Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3a2f33322d3438203d3e203533303139.roa
File: 323830343a3564633a3a2f33322d3438203d3e203533303139.roa (raw, json)
Hash identifier: VrMPEd9prhgmIpgPc99X7iGBZGU4mQ1+5us/JwreEVI=
Subject key identifier: 51:84:A0:25:B5:92:D2:6F:75:E6:CE:CA:F2:7B:99:E8:51:29:FC:1A
Certificate issuer: /CN=AA7F3B6BBB93519197F744AAD322DACA6D94222A
Certificate serial: 7B7B2551E274E3DD124645E850121761AB528FA3
Authority key identifier: AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3a2f33322d3438203d3e203533303139.roa
Signing time: Mon 09 Sep 2024 13:45:47 +0000
ROA not before: Mon 09 Sep 2024 13:40:47 +0000
ROA not after: Mon 08 Sep 2025 13:45:47 +0000
asID: 53019
IP address blocks: 2804:5dc::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7b:25:51:e2:74:e3:dd:12:46:45:e8:50:12:17:61:ab:52:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7F3B6BBB93519197F744AAD322DACA6D94222A
Validity
Not Before: Sep 9 13:40:47 2024 GMT
Not After : Sep 8 13:45:47 2025 GMT
Subject: CN=5184A025B592D26F75E6CECAF27B99E85129FC1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:46:27:b3:da:c5:25:11:3e:b2:86:77:30:
e5:51:6a:54:7f:7f:8f:5a:32:16:39:a9:2b:8a:90:
d6:df:1e:2e:0f:83:31:cc:96:90:f9:d3:d5:6d:fe:
08:2d:78:09:6a:fe:53:82:96:cc:8d:17:b1:bc:52:
4a:e9:5b:08:3a:76:45:9a:b5:e3:9c:be:5f:06:f8:
b0:b3:ca:a2:f6:a7:64:7b:dc:e5:12:4e:6f:2d:46:
83:47:a4:b3:c0:95:ae:1c:54:3b:78:8c:6d:7c:66:
17:05:a7:6e:66:53:cf:c1:d9:7f:f0:07:a9:c4:b7:
29:ce:3b:92:7f:2e:59:3b:73:05:5d:8f:43:21:c8:
1f:bd:2e:67:a3:2a:7c:a1:56:3f:01:1d:de:4b:3a:
c3:7a:33:fa:73:60:cb:50:a2:7a:d2:39:4a:d1:9d:
42:6c:b8:9b:1f:fd:ef:c4:a0:63:57:bd:8c:f6:a9:
9d:82:86:5f:20:19:9c:59:52:5d:dd:9f:28:7b:99:
b5:95:85:a2:66:53:b7:7a:6f:bd:20:0a:f9:0f:b8:
fc:0e:fb:0c:1d:ce:60:17:f3:2f:a3:8f:26:b5:87:
99:4f:14:07:db:80:bb:a8:06:70:cc:7b:41:8f:45:
31:37:1e:d4:26:e2:e8:bc:ac:74:7c:9d:4f:04:e5:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:84:A0:25:B5:92:D2:6F:75:E6:CE:CA:F2:7B:99:E8:51:29:FC:1A
X509v3 Authority Key Identifier:
keyid:AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/AA7F3B6BBB93519197F744AAD322DACA6D94222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3a2f33322d3438203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dc::/32
Signature Algorithm: sha256WithRSAEncryption
a1:53:5a:90:13:f3:6a:2e:c8:95:0a:a2:ae:fc:d8:a8:a8:84:
d1:7c:45:fc:3d:70:02:6a:a2:aa:45:42:31:fd:db:33:7c:a7:
25:ec:d9:30:7e:31:5a:5a:b6:e8:47:f2:53:b2:db:39:ca:14:
b8:57:56:d9:99:b1:b6:2e:3a:da:a3:62:e6:a6:33:0c:05:90:
01:d0:22:b5:f0:45:31:dc:5d:93:00:5d:fc:9f:27:3b:e4:0a:
a4:22:05:1c:c4:d9:f4:48:fa:79:8c:b3:35:f8:2a:c1:3e:60:
09:82:ab:49:8f:ff:93:8c:e3:6d:d7:54:f8:b8:9c:c8:43:40:
24:13:39:9e:bb:f9:d7:6b:52:e0:70:0d:54:f9:04:39:4f:b0:
a4:4f:c1:c8:3f:08:49:5c:e9:5e:a8:7b:6b:7e:f2:a1:c8:81:
e7:a9:64:23:10:b9:67:f5:74:d4:06:9e:5d:0d:16:f8:f4:95:
dd:bc:e9:b8:a0:30:77:37:6a:8e:cc:64:88:36:e6:5c:73:38:
26:f9:44:29:c2:6f:6a:cd:02:ab:08:ab:8f:6a:e3:14:a1:6c:
46:4d:05:99:40:69:d5:35:6b:4d:83:be:0b:29:20:46:d0:17:
0e:8c:0a:62:c4:77:33:e9:26:20:02:0f:c2:6d:a9:1b:2f:78:
5b:be:f9:ef
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUe3slUeJ0490SRkXoUBIXYatSj6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE3RjNCNkJCQjkzNTE5MTk3Rjc0NEFBRDMyMkRBQ0E2
RDk0MjIyQTAeFw0yNDA5MDkxMzQwNDdaFw0yNTA5MDgxMzQ1NDdaMDMxMTAvBgNV
BAMTKDUxODRBMDI1QjU5MkQyNkY3NUU2Q0VDQUYyN0I5OUU4NTEyOUZDMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8EYns9rFJRE+soZ3MOVRalR/
f49aMhY5qSuKkNbfHi4PgzHMlpD509Vt/ggteAlq/lOClsyNF7G8UkrpWwg6dkWa
teOcvl8G+LCzyqL2p2R73OUSTm8tRoNHpLPAla4cVDt4jG18ZhcFp25mU8/B2X/w
B6nEtynOO5J/Llk7cwVdj0MhyB+9LmejKnyhVj8BHd5LOsN6M/pzYMtQonrSOUrR
nUJsuJsf/e/EoGNXvYz2qZ2Chl8gGZxZUl3dnyh7mbWVhaJmU7d6b70gCvkPuPwO
+wwdzmAX8y+jjya1h5lPFAfbgLuoBnDMe0GPRTE3HtQm4ui8rHR8nU8E5YRFAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUUYSgJbWS0m915s7K8nuZ6FEp/BowHwYDVR0j
BBgwFoAUqn87a7uTUZGX90Sq0yLaym2UIiowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xdFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFX
LzAvQUE3RjNCNkJCQjkzNTE5MTk3Rjc0NEFBRDMyMkRBQ0E2RDk0MjIyQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BQTdGM0I2QkJCOTM1MTkxOTdG
NzQ0QUFEMzIyREFDQTZEOTQyMjJBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
dFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFXLzAvMzIz
ODMwMzQzYTM1NjQ2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDMxMzku
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAXcMA0GCSqGSIb3DQEBCwUAA4IBAQChU1qQE/NqLsiVCqKu
/NioqITRfEX8PXACaqKqRUIx/dszfKcl7NkwfjFaWrboR/JTsts5yhS4V1bZmbG2
Ljrao2LmpjMMBZAB0CK18EUx3F2TAF38nyc75AqkIgUcxNn0SPp5jLM1+CrBPmAJ
gqtJj/+TjONt11T4uJzIQ0AkEzmeu/nXa1LgcA1U+QQ5T7CkT8HIPwhJXOleqHtr
fvKhyIHnqWQjELln9XTUBp5dDRb49JXdvOm4oDB3N2qOzGSINuZcczgm+UQpwm9q
zQKrCKuPauMUoWxGTQWZQGnVNWtNg74LKSBG0BcOjApixHcz6SYgAg/CbakbL3hb
vvnv
-----END CERTIFICATE-----
Generated at Tue Nov 5 03:32:09 2024 by rpki-client on console-fra.rpki-client.org