Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
File: 3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier: tDFzgul5Tygp9e+bNl5An+APd5Q55ujoFzTMCWboOu8=
Subject key identifier: C3:08:6E:14:E6:41:82:42:DE:CF:9A:3A:92:07:99:8B:5F:2E:84:5B
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 1AA3DCF4BD50130B556CA8A85E50F19B9282F3E9
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
Signing time: Thu 31 Oct 2024 16:59:30 +0000
ROA not before: Thu 31 Oct 2024 16:54:30 +0000
ROA not after: Thu 30 Oct 2025 16:59:30 +0000
asID: 61844
IP address blocks: 138.255.212.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a3:dc:f4:bd:50:13:0b:55:6c:a8:a8:5e:50:f1:9b:92:82:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 16:54:30 2024 GMT
Not After : Oct 30 16:59:30 2025 GMT
Subject: CN=C3086E14E6418242DECF9A3A9207998B5F2E845B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:37:9c:fc:65:5e:6c:80:8b:68:0b:3c:95:
66:e2:71:77:6f:af:f8:91:a4:4c:cc:9b:b4:d9:99:
3d:60:28:a7:db:57:53:c4:df:36:5b:29:9e:d7:25:
30:be:be:77:20:9e:08:ab:bc:ba:77:ac:3f:89:c0:
e4:bf:64:5e:c7:3f:cf:ea:c5:9b:be:a8:59:09:df:
2e:0a:8f:c3:4a:2f:c1:53:4b:77:1e:92:95:c0:6e:
d5:1c:e7:f8:ad:e4:e6:da:9b:99:46:c3:ee:9d:ad:
69:7f:8d:15:c7:ae:1a:76:c7:b7:d5:85:9d:25:4b:
29:a2:72:ee:94:9d:e5:16:d2:29:ba:a4:a0:52:13:
37:e3:bd:4d:5d:9a:c0:98:c6:0f:28:bd:8c:06:f6:
de:00:23:5b:ef:2f:b4:6e:23:bc:c2:76:1b:a0:ee:
f5:db:e1:80:68:b7:48:6c:d4:44:fa:cd:a0:f1:b4:
22:19:54:65:9a:69:17:be:c5:a1:88:82:21:c1:74:
3c:35:e9:be:11:c5:db:59:75:d1:d9:7a:5f:15:e9:
26:82:e0:45:92:75:48:6c:65:6c:30:98:6b:f8:e4:
9d:c8:c4:01:4f:99:b6:36:55:2f:a3:3d:37:7d:9f:
36:07:9f:87:c2:a8:f4:1c:75:e6:09:bf:a3:50:aa:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:6E:14:E6:41:82:42:DE:CF:9A:3A:92:07:99:8B:5F:2E:84:5B
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
32:7d:b3:23:ba:4f:20:ef:e7:87:e7:cf:82:12:0a:2e:81:74:
ab:8b:a0:5a:2e:a6:af:cc:ce:52:8b:7a:47:ed:d8:47:d5:f3:
d6:8e:97:c3:3b:21:95:b7:f7:5e:91:ec:21:3b:c8:a0:80:24:
12:96:74:72:7f:6c:69:77:93:ac:04:a3:5f:62:26:3e:16:59:
84:af:3a:0b:19:40:f0:70:cd:6a:e3:b9:0d:0c:9e:f7:08:80:
2b:dc:54:97:69:cb:6a:90:fc:4a:e8:3e:a0:2b:4a:38:be:4d:
96:bb:90:17:27:90:15:5c:51:06:3e:52:4a:a8:13:df:d1:09:
1b:ab:5d:58:e7:70:66:db:5e:bc:82:f2:42:5f:ec:4d:88:77:
70:dd:9e:60:38:bd:3c:ee:63:75:e8:09:33:86:2d:44:b1:62:
64:08:3d:0e:82:e2:a8:fd:e9:23:86:4d:88:b5:0d:95:88:06:
d5:b4:2e:b8:a3:de:6c:bc:4a:47:44:8f:f0:f5:d9:ea:0e:6e:
c0:a6:07:d4:f9:0f:30:14:6b:20:fd:ba:ce:54:13:a7:35:4e:
8b:28:62:34:47:1b:c0:2a:77:20:37:00:42:b9:d1:50:f2:cd:
e2:8c:c6:3a:7a:97:be:c6:04:17:1e:18:e3:20:0d:1d:7d:e0:
42:33:b6:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGqPc9L1QEwtVbKioXlDxm5KC8+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNjU0MzBaFw0yNTEwMzAxNjU5MzBaMDMxMTAvBgNV
BAMTKEMzMDg2RTE0RTY0MTgyNDJERUNGOUEzQTkyMDc5OThCNUYyRTg0NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5gzec/GVebICLaAs8lWbicXdv
r/iRpEzMm7TZmT1gKKfbV1PE3zZbKZ7XJTC+vncgngirvLp3rD+JwOS/ZF7HP8/q
xZu+qFkJ3y4Kj8NKL8FTS3cekpXAbtUc5/it5Obam5lGw+6drWl/jRXHrhp2x7fV
hZ0lSymicu6UneUW0im6pKBSEzfjvU1dmsCYxg8ovYwG9t4AI1vvL7RuI7zCdhug
7vXb4YBot0hs1ET6zaDxtCIZVGWaaRe+xaGIgiHBdDw16b4RxdtZddHZel8V6SaC
4EWSdUhsZWwwmGv45J3IxAFPmbY2VS+jPTd9nzYHn4fCqPQcdeYJv6NQqmm1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwwhuFOZBgkLez5o6kgeZi18uhFswHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzMzM4MmUzMjM1MzUyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK/9QwDQYJKoZIhvcNAQELBQADggEBADJ9syO6
TyDv54fnz4ISCi6BdKuLoFoupq/MzlKLekft2EfV89aOl8M7IZW3916R7CE7yKCA
JBKWdHJ/bGl3k6wEo19iJj4WWYSvOgsZQPBwzWrjuQ0MnvcIgCvcVJdpy2qQ/Ero
PqArSji+TZa7kBcnkBVcUQY+UkqoE9/RCRurXVjncGbbXryC8kJf7E2Id3DdnmA4
vTzuY3XoCTOGLUSxYmQIPQ6C4qj96SOGTYi1DZWIBtW0Lrij3my8SkdEj/D12eoO
bsCmB9T5DzAUayD9us5UE6c1TosoYjRHG8AqdyA3AEK50VDyzeKMxjp6l77GBBce
GOMgDR194EIzti0=
-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org