Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3230302e33342e3231362e302f32332d3234203d3e203631363839.roa
File: 3230302e33342e3231362e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier: KBCzPBBkH7H6r5mPH1OwdigWl5S+eAjWl5YmTRbhUfQ=
Subject key identifier: F9:9E:80:57:EA:9F:4F:F9:B9:11:D5:38:24:6A:A7:FD:4F:29:E8:41
Certificate issuer: /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial: 071C1508728E108B26D1279A458ED8819411245A
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3230302e33342e3231362e302f32332d3234203d3e203631363839.roa
Signing time: Wed 10 Apr 2024 13:37:10 +0000
ROA not before: Wed 10 Apr 2024 13:32:10 +0000
ROA not after: Wed 09 Apr 2025 13:37:10 +0000
asID: 61689
IP address blocks: 200.34.216.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1c:15:08:72:8e:10:8b:26:d1:27:9a:45:8e:d8:81:94:11:24:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Validity
Not Before: Apr 10 13:32:10 2024 GMT
Not After : Apr 9 13:37:10 2025 GMT
Subject: CN=F99E8057EA9F4FF9B911D538246AA7FD4F29E841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:5a:8b:45:61:69:4a:b7:5f:b3:57:74:ae:
43:34:2f:92:18:fe:cc:5b:a8:d7:dd:36:25:df:e9:
0c:f3:57:48:53:0b:01:5b:47:1b:9c:2d:8f:65:24:
a4:72:17:b1:ea:89:78:15:ee:d9:ad:67:ec:f5:f6:
38:4f:72:56:7f:ba:0f:e6:bb:c9:98:fd:38:bd:3c:
50:de:07:2b:61:72:74:28:6b:8c:40:b5:67:7c:1d:
02:05:9d:f0:7a:46:b6:6f:cb:3a:49:b0:39:f3:df:
5e:62:77:c4:db:a1:e9:d5:6f:09:0f:fe:a9:b5:c9:
9b:9a:d9:dc:26:f9:4a:62:b0:d3:2d:9b:18:15:2a:
f9:e8:17:97:8e:97:21:ba:15:ea:61:c8:be:5b:37:
a7:41:0d:21:99:df:3f:7d:1e:82:7d:8c:c6:91:dc:
11:10:4f:54:35:53:b7:05:8c:22:e7:b7:3c:3b:6d:
ea:a5:83:2c:ff:15:d2:94:40:a9:fa:de:0c:0a:b0:
de:43:81:5e:61:34:d9:fc:84:24:5c:01:47:62:8e:
d7:19:18:c3:d1:56:c9:38:9e:63:94:31:24:88:b6:
9c:b7:9b:7d:24:c4:bc:b7:41:a1:ed:25:3f:35:b3:
89:3c:29:fd:c7:81:92:67:42:ef:51:4d:06:98:d7:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:80:57:EA:9F:4F:F9:B9:11:D5:38:24:6A:A7:FD:4F:29:E8:41
X509v3 Authority Key Identifier:
keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3230302e33342e3231362e302f32332d3234203d3e203631363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.34.216.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:e1:30:6b:15:82:f6:90:69:17:13:54:e9:5a:8e:85:0a:b1:
f5:3b:e5:7d:9e:35:ac:e4:ea:e2:b0:d0:78:83:d4:2b:c8:02:
29:c3:2c:c1:ed:49:48:86:38:54:20:04:6e:e6:66:b8:fa:4d:
46:1e:28:6b:ee:78:9a:1e:44:2e:cb:df:dd:8e:06:ac:d0:a1:
fe:5d:93:09:36:4a:d9:53:53:b9:3e:03:94:87:19:9f:a9:37:
21:3a:85:6e:fe:95:5d:45:c1:41:2d:af:f0:61:a6:03:de:ba:
e5:13:82:2a:19:42:02:97:51:57:9d:96:40:f1:2f:e0:1b:b6:
ef:80:80:85:9b:f8:a6:94:84:3b:e1:77:9e:9b:b2:b3:72:0b:
52:f6:f9:95:87:6e:97:c3:8f:18:3a:58:11:23:8e:6c:cb:51:
83:9c:8c:99:bc:28:cd:33:22:ec:28:15:49:1a:86:78:f3:92:
98:74:cc:cf:b3:c6:10:66:ca:3c:c2:69:a1:2c:43:03:e7:72:
99:17:58:be:46:5e:44:01:c4:1d:cf:b6:1f:1c:40:9b:df:70:
16:c9:e9:91:8f:28:9e:0a:7e:3d:1a:d1:b7:98:f4:6a:51:e8:
2e:68:20:f0:77:0b:8a:8e:49:7a:28:39:d0:63:4b:ec:46:53:
f1:e1:d0:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBxwVCHKOEIsm0SeaRY7YgZQRJFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1ODY0RjBDQjcyQzI0MEU5RENENkIwRTZCNDBBQzE2
NDk1REJBNzAeFw0yNDA0MTAxMzMyMTBaFw0yNTA0MDkxMzM3MTBaMDMxMTAvBgNV
BAMTKEY5OUU4MDU3RUE5RjRGRjlCOTExRDUzODI0NkFBN0ZENEYyOUU4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9VqLRWFpSrdfs1d0rkM0L5IY
/sxbqNfdNiXf6QzzV0hTCwFbRxucLY9lJKRyF7HqiXgV7tmtZ+z19jhPclZ/ug/m
u8mY/Ti9PFDeBythcnQoa4xAtWd8HQIFnfB6RrZvyzpJsDnz315id8TboenVbwkP
/qm1yZua2dwm+UpisNMtmxgVKvnoF5eOlyG6FephyL5bN6dBDSGZ3z99HoJ9jMaR
3BEQT1Q1U7cFjCLntzw7beqlgyz/FdKUQKn63gwKsN5DgV5hNNn8hCRcAUdijtcZ
GMPRVsk4nmOUMSSItpy3m30kxLy3QaHtJT81s4k8Kf3HgZJnQu9RTQaY10a5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+Z6AV+qfT/m5EdU4JGqn/U8p6EEwHwYDVR0j
BBgwFoAUJVhk8MtywkDp3Naw5rQKwWSV26cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODVud3A5c1BMdEwyNWlFTDFnNFIyZDlSenNtemtSVkNHM1d0ZXJFS1py
WHUvMS8yNTU4NjRGMENCNzJDMjQwRTlEQ0Q2QjBFNkI0MEFDMTY0OTVEQkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1NTg2NEYwQ0I3MkMyNDBF
OURDRDZCMEU2QjQwQUMxNjQ5NURCQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1bndwOXNQTHRMMjVpRUwxZzRSMmQ5UnpzbXprUlZDRzNXdGVyRUtaclh1LzEv
MzIzMDMwMmUzMzM0MmUzMjMxMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMx
MzYzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByCLYMA0GCSqGSIb3DQEBCwUAA4IBAQCP4TBrFYL2
kGkXE1TpWo6FCrH1O+V9njWs5OrisNB4g9QryAIpwyzB7UlIhjhUIARu5ma4+k1G
Hihr7niaHkQuy9/djgas0KH+XZMJNkrZU1O5PgOUhxmfqTchOoVu/pVdRcFBLa/w
YaYD3rrlE4IqGUICl1FXnZZA8S/gG7bvgICFm/imlIQ74Xeem7KzcgtS9vmVh26X
w48YOlgRI45sy1GDnIyZvCjNMyLsKBVJGoZ485KYdMzPs8YQZso8wmmhLEMD53KZ
F1i+Rl5EAcQdz7YfHECb33AWyemRjyieCn49GtG3mPRqUeguaCDwdwuKjkl6KDnQ
Y0vsRlPx4dAj
-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:03 2024 by rpki-client on console-ams.rpki-client.org