Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
File: 3137372e382e31362e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: bjN4FS6hjN8EY1+ia1JO58nZvVXAOKsmJngWNRJsFYg=
Subject key identifier: C5:B7:4E:BD:2D:8E:E8:46:28:2D:AF:76:1C:B2:C9:FE:4D:22:19:1E
Certificate issuer: /CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
Certificate serial: 20CF9E522DC0EA5FE45F59A1A31D06937F2D355E
Authority key identifier: 5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
Signing time: Thu 24 Oct 2024 18:51:19 +0000
ROA not before: Thu 24 Oct 2024 18:46:19 +0000
ROA not after: Thu 23 Oct 2025 18:51:19 +0000
asID: 28360
IP address blocks: 177.8.16.0/20 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cf:9e:52:2d:c0:ea:5f:e4:5f:59:a1:a3:1d:06:93:7f:2d:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
Validity
Not Before: Oct 24 18:46:19 2024 GMT
Not After : Oct 23 18:51:19 2025 GMT
Subject: CN=C5B74EBD2D8EE846282DAF761CB2C9FE4D22191E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:39:46:69:1c:20:16:4c:3e:91:67:b0:aa:
96:59:01:b4:42:37:9a:fa:1f:a3:4b:51:6f:5a:54:
5f:63:c2:11:c8:0f:a9:d5:27:16:7c:69:0f:7c:a4:
76:3b:61:a5:7b:dd:dd:0c:4a:54:2b:df:2b:9d:32:
79:b7:90:61:21:31:30:7a:6a:0f:61:24:e8:a7:d5:
2c:6a:df:e8:59:b5:9e:98:a0:4a:89:a4:21:9b:1e:
c6:a6:8b:0d:ee:25:24:24:42:17:4a:bf:59:25:f0:
b0:25:4d:70:a6:3a:0c:70:44:81:b8:c5:33:ae:fb:
68:f0:c5:79:20:e6:f4:5c:6b:d3:74:7a:b8:94:fe:
24:7d:65:fe:8f:b7:9c:ef:eb:99:a5:1d:2d:bd:df:
5e:21:d9:a1:bd:f3:10:1a:16:19:d3:93:c7:a6:9f:
0a:ed:4b:08:4a:f1:90:7f:5b:89:65:f6:11:c3:21:
76:be:d4:c0:81:79:3c:72:13:9b:8d:27:c6:5e:43:
24:09:a6:5e:60:86:f3:ad:fd:7d:90:e6:02:10:59:
59:ab:fb:e8:08:4c:b7:4d:60:db:eb:3f:7d:d7:1b:
21:8e:a1:5d:0d:8c:da:bb:46:61:a1:58:4b:29:ae:
c9:29:28:ff:a2:3b:ac:b7:ec:e8:d8:b6:24:63:1e:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:4E:BD:2D:8E:E8:46:28:2D:AF:76:1C:B2:C9:FE:4D:22:19:1E
X509v3 Authority Key Identifier:
keyid:5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:b6:b0:8f:51:61:c4:d1:ea:fa:a0:04:cd:c0:12:a4:23:b6:
18:b2:33:1b:b7:32:9f:15:0b:0e:97:0d:66:e4:63:46:9b:85:
39:7a:4c:f2:08:1b:e6:f8:6e:9f:2f:fc:cb:b2:fc:53:d7:96:
e4:d1:bc:66:0c:27:fb:f7:83:fc:8f:25:95:bc:17:18:6e:74:
1c:26:54:4b:95:82:46:ea:af:f2:10:17:8f:3f:9b:ef:ed:19:
d2:25:fc:6a:ef:94:22:85:c3:6e:ec:20:af:f7:f5:a3:0a:fb:
c6:35:32:a7:a3:92:99:33:2c:87:92:f0:f1:25:ee:71:89:e1:
1f:d9:96:7c:58:ef:c0:b6:9c:3f:e3:6e:2a:7f:bc:1a:05:86:
cc:8e:e8:7e:24:c7:34:e7:a4:6c:7d:a9:1f:e2:c0:cb:24:a8:
f7:54:ab:40:27:93:d3:ba:e4:cc:9a:13:e7:c0:bc:8b:c5:bf:
bb:60:1d:b0:e7:c8:59:41:5a:f7:19:64:54:4d:15:b8:4d:4e:
6f:b5:26:d9:34:de:2e:b4:37:a7:b7:74:92:3b:00:85:a3:2c:
64:e9:47:56:8e:95:61:c8:42:5b:54:a1:be:02:ba:36:05:6a:
1a:75:98:f9:b8:9c:de:99:98:84:e1:2e:d5:2f:3e:dd:b1:64:
bd:92:f8:43
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUIM+eUi3A6l/kX1mhox0Gk38tNV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI3RTk2NUJGQUY1RDQzQkI5MzRBRjdDQjkyQjZEOUVC
OURGOTRCQjAeFw0yNDEwMjQxODQ2MTlaFw0yNTEwMjMxODUxMTlaMDMxMTAvBgNV
BAMTKEM1Qjc0RUJEMkQ4RUU4NDYyODJEQUY3NjFDQjJDOUZFNEQyMjE5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrTzlGaRwgFkw+kWewqpZZAbRC
N5r6H6NLUW9aVF9jwhHID6nVJxZ8aQ98pHY7YaV73d0MSlQr3yudMnm3kGEhMTB6
ag9hJOin1Sxq3+hZtZ6YoEqJpCGbHsamiw3uJSQkQhdKv1kl8LAlTXCmOgxwRIG4
xTOu+2jwxXkg5vRca9N0eriU/iR9Zf6Pt5zv65mlHS29314h2aG98xAaFhnTk8em
nwrtSwhK8ZB/W4ll9hHDIXa+1MCBeTxyE5uNJ8ZeQyQJpl5ghvOt/X2Q5gIQWVmr
++gITLdNYNvrP33XGyGOoV0NjNq7RmGhWEsprskpKP+iO6y37OjYtiRjHkTDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUxbdOvS2O6EYoLa92HLLJ/k0iGR4wHwYDVR0j
BBgwFoAUW36WW/r11Du5NK98uSttnrnflLswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjdFOTY1QkZBRjVENDNCQjkzNEFGN0NCOTJCNkQ5RUI5REY5NEJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCN0U5NjVCRkFGNUQ0M0JC
OTM0QUY3Q0I5MkI2RDlFQjlERjk0QkIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzEzNjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASxCBAwDQYJKoZIhvcNAQELBQADggEBAH+2sI9RYcTR6vqg
BM3AEqQjthiyMxu3Mp8VCw6XDWbkY0abhTl6TPIIG+b4bp8v/Muy/FPXluTRvGYM
J/v3g/yPJZW8FxhudBwmVEuVgkbqr/IQF48/m+/tGdIl/GrvlCKFw27sIK/39aMK
+8Y1MqejkpkzLIeS8PEl7nGJ4R/ZlnxY78C2nD/jbip/vBoFhsyO6H4kxzTnpGx9
qR/iwMskqPdUq0Ank9O65MyaE+fAvIvFv7tgHbDnyFlBWvcZZFRNFbhNTm+1Jtk0
3i60N6e3dJI7AIWjLGTpR1aOlWHIQltUob4CujYFahp1mPm4nN6ZmIThLtUvPt2x
ZL2S+EM=
-----END CERTIFICATE-----
Generated at Sat Nov 2 22:25:48 2024 by rpki-client on console-fra.rpki-client.org