Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/3137372e3132382e3233322e302f32322d3234203d3e20323632333830.roa
File: 3137372e3132382e3233322e302f32322d3234203d3e20323632333830.roa (raw, json)
Hash identifier: inGZOcTlnsoSurSNDdxfL9DKnOrRqjSUA6p5AzHIVFg=
Subject key identifier: FC:DD:6E:81:19:7F:27:35:39:4C:B2:22:F6:7B:A0:81:38:58:F3:9F
Certificate issuer: /CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE
Certificate serial: 7AB7AB419CBD13333F0B4BC149A9BF60081DEEB6
Authority key identifier: D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/3137372e3132382e3233322e302f32322d3234203d3e20323632333830.roa
Signing time: Thu 04 Apr 2024 13:49:27 +0000
ROA not before: Thu 04 Apr 2024 13:44:27 +0000
ROA not after: Thu 03 Apr 2025 13:49:27 +0000
asID: 262380
IP address blocks: 177.128.232.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b7:ab:41:9c:bd:13:33:3f:0b:4b:c1:49:a9:bf:60:08:1d:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE
Validity
Not Before: Apr 4 13:44:27 2024 GMT
Not After : Apr 3 13:49:27 2025 GMT
Subject: CN=FCDD6E81197F2735394CB222F67BA0813858F39F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:33:7a:bc:2f:22:66:6b:34:24:3b:4a:d6:
86:83:62:a8:4f:93:b5:4b:96:01:12:3c:f3:30:5e:
e9:32:8c:18:7d:13:58:2e:a8:b1:bd:e4:25:e3:28:
df:5c:99:ce:43:15:e1:24:7c:2c:df:a0:64:68:25:
4c:eb:24:21:d9:c0:77:c4:de:9c:52:21:38:38:e8:
c3:45:ca:95:34:a0:99:c1:10:0d:99:b4:1c:0f:cd:
05:88:d0:32:28:9b:ee:f4:b5:4d:8f:74:4e:b8:1e:
86:6b:33:83:ad:48:2a:00:ad:dc:fa:79:b5:27:c0:
42:f6:f8:0a:d7:c9:96:6e:03:3f:1a:de:a4:03:35:
dc:0c:39:8f:81:44:41:e3:b9:48:b0:62:3e:25:e7:
bb:05:4d:23:ed:69:28:f7:8d:3a:5a:00:75:37:37:
27:b5:74:12:0f:a0:cd:d1:af:32:d1:97:d2:63:cc:
0f:1c:eb:a7:88:03:fb:54:24:62:18:59:1c:6d:bd:
54:2d:16:27:b1:34:a9:69:38:5f:c3:fe:5c:c8:17:
ae:cb:eb:f0:53:78:16:c2:90:76:bd:e9:57:e5:06:
bb:86:68:6c:ce:85:a9:39:74:46:a8:a5:6f:90:96:
dd:20:bb:a0:56:cd:46:70:b0:e8:98:62:0d:b3:f0:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DD:6E:81:19:7F:27:35:39:4C:B2:22:F6:7B:A0:81:38:58:F3:9F
X509v3 Authority Key Identifier:
keyid:D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/3137372e3132382e3233322e302f32322d3234203d3e20323632333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:c9:4d:e3:6f:77:c9:d2:5c:1a:58:d3:21:c1:b9:29:5d:d2:
e2:d1:87:bd:04:a5:7a:96:dc:8a:97:8f:69:da:27:0d:e0:f2:
37:c3:a6:f9:15:78:6d:3c:d6:17:3c:38:f9:1e:20:f1:95:e0:
3d:43:97:ff:e5:8a:38:01:62:17:94:aa:47:c9:ad:70:9a:6b:
05:d4:63:04:c0:79:7a:e8:84:52:4b:b5:2e:42:fb:ad:75:ad:
c5:54:a3:41:05:6a:23:46:99:70:03:94:59:0c:7d:45:24:4b:
f4:02:1e:64:8f:74:ae:4b:a7:af:ff:b9:d2:45:91:2d:f5:f8:
54:dc:8c:a2:36:b2:2b:1f:27:b7:d2:15:d5:f3:bb:59:2a:7b:
1a:3d:f2:50:e2:fb:de:d3:ee:04:7e:66:ac:26:d4:52:da:c5:
4e:a8:2c:fa:73:00:86:d5:19:78:b0:5d:ce:64:51:5a:77:ea:
69:85:b9:f7:13:10:b9:eb:0b:03:cf:c7:c4:b4:7f:07:57:ad:
d3:2c:14:f9:83:11:d5:21:7a:88:5b:8e:7e:f4:d1:b3:34:24:
c3:9c:cb:18:50:b8:43:7e:8f:54:31:2c:4f:4b:55:6e:96:20:
3a:1b:6d:5a:48:69:58:98:10:76:93:84:89:5f:60:f0:ae:c5:
f5:6d:9c:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUererQZy9EzM/C0vBSam/YAgd7rYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcwNzBCREE4QkVFM0U0MTA0MUU3REY2OEFDMkJBRDQ2
NURGNjBERTAeFw0yNDA0MDQxMzQ0MjdaFw0yNTA0MDMxMzQ5MjdaMDMxMTAvBgNV
BAMTKEZDREQ2RTgxMTk3RjI3MzUzOTRDQjIyMkY2N0JBMDgxMzg1OEYzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDzN6vC8iZms0JDtK1oaDYqhP
k7VLlgESPPMwXukyjBh9E1guqLG95CXjKN9cmc5DFeEkfCzfoGRoJUzrJCHZwHfE
3pxSITg46MNFypU0oJnBEA2ZtBwPzQWI0DIom+70tU2PdE64HoZrM4OtSCoArdz6
ebUnwEL2+ArXyZZuAz8a3qQDNdwMOY+BREHjuUiwYj4l57sFTSPtaSj3jTpaAHU3
Nye1dBIPoM3RrzLRl9JjzA8c66eIA/tUJGIYWRxtvVQtFiexNKlpOF/D/lzIF67L
6/BTeBbCkHa96VflBruGaGzOhak5dEaopW+Qlt0gu6BWzUZwsOiYYg2z8AI5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/N1ugRl/JzU5TLIi9nuggThY858wHwYDVR0j
BBgwFoAU1wcL2ovuPkEEHn32isK61GXfYN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWJoNzhuV0tDYnNveHpZZ2lVWFBaalR4djJRQ3FQZXJwbVoxR3FyaG1E
cWYvMS9ENzA3MEJEQThCRUUzRTQxMDQxRTdERjY4QUMyQkFENDY1REY2MERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MDcwQkRBOEJFRTNFNDEw
NDFFN0RGNjhBQzJCQUQ0NjVERjYwREUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzViaDc4bldLQ2Jzb3h6WWdpVVhQWmpUeHYyUUNxUGVycG1aMUdxcmhtRHFmLzEv
MzEzNzM3MmUzMTMyMzgyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGA6DANBgkqhkiG9w0BAQsFAAOCAQEAislN
4293ydJcGljTIcG5KV3S4tGHvQSlepbcipePadonDeDyN8Om+RV4bTzWFzw4+R4g
8ZXgPUOX/+WKOAFiF5SqR8mtcJprBdRjBMB5euiEUku1LkL7rXWtxVSjQQVqI0aZ
cAOUWQx9RSRL9AIeZI90rkunr/+50kWRLfX4VNyMojayKx8nt9IV1fO7WSp7Gj3y
UOL73tPuBH5mrCbUUtrFTqgs+nMAhtUZeLBdzmRRWnfqaYW59xMQuesLA8/HxLR/
B1et0ywU+YMR1SF6iFuOfvTRszQkw5zLGFC4Q36PVDEsT0tVbpYgOhttWkhpWJgQ
dpOEiV9g8K7F9W2cSQ==
-----END CERTIFICATE-----
Generated at Wed Nov 6 23:03:49 2024 by rpki-client on console-ams.rpki-client.org