Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
File: 3133312e3232312e36382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: s050JvSbgqwaKNJ8Lz/SFGxKsgHGOprIvaSBvTSqEwE=
Subject key identifier: 8A:AB:7F:C4:24:B2:7B:F3:CB:C6:DA:DF:53:1E:57:B1:D3:51:24:74
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 15250E6FF1543D457AEABB6E7ECB8EF719B00D0D
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:48 +0000
ROA not before: Mon 14 Oct 2024 01:44:48 +0000
ROA not after: Mon 13 Oct 2025 01:49:48 +0000
asID: 28270
IP address blocks: 131.221.68.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:25:0e:6f:f1:54:3d:45:7a:ea:bb:6e:7e:cb:8e:f7:19:b0:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:48 2024 GMT
Not After : Oct 13 01:49:48 2025 GMT
Subject: CN=8AAB7FC424B27BF3CBC6DADF531E57B1D3512474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:c0:43:08:de:82:d1:d1:ba:c5:a5:76:11:
84:9e:24:a8:d8:e9:a2:b6:e9:e2:53:d4:f4:bc:7d:
5e:6c:1c:ae:29:a7:b2:ad:a5:60:7d:d5:7b:02:76:
62:af:61:0b:5d:7d:58:3d:00:36:18:f5:0b:be:77:
5b:91:87:ff:95:13:3f:8b:24:a8:b8:ba:38:9e:93:
c4:35:5b:42:75:e4:f8:b3:30:7e:f6:42:c3:f5:95:
ed:36:2b:d2:9e:3b:a2:f1:03:c0:64:17:d1:60:25:
6a:a6:62:66:35:02:74:71:77:9b:d0:8a:c5:53:8d:
c6:6a:41:3f:8b:e9:ee:61:95:53:96:23:28:1e:1f:
34:45:de:18:09:14:82:76:a2:0c:92:b8:5f:3c:60:
b5:80:0b:91:4a:cd:99:3b:46:b2:d7:3a:74:24:24:
1d:bd:68:c3:fe:ce:dd:e6:cb:f8:a1:77:3a:77:02:
54:f0:d0:36:36:fb:93:a5:44:04:5a:a2:22:b6:2d:
fd:65:5b:6e:fa:db:13:09:50:17:dd:dc:70:3d:2b:
a5:b0:0d:9c:12:d9:b3:c7:6a:70:f6:23:a5:5c:da:
24:0e:6f:9c:72:10:b9:48:e5:e6:7d:9d:4c:2a:de:
eb:2a:fa:92:9f:a9:5a:96:a9:c9:a0:d4:bd:77:28:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:7F:C4:24:B2:7B:F3:CB:C6:DA:DF:53:1E:57:B1:D3:51:24:74
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
43:34:e4:cd:0b:4a:82:b2:94:8e:cc:b4:05:8e:16:bf:92:00:
bd:ad:be:75:d4:de:e3:32:e1:80:97:0b:1f:6e:0e:30:b0:e8:
a5:b0:30:34:04:f8:3a:d1:d2:31:df:34:e1:b5:65:a2:11:c7:
2f:87:50:d7:1b:79:a1:07:de:38:2c:76:84:9a:53:9b:ca:df:
8f:03:ac:ac:6b:2e:88:16:77:f5:1c:70:82:09:f3:f1:6d:c3:
41:6f:70:4b:4a:47:59:db:4f:bc:a9:72:c5:cd:85:f7:32:33:
a7:14:21:bb:35:ed:81:e2:db:b5:23:6d:8b:85:ab:cf:cc:d3:
1d:be:bf:97:63:7d:03:a1:b8:9e:36:4d:17:c2:7d:32:79:e7:
b3:4e:44:75:2e:00:b2:0c:55:c0:92:b5:4c:65:ec:9e:32:51:
95:87:58:ae:f0:4b:ca:12:25:4e:b4:43:22:fc:9e:7a:d2:e0:
71:25:d9:63:83:29:22:f6:1d:57:38:7d:d3:49:d1:cc:48:82:
1a:05:e2:92:67:0f:7e:f1:c1:3f:43:3b:55:1b:57:c8:1c:40:
01:61:b8:f6:52:b3:27:e8:97:5e:6f:b0:61:9d:ac:f7:cc:25:
6d:e5:64:1c:0b:c7:b2:5c:cc:e1:c8:8e:ce:9b:a0:fa:77:89:
1a:37:60:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFSUOb/FUPUV66rtufsuO9xmwDQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NDhaFw0yNTEwMTMwMTQ5NDhaMDMxMTAvBgNV
BAMTKDhBQUI3RkM0MjRCMjdCRjNDQkM2REFERjUzMUU1N0IxRDM1MTI0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+cBDCN6C0dG6xaV2EYSeJKjY
6aK26eJT1PS8fV5sHK4pp7KtpWB91XsCdmKvYQtdfVg9ADYY9Qu+d1uRh/+VEz+L
JKi4ujiek8Q1W0J15PizMH72QsP1le02K9KeO6LxA8BkF9FgJWqmYmY1AnRxd5vQ
isVTjcZqQT+L6e5hlVOWIygeHzRF3hgJFIJ2ogySuF88YLWAC5FKzZk7RrLXOnQk
JB29aMP+zt3my/ihdzp3AlTw0DY2+5OlRARaoiK2Lf1lW2762xMJUBfd3HA9K6Ww
DZwS2bPHanD2I6Vc2iQOb5xyELlI5eZ9nUwq3usq+pKfqVqWqcmg1L13KM+1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiqt/xCSye/PLxtrfUx5XsdNRJHQwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzMxMmUzMjMyMzEyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg91EMA0GCSqGSIb3DQEBCwUAA4IBAQBDNOTNC0qC
spSOzLQFjha/kgC9rb511N7jMuGAlwsfbg4wsOilsDA0BPg60dIx3zThtWWiEccv
h1DXG3mhB944LHaEmlObyt+PA6ysay6IFnf1HHCCCfPxbcNBb3BLSkdZ20+8qXLF
zYX3MjOnFCG7Ne2B4tu1I22LhavPzNMdvr+XY30DobieNk0Xwn0yeeezTkR1LgCy
DFXAkrVMZeyeMlGVh1iu8EvKEiVOtEMi/J560uBxJdljgyki9h1XOH3TSdHMSIIa
BeKSZw9+8cE/QztVG1fIHEABYbj2UrMn6Jdeb7Bhnaz3zCVt5WQcC8eyXMzhyI7O
m6D6d4kaN2BE
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org