Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323033.roa
File: 323830343a363336383a3a2f33322d3438203d3e20323033.roa (raw, json)
Hash identifier: Hfdssk6I7IKio6TGIOX/9PUzR0HDK4wD4qLBdFuB2eg=
Subject key identifier: 16:FB:D2:3D:A2:28:56:DA:37:84:E1:CD:48:54:6D:2D:EA:88:3E:ED
Certificate issuer: /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial: 2B1E2522EE170FFCC599FB5545E8EA685F02B23B
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323033.roa
Signing time: Thu 22 Feb 2024 01:08:52 +0000
ROA not before: Thu 22 Feb 2024 01:03:52 +0000
ROA not after: Thu 20 Feb 2025 01:08:52 +0000
asID: 203
IP address blocks: 2804:6368::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1e:25:22:ee:17:0f:fc:c5:99:fb:55:45:e8:ea:68:5f:02:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Validity
Not Before: Feb 22 01:03:52 2024 GMT
Not After : Feb 20 01:08:52 2025 GMT
Subject: CN=16FBD23DA22856DA3784E1CD48546D2DEA883EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:f1:bb:5a:45:93:e1:6f:7a:c7:09:00:ef:
55:dd:21:75:e2:b1:93:e0:d2:6d:b3:85:2d:0d:a7:
f4:42:f4:03:bc:d3:b6:d2:ba:c0:50:dd:cf:4f:80:
25:b2:8c:ac:72:53:46:aa:9b:1a:50:54:1f:25:bb:
89:16:dd:1e:18:84:5f:0f:87:f4:22:30:c9:3b:5c:
98:1e:1c:79:6a:48:50:63:41:65:ce:00:5d:91:0c:
d8:4f:4c:5c:79:d8:4f:8d:30:c9:76:ca:2d:a7:df:
5a:8f:6e:3d:92:28:4d:37:b2:56:db:ee:ad:72:c2:
15:a6:ed:d0:3b:47:15:80:63:34:e8:9a:15:37:d7:
7b:d2:01:3e:fc:76:e7:91:47:f6:71:64:15:8b:a6:
cf:99:e9:a3:f9:fd:9b:e6:2e:cb:fa:11:7e:8b:61:
3b:29:5b:31:5d:fe:59:fe:d6:76:4a:fb:d3:11:cc:
f4:3b:73:a2:bf:fb:1a:c6:8b:8e:a3:cd:5f:72:62:
7e:65:f0:b4:f2:e4:5f:82:47:15:d1:b1:fd:5a:67:
05:7b:b8:fb:71:a0:00:e3:de:93:2c:2d:e9:1b:20:
b5:00:e1:fc:e4:eb:fc:d5:b3:a0:b7:46:52:ec:a1:
df:ec:ae:c0:cc:4d:fa:19:6f:82:1d:b6:e7:cd:37:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:D2:3D:A2:28:56:DA:37:84:E1:CD:48:54:6D:2D:EA:88:3E:ED
X509v3 Authority Key Identifier:
keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6368::/32
Signature Algorithm: sha256WithRSAEncryption
7d:39:75:4d:b3:22:6c:41:d9:90:c8:55:68:84:bf:2a:dd:78:
4d:99:c6:4a:d0:09:43:89:c2:16:3f:c9:f2:52:86:4a:3a:4e:
32:60:7c:09:e5:7a:e9:29:1e:d1:b5:52:5b:db:08:0a:5f:d0:
d4:5b:ca:5d:92:9d:30:79:80:33:ca:ed:af:06:18:0a:51:4b:
fd:82:36:84:88:a2:19:b4:4d:b6:1a:92:f4:56:9b:91:4e:56:
b7:9e:41:5d:00:e0:22:e2:d6:26:ae:8a:e2:46:f7:9b:7c:24:
92:32:f7:f9:c5:ba:ca:ce:a2:44:bc:77:df:2a:e2:a2:1b:51:
46:17:21:64:47:e1:31:f3:fb:44:2b:3a:c6:b3:84:30:d3:9e:
8b:fc:2a:7d:0d:36:10:08:35:54:bc:70:a5:27:ec:b4:b6:53:
49:77:6f:6f:3c:65:81:db:bc:0d:b5:62:42:e7:87:76:66:de:
97:1a:a7:f4:ca:83:81:8e:ab:d2:1c:63:8d:7d:e1:92:86:ca:
4d:e3:9d:b5:e2:d4:bf:35:d8:ec:89:8b:24:05:de:89:8c:e8:
cb:f2:93:65:a7:c5:d9:5d:cb:68:9d:b7:78:2f:c6:5e:e8:5b:
5e:16:b4:d4:ba:fb:9d:70:ef:e0:63:19:25:36:09:ed:75:ca:
18:4b:6d:eb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUKx4lIu4XD/zFmftVRejqaF8CsjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEwNzZBNTMxNDU1N0JFREQ0RkE4NDYxMkQxMkVEMUEz
M0VDN0Q4QTAeFw0yNDAyMjIwMTAzNTJaFw0yNTAyMjAwMTA4NTJaMDMxMTAvBgNV
BAMTKDE2RkJEMjNEQTIyODU2REEzNzg0RTFDRDQ4NTQ2RDJERUE4ODNFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDvG7WkWT4W96xwkA71XdIXXi
sZPg0m2zhS0Np/RC9AO807bSusBQ3c9PgCWyjKxyU0aqmxpQVB8lu4kW3R4YhF8P
h/QiMMk7XJgeHHlqSFBjQWXOAF2RDNhPTFx52E+NMMl2yi2n31qPbj2SKE03slbb
7q1ywhWm7dA7RxWAYzTomhU313vSAT78dueRR/ZxZBWLps+Z6aP5/ZvmLsv6EX6L
YTspWzFd/ln+1nZK+9MRzPQ7c6K/+xrGi46jzV9yYn5l8LTy5F+CRxXRsf1aZwV7
uPtxoADj3pMsLekbILUA4fzk6/zVs6C3RlLsod/srsDMTfoZb4IdtufNN1+7AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUFvvSPaIoVto3hOHNSFRtLeqIPu0wHwYDVR0j
BBgwFoAU6gdqUxRVe+3U+oRhLRLtGjPsfYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC9FQTA3NkE1MzE0NTU3QkVERDRGQTg0NjEyRDEyRUQxQTMzRUM3RDhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBMDc2QTUzMTQ1NTdCRURE
NEZBODQ2MTJEMTJFRDFBMzNFQzdEOEEuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzIzODMwMzQzYTM2MzMzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMDMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKARjaDANBgkqhkiG9w0BAQsFAAOCAQEAfTl1TbMibEHZkMhV
aIS/Kt14TZnGStAJQ4nCFj/J8lKGSjpOMmB8CeV66Ske0bVSW9sICl/Q1FvKXZKd
MHmAM8rtrwYYClFL/YI2hIiiGbRNthqS9FabkU5Wt55BXQDgIuLWJq6K4kb3m3wk
kjL3+cW6ys6iRLx33yriohtRRhchZEfhMfP7RCs6xrOEMNOei/wqfQ02EAg1VLxw
pSfstLZTSXdvbzxlgdu8DbViQueHdmbelxqn9MqDgY6r0hxjjX3hkobKTeOdteLU
vzXY7ImLJAXeiYzoy/KTZafF2V3LaJ23eC/GXuhbXha01Lr7nXDv4GMZJTYJ7XXK
GEtt6w==
-----END CERTIFICATE-----
Generated at Sat Feb 24 14:50:50 2024 by rpki-client on console-ams.rpki-client.org