Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e3130332e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: GF9J2Ji3EesvTRFLF5QC7B6P12+ipfEA9FD2kLO5fBc=
Subject key identifier: D4:B4:4F:6F:63:39:97:E7:28:D7:6C:BC:5C:87:02:3E:60:27:36:AD
Certificate issuer: /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial: 202483E9A660AD6D4DD5C79F939FC44F78912D80
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa
Signing time: Fri 24 May 2024 14:21:21 +0000
ROA not before: Fri 24 May 2024 14:16:21 +0000
ROA not after: Fri 23 May 2025 14:21:21 +0000
asID: 53153
IP address blocks: 187.61.103.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:24:83:e9:a6:60:ad:6d:4d:d5:c7:9f:93:9f:c4:4f:78:91:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
Validity
Not Before: May 24 14:16:21 2024 GMT
Not After : May 23 14:21:21 2025 GMT
Subject: CN=D4B44F6F633997E728D76CBC5C87023E602736AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:3f:09:fb:69:4a:76:a8:1c:1e:8e:56:87:
31:7f:38:b7:6d:71:7f:94:c2:aa:ee:d4:bc:67:2e:
4b:14:0e:9f:7c:3e:98:8b:1c:ef:b1:c7:46:e3:c9:
e8:1f:79:34:e9:fc:b1:f5:da:9e:7c:0d:ed:9f:ad:
e8:df:88:e5:68:06:dc:25:0b:e8:86:fb:5a:4f:21:
bd:53:43:3a:8d:c2:b4:8b:14:51:28:c8:83:a4:fd:
88:19:26:95:41:ec:31:49:55:60:f1:e1:45:78:9a:
c7:aa:e9:c7:21:63:6e:f5:53:99:06:1e:7d:d0:89:
3b:f0:03:49:d1:1f:d1:19:d0:23:fc:49:85:4e:a9:
08:e5:f9:b8:f0:66:57:29:69:11:d9:db:fe:86:df:
be:70:81:38:f6:9c:b1:b0:93:e2:bf:e3:11:67:b0:
53:e9:a5:b3:28:ca:ab:d8:dc:5e:e4:7e:52:e4:b2:
4a:48:76:8e:3a:66:41:5e:6c:f8:fa:bb:0b:b9:74:
b3:09:83:18:1c:d2:d2:54:d6:89:f9:a1:42:e2:dc:
64:7b:1e:93:8d:71:ab:4e:29:7b:22:b0:94:2c:48:
63:91:80:53:5b:bb:cd:ee:ba:fd:31:d7:c6:91:8b:
68:77:ea:76:d6:a1:de:11:0c:64:cd:6b:ab:bb:2b:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:4F:6F:63:39:97:E7:28:D7:6C:BC:5C:87:02:3E:60:27:36:AD
X509v3 Authority Key Identifier:
keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3d:cb:b6:4e:32:41:a8:1b:57:85:28:96:2d:be:2d:0f:36:
cc:a6:04:40:90:ec:df:10:11:e4:39:6c:78:03:d2:2b:6c:57:
42:12:96:60:73:f5:fe:99:08:09:f5:ad:0b:d1:aa:f8:12:4c:
76:a4:23:1a:67:b6:e8:63:72:62:fb:90:79:8e:df:7a:dc:a5:
a1:5e:4d:f7:50:97:0d:35:ae:7d:92:76:6a:51:7b:3d:35:0a:
fd:08:6b:70:76:4f:97:db:0d:e4:0c:4d:74:17:0e:84:8f:2f:
7e:46:1d:79:ec:60:15:1c:5b:8e:c7:ab:ac:83:8a:39:7b:88:
1f:9d:c8:1d:8b:dc:8c:9b:59:08:6f:4b:dc:57:ee:f5:37:13:
55:78:4b:0f:fb:6d:a5:c5:dd:18:22:1c:cb:02:f1:7e:b6:b5:
ef:fd:ac:26:54:93:d2:c2:60:d6:42:89:3a:47:0c:ab:ef:70:
4c:0d:ba:51:40:71:8a:c4:72:9a:df:e8:2c:fc:82:60:0a:60:
42:31:ed:74:94:47:f2:70:68:43:b1:4f:0e:0d:fc:db:72:7e:
e0:77:00:13:b8:eb:d6:1b:7d:6e:03:39:6b:87:9e:07:81:c2:
33:0c:4a:72:64:64:4c:e6:ef:3e:67:1b:0d:76:52:92:9b:04:
9b:64:bd:00
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUICSD6aZgrW1N1cefk5/ET3iRLYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzNkE0QTI1Nzk5MTQyODY0RURGOTdCMTAwMzkzRDUw
RDE2Mzc0MjAeFw0yNDA1MjQxNDE2MjFaFw0yNTA1MjMxNDIxMjFaMDMxMTAvBgNV
BAMTKEQ0QjQ0RjZGNjMzOTk3RTcyOEQ3NkNCQzVDODcwMjNFNjAyNzM2QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrT8J+2lKdqgcHo5WhzF/OLdt
cX+Uwqru1LxnLksUDp98PpiLHO+xx0bjyegfeTTp/LH12p58De2frejfiOVoBtwl
C+iG+1pPIb1TQzqNwrSLFFEoyIOk/YgZJpVB7DFJVWDx4UV4mseq6cchY271U5kG
Hn3QiTvwA0nRH9EZ0CP8SYVOqQjl+bjwZlcpaRHZ2/6G375wgTj2nLGwk+K/4xFn
sFPppbMoyqvY3F7kflLkskpIdo46ZkFebPj6uwu5dLMJgxgc0tJU1on5oULi3GR7
HpONcatOKXsisJQsSGORgFNbu83uuv0x18aRi2h36nbWod4RDGTNa6u7K+8BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1LRPb2M5l+co12y8XIcCPmAnNq0wHwYDVR0j
BBgwFoAUlTakoleZFChk7fl7EAOT1Q0WN0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC85NTM2QTRBMjU3OTkxNDI4NjRFREY5N0IxMDAzOTNENTBEMTYzNzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MzZBNEEyNTc5OTE0Mjg2
NEVERjk3QjEwMDM5M0Q1MEQxNjM3NDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz1nMA0GCSqGSIb3DQEBCwUAA4IBAQBLPcu2TjJB
qBtXhSiWLb4tDzbMpgRAkOzfEBHkOWx4A9IrbFdCEpZgc/X+mQgJ9a0L0ar4Ekx2
pCMaZ7boY3Ji+5B5jt963KWhXk33UJcNNa59knZqUXs9NQr9CGtwdk+X2w3kDE10
Fw6Ejy9+Rh157GAVHFuOx6usg4o5e4gfncgdi9yMm1kIb0vcV+71NxNVeEsP+22l
xd0YIhzLAvF+trXv/awmVJPSwmDWQok6Rwyr73BMDbpRQHGKxHKa3+gs/IJgCmBC
Me10lEfycGhDsU8ODfzbcn7gdwATuOvWG31uAzlrh54HgcIzDEpyZGRM5u8+ZxsN
dlKSmwSbZL0A
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:59:36 2024 by rpki-client on console-fra.rpki-client.org