Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3332203d3e20323633343638.roa
File: 3133312e3235352e39362e302f32322d3332203d3e20323633343638.roa (raw, json)
Hash identifier: qk4oo6Wwx2oMYzFPZJcfpJK4QDmEUXhW0BWMGQ+cvfs=
Subject key identifier: B1:85:65:62:85:7D:1F:15:9D:AF:59:BE:CB:70:85:AF:9B:D2:FF:60
Certificate issuer: /CN=D06F3A94487140F90F261F2C9669A641452C4EC7
Certificate serial: 6A0CAEB938D582C1D412E7C0C0126F8FE0719A7B
Authority key identifier: D0:6F:3A:94:48:71:40:F9:0F:26:1F:2C:96:69:A6:41:45:2C:4E:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06F3A94487140F90F261F2C9669A641452C4EC7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3332203d3e20323633343638.roa
Signing time: Fri 26 Jul 2024 11:29:02 +0000
ROA not before: Fri 26 Jul 2024 11:24:02 +0000
ROA not after: Fri 25 Jul 2025 11:29:02 +0000
asID: 263468
IP address blocks: 131.255.96.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:0c:ae:b9:38:d5:82:c1:d4:12:e7:c0:c0:12:6f:8f:e0:71:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D06F3A94487140F90F261F2C9669A641452C4EC7
Validity
Not Before: Jul 26 11:24:02 2024 GMT
Not After : Jul 25 11:29:02 2025 GMT
Subject: CN=B1856562857D1F159DAF59BECB7085AF9BD2FF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:0d:c4:a7:bb:a9:01:c1:4e:7e:e9:57:79:
0e:dd:c5:04:06:1c:59:98:92:cb:67:05:88:6e:fa:
7c:2a:20:d2:4e:ef:7f:33:67:83:00:a1:d4:a9:18:
46:f2:d7:db:5b:3d:24:0c:f4:46:e7:39:de:8d:2c:
76:cc:a2:9a:54:a0:c1:ca:b8:f6:14:ce:0b:86:59:
19:37:a6:32:96:d1:16:2b:0d:2f:e2:13:03:7a:4d:
a8:ab:ba:0a:10:99:b3:f6:24:e8:26:5d:67:f3:c9:
31:ce:33:06:53:12:a9:4f:8b:0d:71:fa:80:45:cf:
45:e7:ba:5b:3c:f7:bd:cb:cb:b7:9c:e9:b6:df:00:
41:5c:1f:a7:59:af:76:ec:90:4d:2e:35:85:2f:22:
c1:41:4d:49:b3:52:f2:9b:ec:dd:0a:26:b4:45:d1:
4a:39:a4:2a:de:5a:d6:dd:a1:91:a6:93:62:c5:af:
71:7a:ab:f8:bb:10:79:02:b0:0b:89:58:86:19:90:
40:5a:02:09:ef:85:18:a5:a2:f1:5f:f7:aa:09:fe:
95:f3:74:72:5b:4c:84:2b:61:f3:e9:2b:dc:8a:49:
05:44:0d:83:c8:e5:f7:88:51:af:40:01:be:a0:89:
3b:63:1f:97:0b:22:e0:15:fb:01:51:47:41:27:c7:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:65:62:85:7D:1F:15:9D:AF:59:BE:CB:70:85:AF:9B:D2:FF:60
X509v3 Authority Key Identifier:
keyid:D0:6F:3A:94:48:71:40:F9:0F:26:1F:2C:96:69:A6:41:45:2C:4E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D06F3A94487140F90F261F2C9669A641452C4EC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06F3A94487140F90F261F2C9669A641452C4EC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3332203d3e20323633343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.96.0/22
Signature Algorithm: sha256WithRSAEncryption
66:65:43:07:f9:f7:0b:71:46:3d:93:7a:1a:1e:7e:47:fd:f9:
9c:02:df:35:fe:5a:06:09:81:82:a6:e7:7a:a2:36:86:fc:21:
2c:59:3f:e5:d0:56:74:52:1b:81:8b:4e:ef:a0:20:68:94:6e:
4f:b1:8c:3c:0e:fa:8d:c8:08:bc:62:33:ca:5c:ca:da:b7:6e:
ed:de:f4:2e:e8:d7:a8:c3:ee:f1:d6:6f:f7:06:a0:f3:e0:fa:
6a:8c:64:ff:2e:5a:64:72:a7:12:5c:c9:5c:b9:71:bc:34:11:
bc:50:2e:5b:aa:c8:41:7b:61:30:86:50:cd:5c:cf:a5:af:dc:
43:71:df:af:ba:a9:4f:bf:d9:f4:36:5f:3c:7a:42:5c:cb:fc:
61:9c:1b:d0:4b:46:06:88:52:7b:61:33:98:1a:54:07:3c:50:
18:2c:a6:3f:03:e9:1d:56:5b:c2:8d:98:5a:86:a0:c0:d3:3e:
44:33:56:ab:73:8c:2b:74:5d:b3:0e:4d:c4:2e:89:27:b8:8f:
cf:a5:28:38:77:61:5c:00:ee:2e:bd:cc:87:32:f1:40:c1:6b:
52:09:45:74:80:05:51:b6:1c:5a:71:fc:bc:c2:86:87:87:9e:
91:b3:0b:63:d9:a5:ea:93:eb:13:a1:38:2c:2b:22:1b:53:51:
cf:0a:8f:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUagyuuTjVgsHUEufAwBJvj+BxmnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA2RjNBOTQ0ODcxNDBGOTBGMjYxRjJDOTY2OUE2NDE0
NTJDNEVDNzAeFw0yNDA3MjYxMTI0MDJaFw0yNTA3MjUxMTI5MDJaMDMxMTAvBgNV
BAMTKEIxODU2NTYyODU3RDFGMTU5REFGNTlCRUNCNzA4NUFGOUJEMkZGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Fw3Ep7upAcFOfulXeQ7dxQQG
HFmYkstnBYhu+nwqINJO738zZ4MAodSpGEby19tbPSQM9EbnOd6NLHbMoppUoMHK
uPYUzguGWRk3pjKW0RYrDS/iEwN6TairugoQmbP2JOgmXWfzyTHOMwZTEqlPiw1x
+oBFz0Xnuls8973Ly7ec6bbfAEFcH6dZr3bskE0uNYUvIsFBTUmzUvKb7N0KJrRF
0Uo5pCreWtbdoZGmk2LFr3F6q/i7EHkCsAuJWIYZkEBaAgnvhRilovFf96oJ/pXz
dHJbTIQrYfPpK9yKSQVEDYPI5feIUa9AAb6giTtjH5cLIuAV+wFRR0Enx55bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsYVlYoV9HxWdr1m+y3CFr5vS/2AwHwYDVR0j
BBgwFoAU0G86lEhxQPkPJh8slmmmQUUsTscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh
blkvMC9EMDZGM0E5NDQ4NzE0MEY5MEYyNjFGMkM5NjY5QTY0MTQ1MkM0RUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNkYzQTk0NDg3MTQwRjkw
RjI2MUYyQzk2NjlBNjQxNDUyQzRFQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJONVk2MjVnblRBTlBpVm1UTHROeDVQNlJKSHRNRVJjZXNLY2czcWNFYW5ZLzAv
MzEzMzMxMmUzMjM1MzUyZTM5MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/2AwDQYJKoZIhvcNAQELBQADggEBAGZlQwf5
9wtxRj2Tehoefkf9+ZwC3zX+WgYJgYKm53qiNob8ISxZP+XQVnRSG4GLTu+gIGiU
bk+xjDwO+o3ICLxiM8pcytq3bu3e9C7o16jD7vHWb/cGoPPg+mqMZP8uWmRypxJc
yVy5cbw0EbxQLluqyEF7YTCGUM1cz6Wv3ENx36+6qU+/2fQ2Xzx6QlzL/GGcG9BL
RgaIUnthM5gaVAc8UBgspj8D6R1WW8KNmFqGoMDTPkQzVqtzjCt0XbMOTcQuiSe4
j8+lKDh3YVwA7i69zIcy8UDBa1IJRXSABVG2HFpx/LzChoeHnpGzC2PZpeqT6xOh
OCwrIhtTUc8Kjzo=
-----END CERTIFICATE-----
Generated at Mon Oct 7 08:47:20 2024 by rpki-client on console-ams.rpki-client.org