Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
File: 3138392e37362e3230382e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier: osNvA8QDsWrL93vBP9Vrt+XKaaxG0mAqDZAHbpccxpA=
Subject key identifier: 9F:B5:A2:AA:75:99:DE:79:1A:6E:D3:A7:02:2E:1C:A1:38:89:F9:9B
Certificate issuer: /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial: 4E53B72D7DFB99016FBDB38AF4409F9B2482D6F3
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 03:05:57 +0000
ROA not before: Sat 06 Apr 2024 03:00:57 +0000
ROA not after: Sat 05 Apr 2025 03:05:57 +0000
asID: 28360
IP address blocks: 189.76.208.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:53:b7:2d:7d:fb:99:01:6f:bd:b3:8a:f4:40:9f:9b:24:82:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
Validity
Not Before: Apr 6 03:00:57 2024 GMT
Not After : Apr 5 03:05:57 2025 GMT
Subject: CN=9FB5A2AA7599DE791A6ED3A7022E1CA13889F99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:d1:44:07:00:15:7a:bd:aa:a7:b9:e2:48:
2f:df:ab:05:e3:c4:17:74:e4:37:e8:c2:90:3f:53:
7d:26:38:1a:8d:ad:c0:af:9f:8a:b2:c8:01:76:44:
78:b3:80:dc:65:e6:6b:4d:0f:ed:e0:5d:bb:89:46:
80:4e:70:1f:0f:90:6e:3e:ff:8d:a5:37:4e:bb:01:
b1:42:cf:a0:fc:e0:ac:1c:0e:4d:2c:a9:9c:ba:9f:
61:a2:7a:f1:47:36:74:a0:2b:bd:dd:e5:c9:76:f0:
2d:34:97:75:e7:aa:f4:00:72:b0:05:4d:b4:ee:04:
c0:cd:b2:cc:c8:12:a8:84:2a:3d:27:77:7d:52:b0:
d6:32:74:60:ee:c9:e2:a5:84:31:cb:5f:8f:30:30:
04:4d:a8:29:ca:4c:8f:c9:5d:b1:68:a4:a9:f5:2b:
38:f3:ea:67:23:e4:4f:de:ce:b4:45:ac:e5:e6:b3:
62:16:54:fc:7e:11:8a:6f:18:1d:f9:ef:7e:80:02:
60:fa:90:80:dc:d7:25:47:be:12:32:a9:c7:7c:d9:
26:2e:d2:ad:e0:85:b8:a3:4a:e5:a6:03:b8:71:25:
cf:dc:28:da:b4:e0:3b:9d:d2:d6:04:95:30:6b:75:
45:b0:95:c9:e0:a2:7c:da:bf:a0:bb:a3:e5:32:27:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:A2:AA:75:99:DE:79:1A:6E:D3:A7:02:2E:1C:A1:38:89:F9:9B
X509v3 Authority Key Identifier:
keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.208.0/20
Signature Algorithm: sha256WithRSAEncryption
80:da:3c:df:c8:7d:d5:06:44:75:9e:72:19:0a:80:47:a4:e1:
5c:0b:2c:82:fc:ba:73:91:c5:8f:08:78:8c:f5:cf:6d:77:bc:
5b:56:b9:70:5e:07:ad:65:a5:44:fd:a8:32:ea:15:ea:b8:8a:
e5:ef:d7:eb:c5:c7:f0:fa:a4:48:42:ca:68:0e:8b:30:24:5c:
2d:74:a1:9e:38:26:c5:08:c0:c8:f5:87:91:a6:37:27:b7:e2:
48:32:bb:96:d1:fd:0c:e2:fd:6a:62:47:73:7a:83:8a:98:c7:
ad:51:ed:79:03:c0:34:2a:d9:5a:42:5c:df:0b:ab:ef:92:d9:
8e:b1:f5:4f:e9:a0:f7:e6:92:18:62:ec:07:12:5a:80:6b:d3:
e9:c9:87:a8:b6:0c:27:92:ae:c5:86:b4:2f:92:2d:56:76:0e:
c5:5c:2c:2f:7d:22:ba:44:f2:09:73:6e:02:f9:66:42:32:69:
5d:7e:af:31:41:a8:d8:87:c9:b4:b0:5f:f8:fd:d2:3a:66:4c:
e5:39:b5:18:d0:80:e3:5a:f3:36:e9:8f:a7:fc:1b:6e:bf:99:
c5:64:47:65:16:b7:af:64:96:42:2d:1e:ea:58:bc:93:39:a9:
6d:d3:7a:90:8b:50:25:b5:31:af:41:3d:ae:21:8e:1c:f5:6f:
23:03:47:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTlO3LX37mQFvvbOK9ECfmySC1vMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNEQjgzNkMyMDc3QjQzRUQ4ODFBMDY1QTREQzIxNjEx
NDUwM0NFRTAeFw0yNDA0MDYwMzAwNTdaFw0yNTA0MDUwMzA1NTdaMDMxMTAvBgNV
BAMTKDlGQjVBMkFBNzU5OURFNzkxQTZFRDNBNzAyMkUxQ0ExMzg4OUY5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CNFEBwAVer2qp7niSC/fqwXj
xBd05DfowpA/U30mOBqNrcCvn4qyyAF2RHizgNxl5mtND+3gXbuJRoBOcB8PkG4+
/42lN067AbFCz6D84KwcDk0sqZy6n2GievFHNnSgK73d5cl28C00l3XnqvQAcrAF
TbTuBMDNsszIEqiEKj0nd31SsNYydGDuyeKlhDHLX48wMARNqCnKTI/JXbFopKn1
Kzjz6mcj5E/ezrRFrOXms2IWVPx+EYpvGB35736AAmD6kIDc1yVHvhIyqcd82SYu
0q3ghbijSuWmA7hxJc/cKNq04Dud0tYElTBrdUWwlcngonzav6C7o+UyJ5pLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn7WiqnWZ3nkabtOnAi4coTiJ+ZswHwYDVR0j
BBgwFoAUQ9uDbCB3tD7YgaBlpNwhYRRQPO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMS80M0RCODM2QzIwNzdCNDNFRDg4MUEwNjVBNERDMjE2MTE0NTAzQ0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzREI4MzZDMjA3N0I0M0VE
ODgxQTA2NUE0REMyMTYxMTQ1MDNDRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzEv
MzEzODM5MmUzNzM2MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvUzQMA0GCSqGSIb3DQEBCwUAA4IBAQCA2jzfyH3V
BkR1nnIZCoBHpOFcCyyC/LpzkcWPCHiM9c9td7xbVrlwXgetZaVE/agy6hXquIrl
79frxcfw+qRIQspoDoswJFwtdKGeOCbFCMDI9YeRpjcnt+JIMruW0f0M4v1qYkdz
eoOKmMetUe15A8A0KtlaQlzfC6vvktmOsfVP6aD35pIYYuwHElqAa9PpyYeotgwn
kq7FhrQvki1Wdg7FXCwvfSK6RPIJc24C+WZCMmldfq8xQajYh8m0sF/4/dI6Zkzl
ObUY0IDjWvM26Y+n/Btuv5nFZEdlFrevZJZCLR7qWLyTOalt03qQi1AltTGvQT2u
IY4c9W8jA0cG
-----END CERTIFICATE-----
Generated at Sun Aug 4 16:07:11 2024 by rpki-client on console-ams.rpki-client.org