FE17761D70B23E04993E9CEE4664D695
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
Signing time: Thu 08 Aug 2024 03:09:01 +0000
ROA not before: Thu 08 Aug 2024 03:04:01 +0000
ROA not after: Thu 07 Aug 2025 03:09:01 +0000
asID: 1916
IP address blocks: 200.18.24.0/21 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8c:d5:c9:fe:17:76:1d:70:b2:3e:04:99:3e:9c:ee:46:64:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Validity
Not Before: Aug 8 03:04:01 2024 GMT
Not After : Aug 7 03:09:01 2025 GMT
Subject: CN=BE9D58E1538E3BD795B35B86AE2E9E1175BA4E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:06:ab:9a:5e:21:c4:ab:a0:72:48:c3:a7:
fc:18:59:9d:e8:2f:e7:67:a6:21:a9:b1:34:61:a3:
40:d1:46:98:65:9f:a7:52:f1:15:55:43:48:b5:9d:
8f:4f:38:dd:05:0e:6d:cd:86:52:ca:13:58:8d:e5:
46:e6:fe:da:96:d6:61:79:c7:33:72:02:fe:2c:de:
7d:43:22:d6:a3:b9:aa:a2:b7:43:a0:99:38:36:c0:
9f:37:a1:89:ff:bb:3c:f6:6b:d3:f6:cc:35:3b:a8:
11:7c:80:8b:a4:fd:ef:02:0e:ba:a6:1e:02:b1:de:
2a:f2:e8:61:7d:0f:5a:31:a5:44:0b:ab:bf:36:09:
6d:34:b7:fc:ae:61:e3:87:e3:48:9d:be:66:bf:ca:
44:5c:b9:ae:01:a5:e0:b3:5b:44:d6:3e:97:33:31:
ef:28:46:44:b6:1f:be:5f:97:bc:ca:6b:f3:6e:6a:
f1:88:96:63:f8:41:de:d9:c3:c4:43:25:bf:87:bc:
0b:9a:0c:8f:32:65:86:4b:98:17:5f:6b:74:1f:b1:
7a:59:b8:14:10:b4:71:d4:f6:7b:87:2f:f4:6d:b0:
aa:4b:73:8a:fe:a7:52:66:42:4e:e5:a7:7a:57:5d:
2a:14:75:82:c3:fb:b5:56:93:54:78:c3:64:90:78:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:58:E1:53:8E:3B:D7:95:B3:5B:86:AE:2E:9E:11:75:BA:4E:03
X509v3 Authority Key Identifier:
keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.18.24.0/21
Signature Algorithm: sha256WithRSAEncryption
97:f6:ff:60:7e:23:ac:55:4f:73:ef:6c:0b:92:ee:21:32:a2:
b1:91:0b:e2:e9:54:ca:41:5a:d8:94:90:15:b8:3b:af:ab:c1:
70:21:2c:ef:e7:90:76:43:e6:1f:db:c1:5c:06:f4:62:c0:ad:
a5:d1:3e:6c:8c:bf:fb:0a:dd:49:7b:fe:d9:3c:9e:10:cd:32:
7e:ff:82:f3:bf:5a:37:c3:87:64:8f:13:6a:1e:6c:2a:5e:c6:
8f:cb:ac:de:ab:2a:0e:8e:cc:d4:00:3d:16:2f:2a:2d:dd:05:
6f:db:c5:bc:66:64:83:14:7a:2f:2f:be:33:56:b0:d4:cc:af:
87:dd:ec:dc:04:97:12:82:e3:a6:ed:34:83:fd:db:8a:a8:f6:
80:6b:5a:c4:3f:60:33:6c:17:de:9b:39:34:b9:48:1f:2e:5d:
12:d7:e4:b5:98:db:66:d0:22:bc:5c:70:9f:03:45:70:98:b1:
55:da:09:84:d5:ff:50:73:6d:ad:b7:e3:f0:cc:88:a3:44:64:
66:63:32:1d:0c:35:e6:c4:7f:3d:ba:3a:f5:68:23:a9:6a:aa:
50:15:a6:74:d1:4d:e4:5e:28:e2:aa:c0:4a:b8:ce:5c:77:aa:
f2:33:7c:9f:d3:c1:d5:d3:b3:db:50:a8:63:61:aa:38:d9:d3:
52:1b:ae:c1
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTozVyf4Xdh1wsj4EmT6c7kZk1pUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDFaFw0yNTA4MDcwMzA5MDFaMDMxMTAvBgNV
BAMTKEJFOUQ1OEUxNTM4RTNCRDc5NUIzNUI4NkFFMkU5RTExNzVCQTRFMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89Qarml4hxKugckjDp/wYWZ3o
L+dnpiGpsTRho0DRRphln6dS8RVVQ0i1nY9PON0FDm3NhlLKE1iN5Ubm/tqW1mF5
xzNyAv4s3n1DItajuaqit0OgmTg2wJ83oYn/uzz2a9P2zDU7qBF8gIuk/e8CDrqm
HgKx3iry6GF9D1oxpUQLq782CW00t/yuYeOH40idvma/ykRcua4BpeCzW0TWPpcz
Me8oRkS2H75fl7zKa/NuavGIlmP4Qd7Zw8RDJb+HvAuaDI8yZYZLmBdfa3QfsXpZ
uBQQtHHU9nuHL/RtsKpLc4r+p1JmQk7lp3pXXSoUdYLD+7VWk1R4w2SQeNpXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUvp1Y4VOOO9eVs1uGri6eEXW6TgMwHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzIzMDMwMmUzMTM4MmUzMjM0MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAPIEhgwDQYJKoZIhvcNAQELBQADggEBAJf2/2B+I6xVT3Pv
bAuS7iEyorGRC+LpVMpBWtiUkBW4O6+rwXAhLO/nkHZD5h/bwVwG9GLAraXRPmyM
v/sK3Ul7/tk8nhDNMn7/gvO/WjfDh2SPE2oebCpexo/LrN6rKg6OzNQAPRYvKi3d
BW/bxbxmZIMUei8vvjNWsNTMr4fd7NwElxKC46btNIP924qo9oBrWsQ/YDNsF96b
OTS5SB8uXRLX5LWY22bQIrxccJ8DRXCYsVXaCYTV/1Bzba234/DMiKNEZGZjMh0M
NebEfz26OvVoI6lqqlAVpnTRTeReKOKqwEq4zlx3qvIzfJ/TwdXTs9tQqGNhqjjZ
01IbrsE=
-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org