Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
File: 3137372e32312e3139322e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: cWJziVmT0o4t9DmMKVbbOKoLRRDtnjS6f4wH+nMXwlA=
Subject key identifier: A4:0F:B3:F2:13:A0:4B:94:DE:E1:F9:DA:C6:45:71:DD:CD:C8:8A:50
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 0EC2060A78E783760874DCC21CCCAAF51D1FC16C
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:28 +0000
ROA not before: Thu 31 Oct 2024 17:21:28 +0000
ROA not after: Thu 30 Oct 2025 17:26:28 +0000
asID: 28667
IP address blocks: 177.21.192.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c2:06:0a:78:e7:83:76:08:74:dc:c2:1c:cc:aa:f5:1d:1f:c1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:28 2024 GMT
Not After : Oct 30 17:26:28 2025 GMT
Subject: CN=A40FB3F213A04B94DEE1F9DAC64571DDCDC88A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:7a:93:b8:3f:c6:27:2a:0b:68:18:1f:90:
28:6b:4c:93:90:1c:19:d9:39:6e:76:47:d7:c5:19:
f6:1d:b6:ee:8d:9c:b0:e0:05:20:89:29:59:c1:36:
b6:4f:b7:d5:cb:06:ba:d4:3a:2f:8c:64:66:05:f5:
63:d7:34:e4:b7:6a:25:68:21:af:76:4a:40:fe:47:
25:4f:29:0b:79:11:ef:bd:b5:68:5a:bf:8d:cd:da:
15:6d:b9:b2:bd:b4:38:62:ca:42:25:66:02:fc:67:
e1:ae:37:44:d5:90:f4:8d:92:52:b5:1e:3b:da:06:
50:15:80:e6:94:38:81:3a:43:25:3c:26:29:d3:7c:
1f:c3:dd:9f:cf:c8:60:a4:a6:2a:a0:ce:a0:55:aa:
3a:05:12:51:af:16:ab:a3:ef:57:1d:a7:60:19:7c:
e2:c6:62:be:74:99:78:c9:19:40:6f:c2:05:50:e1:
1a:15:90:37:66:df:b0:75:e0:07:b1:4c:7a:35:7c:
53:15:ad:24:c3:2c:4a:ca:19:35:1a:69:e8:25:5d:
d9:d2:c3:0d:aa:a9:83:36:fc:0d:d1:8f:54:37:8b:
19:46:e2:85:9b:41:89:26:0e:25:3e:8f:a4:6f:7a:
cb:f6:a5:4e:35:fa:59:e6:02:ab:35:9f:59:87:ab:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:B3:F2:13:A0:4B:94:DE:E1:F9:DA:C6:45:71:DD:CD:C8:8A:50
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.192.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:13:54:22:87:cb:41:57:91:89:d4:a8:7e:2d:0d:4d:f8:48:
76:a0:ce:ba:6f:22:66:5a:cf:34:36:6d:c8:19:3e:a2:a1:30:
1e:2a:d5:f8:04:39:df:3e:38:5f:9a:27:e1:d4:2d:7a:0b:e7:
79:fc:f3:a7:1b:47:3f:3c:ba:46:c0:74:6b:02:40:39:95:73:
d1:6c:e1:af:21:c2:72:cc:3e:39:ed:25:c3:c3:3c:2f:fd:59:
bf:4c:75:89:87:5d:e9:1d:f8:b2:f0:28:78:fc:d3:c5:f4:41:
8d:9d:34:f3:68:56:95:04:88:a9:86:90:8a:ed:70:3d:3d:6d:
77:42:ed:62:87:7d:c7:9d:00:5e:ec:f9:68:b7:1e:13:62:dc:
15:77:11:25:23:ab:b9:ea:17:6d:6c:93:ec:c9:58:cf:28:a5:
05:31:46:97:c5:7c:d2:ee:7e:a0:64:63:31:76:10:30:29:15:
53:6e:48:0c:ed:89:f4:47:99:a2:c7:ac:08:c6:be:9d:5c:b8:
33:5d:e8:4e:99:76:b6:cf:5b:06:2c:3d:06:44:38:df:34:17:
85:21:01:4e:8d:be:24:04:8c:bd:fe:f6:43:77:db:41:1c:64:
aa:75:fc:2e:11:1f:09:97:af:04:01:d6:6a:a3:3b:c2:8f:f4:
f0:3b:d1:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDsIGCnjng3YIdNzCHMyq9R0fwWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzIxMjhaFw0yNTEwMzAxNzI2MjhaMDMxMTAvBgNV
BAMTKEE0MEZCM0YyMTNBMDRCOTRERUUxRjlEQUM2NDU3MUREQ0RDODhBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjnXqTuD/GJyoLaBgfkChrTJOQ
HBnZOW52R9fFGfYdtu6NnLDgBSCJKVnBNrZPt9XLBrrUOi+MZGYF9WPXNOS3aiVo
Ia92SkD+RyVPKQt5Ee+9tWhav43N2hVtubK9tDhiykIlZgL8Z+GuN0TVkPSNklK1
HjvaBlAVgOaUOIE6QyU8JinTfB/D3Z/PyGCkpiqgzqBVqjoFElGvFquj71cdp2AZ
fOLGYr50mXjJGUBvwgVQ4RoVkDdm37B14AexTHo1fFMVrSTDLErKGTUaaeglXdnS
ww2qqYM2/A3Rj1Q3ixlG4oWbQYkmDiU+j6Rvesv2pU41+lnmAqs1n1mHq4T/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpA+z8hOgS5Te4fnaxkVx3c3IilAwHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzNzM3MmUzMjMxMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsRXAMA0GCSqGSIb3DQEBCwUAA4IBAQBME1Qih8tB
V5GJ1Kh+LQ1N+Eh2oM66byJmWs80Nm3IGT6ioTAeKtX4BDnfPjhfmifh1C16C+d5
/POnG0c/PLpGwHRrAkA5lXPRbOGvIcJyzD457SXDwzwv/Vm/THWJh13pHfiy8Ch4
/NPF9EGNnTTzaFaVBIiphpCK7XA9PW13Qu1ih33HnQBe7Plotx4TYtwVdxElI6u5
6hdtbJPsyVjPKKUFMUaXxXzS7n6gZGMxdhAwKRVTbkgM7Yn0R5mix6wIxr6dXLgz
XehOmXa2z1sGLD0GRDjfNBeFIQFOjb4kBIy9/vZDd9tBHGSqdfwuER8Jl68EAdZq
ozvCj/TwO9Ho
-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org