Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
File: 3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: KVZ0tUwD0RAJ1FRXeZNKznSH+lxQyJh71fV2KkQYRuI=
Subject key identifier: E9:01:49:BB:DD:AC:6A:FE:F8:D8:B0:67:37:D6:86:BE:26:42:89:E2
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 2554993C538D0A4F92EE92524A25D99116DAE73C
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
Signing time: Mon 14 Oct 2024 01:49:52 +0000
ROA not before: Mon 14 Oct 2024 01:44:52 +0000
ROA not after: Mon 13 Oct 2025 01:49:52 +0000
asID: 28220
IP address blocks: 187.110.209.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:54:99:3c:53:8d:0a:4f:92:ee:92:52:4a:25:d9:91:16:da:e7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:52 2024 GMT
Not After : Oct 13 01:49:52 2025 GMT
Subject: CN=E90149BBDDAC6AFEF8D8B06737D686BE264289E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:97:fb:3c:9b:59:59:d3:ac:01:ef:e8:a4:
20:c3:13:f4:22:28:be:06:67:fe:2d:90:e8:eb:ad:
c7:c6:56:b0:a5:e2:b0:83:3a:ce:02:6f:35:4d:78:
e8:d9:a1:b9:f0:a6:51:8f:87:77:5b:7d:0b:54:5b:
1a:c6:35:73:44:73:0c:bc:75:be:2b:0f:43:a8:26:
aa:66:43:c9:c6:87:12:6b:30:94:1e:64:8f:e8:ee:
59:68:03:4e:55:39:92:f6:18:5a:f2:37:a5:d5:7f:
27:0d:08:ae:b1:4b:5a:a1:59:41:8b:ab:f4:8e:82:
78:ee:d9:a9:52:3e:9b:01:b7:f8:fc:15:58:c2:1f:
48:18:8b:cd:63:12:d9:37:80:71:8b:78:7e:af:7b:
f0:dd:b0:48:74:48:17:50:73:37:ca:c1:05:7e:11:
0d:8c:e2:d7:c6:60:55:ec:7d:fb:98:a8:73:68:e5:
db:de:be:2f:3a:36:fb:3d:7f:2a:3e:ce:34:8c:d2:
1c:c1:38:95:32:fa:ae:d4:cf:d0:93:68:30:26:a4:
c8:71:34:ea:9e:f0:29:bd:01:b1:3c:40:d3:2d:3d:
f1:a0:9e:d1:50:d2:a6:9e:db:c4:33:ed:aa:bb:81:
a9:71:a3:a0:4f:55:31:ee:6f:0d:53:d6:cb:00:c2:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:01:49:BB:DD:AC:6A:FE:F8:D8:B0:67:37:D6:86:BE:26:42:89:E2
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.110.209.0/24
Signature Algorithm: sha256WithRSAEncryption
07:39:af:b9:de:97:b7:35:9b:23:1c:e2:55:fe:15:62:1d:81:
88:0b:c3:56:ad:6e:1a:cf:d9:c7:f1:1f:04:18:c8:32:eb:5a:
76:2a:14:b3:d6:53:73:d3:a5:ee:d5:73:eb:49:3e:ea:a5:e7:
ea:d4:23:52:cd:e9:6d:73:25:45:ce:9e:02:50:1d:59:a1:ca:
51:1d:a0:ca:26:6a:44:17:a7:f2:1a:ec:9f:44:e9:0a:76:02:
b9:9a:0e:9f:2b:b1:32:d9:80:ec:45:86:1b:6e:4f:db:e4:e4:
e9:46:0c:58:1e:cc:5d:7c:eb:9c:04:13:47:c0:40:06:12:71:
3b:f4:17:f3:74:ba:07:1d:4c:48:95:51:e1:70:aa:6c:3d:f7:
a9:c7:b5:b6:b7:6b:0d:7b:b4:0f:62:e6:c1:36:98:35:a4:d4:
40:92:09:ac:37:d5:17:cc:55:47:f8:98:98:6e:b9:e3:3f:14:
94:84:f9:07:74:4c:bc:8c:77:15:20:e1:eb:b7:ef:1f:88:63:
a6:d5:75:e2:86:e4:e3:e2:f6:e9:89:86:56:48:44:7f:ff:77:
b7:c1:5d:04:ad:bb:25:77:52:7d:0d:3d:49:96:29:76:b5:84:
c3:89:86:99:85:93:61:5d:6c:71:8b:72:f7:6c:c6:f5:83:30:
8c:3a:01:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJVSZPFONCk+S7pJSSiXZkRba5zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NTJaFw0yNTEwMTMwMTQ5NTJaMDMxMTAvBgNV
BAMTKEU5MDE0OUJCRERBQzZBRkVGOEQ4QjA2NzM3RDY4NkJFMjY0Mjg5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90Zf7PJtZWdOsAe/opCDDE/Qi
KL4GZ/4tkOjrrcfGVrCl4rCDOs4CbzVNeOjZobnwplGPh3dbfQtUWxrGNXNEcwy8
db4rD0OoJqpmQ8nGhxJrMJQeZI/o7lloA05VOZL2GFryN6XVfycNCK6xS1qhWUGL
q/SOgnju2alSPpsBt/j8FVjCH0gYi81jEtk3gHGLeH6ve/DdsEh0SBdQczfKwQV+
EQ2M4tfGYFXsffuYqHNo5dvevi86Nvs9fyo+zjSM0hzBOJUy+q7Uz9CTaDAmpMhx
NOqe8Cm9AbE8QNMtPfGgntFQ0qae28Qz7aq7galxo6BPVTHubw1T1ssAwno1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6QFJu92sav742LBnN9aGviZCieIwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM3MmUzMTMxMzAyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7btEwDQYJKoZIhvcNAQELBQADggEBAAc5r7ne
l7c1myMc4lX+FWIdgYgLw1atbhrP2cfxHwQYyDLrWnYqFLPWU3PTpe7Vc+tJPuql
5+rUI1LN6W1zJUXOngJQHVmhylEdoMomakQXp/Ia7J9E6Qp2ArmaDp8rsTLZgOxF
hhtuT9vk5OlGDFgezF1865wEE0fAQAYScTv0F/N0ugcdTEiVUeFwqmw996nHtba3
aw17tA9i5sE2mDWk1ECSCaw31RfMVUf4mJhuueM/FJSE+Qd0TLyMdxUg4eu37x+I
Y6bVdeKG5OPi9umJhlZIRH//d7fBXQStuyV3Un0NPUmWKXa1hMOJhpmFk2FdbHGL
cvdsxvWDMIw6AQk=
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org