Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/323830343a373239383a3a2f33322d3438203d3e20323730383633.roa
File: 323830343a373239383a3a2f33322d3438203d3e20323730383633.roa (raw, json)
Hash identifier: Zfj+FvXru3zUBJn1+se+V5e02To0tr0cFyTmAjcsLrc=
Subject key identifier: 79:B0:D3:94:91:5C:1A:FA:1F:C9:5B:D5:7D:9E:88:EA:D8:06:36:D2
Certificate issuer: /CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
Certificate serial: 6D58AAD29E135A79463C27219BF22734CCC76009
Authority key identifier: EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/323830343a373239383a3a2f33322d3438203d3e20323730383633.roa
Signing time: Mon 03 Jun 2024 19:14:55 +0000
ROA not before: Mon 03 Jun 2024 19:09:55 +0000
ROA not after: Mon 02 Jun 2025 19:14:55 +0000
asID: 270863
IP address blocks: 2804:7298::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:58:aa:d2:9e:13:5a:79:46:3c:27:21:9b:f2:27:34:cc:c7:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
Validity
Not Before: Jun 3 19:09:55 2024 GMT
Not After : Jun 2 19:14:55 2025 GMT
Subject: CN=79B0D394915C1AFA1FC95BD57D9E88EAD80636D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:81:3f:aa:75:71:04:ad:f2:ca:cd:2a:09:
40:79:d1:90:36:4b:3b:cc:e2:c1:f9:11:4c:ea:e8:
3b:a5:cf:25:d8:e1:d6:cf:77:71:39:a5:d0:d6:17:
cf:78:18:ad:cd:a4:6b:b1:59:3f:81:76:d9:cf:c8:
54:e3:ab:0b:c0:d2:51:5b:e1:50:ff:ad:b1:54:ca:
8d:8d:94:9c:c6:e3:f5:05:d9:32:59:a1:38:e5:1d:
75:d1:5a:a6:49:f8:72:8e:98:02:19:b5:bc:03:ce:
d8:40:cb:2e:a8:56:bf:74:86:81:15:64:3b:3e:ed:
b6:25:62:23:9e:4a:52:27:1d:42:61:36:74:14:92:
c7:86:26:98:92:7d:72:9f:d1:f6:e5:f5:f9:6f:30:
fc:3a:1a:63:31:c8:25:d1:b8:c3:f8:54:e2:80:97:
d8:42:23:d8:04:76:43:59:01:e8:b6:23:8b:7d:02:
f3:91:a8:85:d1:f6:ae:c9:45:af:f3:0e:15:a3:16:
31:b7:73:f7:24:10:55:95:15:9d:8a:98:cf:11:97:
9d:65:fb:0b:61:e5:ad:fc:6d:28:94:2f:15:b2:db:
50:6a:fb:b5:2c:3a:69:ef:b5:bb:31:1f:b6:f0:3a:
35:2d:6a:14:65:26:24:6e:a5:27:f6:0c:64:fb:5d:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:D3:94:91:5C:1A:FA:1F:C9:5B:D5:7D:9E:88:EA:D8:06:36:D2
X509v3 Authority Key Identifier:
keyid:EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/323830343a373239383a3a2f33322d3438203d3e20323730383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7298::/32
Signature Algorithm: sha256WithRSAEncryption
6f:5a:52:a8:24:09:ef:64:70:9e:02:f1:36:b0:c6:a3:60:0e:
76:f5:f7:5d:20:6e:35:32:cd:9e:fc:5a:d5:29:08:f0:34:59:
d5:d7:aa:68:a4:a1:32:14:bd:0c:fc:6f:06:8e:58:59:f8:7c:
a5:bc:02:9e:f2:76:02:66:29:84:d5:af:9c:b0:c0:3b:2d:30:
b0:8c:3b:04:fc:06:44:a3:36:64:44:e5:43:7b:ec:81:c8:d0:
a5:c1:aa:46:e5:c1:72:48:0d:c7:68:9b:d3:55:35:44:3f:82:
36:70:0b:39:0f:89:50:a9:3f:b7:b6:34:c0:cf:e0:82:c7:e4:
54:32:5d:ee:79:e3:9f:a8:75:ca:35:4b:72:c3:bb:c9:bf:f2:
d7:52:6d:c6:b1:6e:5a:e6:9b:2e:26:92:cd:cb:7e:e1:ec:67:
82:3e:9e:99:d5:75:3b:22:0d:cb:11:54:92:be:f6:1e:26:ca:
ce:6b:be:b8:09:57:eb:28:65:c3:27:bb:b9:6c:93:3e:45:ea:
cc:53:4d:c5:d7:6b:e7:26:02:9b:5d:ec:c8:8d:39:8b:05:e1:
79:53:95:73:dc:e1:a1:76:88:85:d4:70:b0:e4:7a:46:85:33:
66:b7:92:77:f5:5c:fb:98:f9:dc:d9:0c:4b:6b:25:56:e8:e8:
b9:ee:25:de
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbViq0p4TWnlGPCchm/InNMzHYAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI5RjU3Q0E0MDVGOTk4RDJBMEU4NUMwQkIwNUVFNjZC
OTA0MDY3NzAeFw0yNDA2MDMxOTA5NTVaFw0yNTA2MDIxOTE0NTVaMDMxMTAvBgNV
BAMTKDc5QjBEMzk0OTE1QzFBRkExRkM5NUJENTdEOUU4OEVBRDgwNjM2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBYE/qnVxBK3yys0qCUB50ZA2
SzvM4sH5EUzq6DulzyXY4dbPd3E5pdDWF894GK3NpGuxWT+BdtnPyFTjqwvA0lFb
4VD/rbFUyo2NlJzG4/UF2TJZoTjlHXXRWqZJ+HKOmAIZtbwDzthAyy6oVr90hoEV
ZDs+7bYlYiOeSlInHUJhNnQUkseGJpiSfXKf0fbl9flvMPw6GmMxyCXRuMP4VOKA
l9hCI9gEdkNZAei2I4t9AvORqIXR9q7JRa/zDhWjFjG3c/ckEFWVFZ2KmM8Rl51l
+wth5a38bSiULxWy21Bq+7UsOmnvtbsxH7bwOjUtahRlJiRupSf2DGT7XUyrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUebDTlJFcGvofyVvVfZ6I6tgGNtIwHwYDVR0j
BBgwFoAU659XykBfmY0qDoXAuwXuZrkEBncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmpnYkFmMzViV2RWVndaRGNmN3dQQVlBUnpZaXN0RDdUc1J3TVZGWnRU
TU0vMC9FQjlGNTdDQTQwNUY5OThEMkEwRTg1QzBCQjA1RUU2NkI5MDQwNjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCOUY1N0NBNDA1Rjk5OEQy
QTBFODVDMEJCMDVFRTY2QjkwNDA2NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZqZ2JBZjM1YldkVlZ3WkRjZjd3UEFZQVJ6WWlzdEQ3VHNSd01WRlp0VE1NLzAv
MzIzODMwMzQzYTM3MzIzOTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzgzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARymDANBgkqhkiG9w0BAQsFAAOCAQEAb1pSqCQJ
72RwngLxNrDGo2AOdvX3XSBuNTLNnvxa1SkI8DRZ1deqaKShMhS9DPxvBo5YWfh8
pbwCnvJ2AmYphNWvnLDAOy0wsIw7BPwGRKM2ZETlQ3vsgcjQpcGqRuXBckgNx2ib
01U1RD+CNnALOQ+JUKk/t7Y0wM/ggsfkVDJd7nnjn6h1yjVLcsO7yb/y11JtxrFu
WuabLiaSzct+4exngj6emdV1OyINyxFUkr72HibKzmu+uAlX6yhlwye7uWyTPkXq
zFNNxddr5yYCm13syI05iwXheVOVc9zhoXaIhdRwsOR6RoUzZreSd/Vc+5j53NkM
S2slVujoue4l3g==
-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org