Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
File: 3138362e3233362e39362e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier: SZRIlM+gFxZUQL6hCWx001z3G/04MFy/PPYQNv0zRnY=
Subject key identifier: 71:3E:26:4C:CB:CF:10:F5:F9:3F:66:17:E7:1E:B3:CD:62:37:A5:88
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 075764DAAB3BF7C1E49CEDCBBB00BE9CAA330CAF
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:20 +0000
ROA not before: Thu 31 Oct 2024 17:21:20 +0000
ROA not after: Thu 30 Oct 2025 17:26:20 +0000
asID: 28667
IP address blocks: 186.236.96.0/19 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:64:da:ab:3b:f7:c1:e4:9c:ed:cb:bb:00:be:9c:aa:33:0c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:20 2024 GMT
Not After : Oct 30 17:26:20 2025 GMT
Subject: CN=713E264CCBCF10F5F93F6617E71EB3CD6237A588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:e3:64:fb:8d:1a:a7:1a:c3:f2:49:4d:6c:
49:89:82:2b:b7:eb:f1:5b:9c:5f:48:03:06:2e:6f:
0c:f4:88:51:e6:d6:f2:08:1c:12:65:a0:8f:5c:99:
5d:6e:dd:46:ac:21:ff:e7:5e:44:f3:f8:a6:10:17:
04:bf:a8:90:da:c5:dd:1c:3a:e9:33:4e:82:39:7a:
f7:ab:e6:d1:21:1e:b4:ec:f5:61:32:e6:96:74:8c:
bb:0c:a7:63:ba:b5:fb:4b:80:1b:20:ec:81:98:02:
84:b2:1b:af:92:c2:5e:3a:71:9c:d0:22:c3:6c:73:
0d:1b:83:53:cc:ad:2e:68:58:08:a4:63:9e:03:fe:
4c:45:45:24:bb:3f:52:3e:fe:e9:d3:b5:94:fb:bc:
cb:10:5c:88:db:0e:a2:18:81:3b:5e:42:fe:8f:db:
c8:4a:7d:2b:74:d8:11:ac:f6:a5:50:3b:42:a5:3f:
45:b1:f8:8c:25:d4:09:9e:e0:b3:60:42:1e:67:30:
24:e7:8f:d6:a6:ee:8f:fb:9e:fe:ad:f3:9d:8f:77:
42:39:d6:81:50:1f:04:3b:15:67:83:af:34:08:84:
9c:b0:1f:e0:b1:9e:09:7b:ff:47:ff:73:79:54:85:
12:cd:2e:d6:93:26:45:90:07:3a:08:ed:09:49:9d:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3E:26:4C:CB:CF:10:F5:F9:3F:66:17:E7:1E:B3:CD:62:37:A5:88
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.236.96.0/19
Signature Algorithm: sha256WithRSAEncryption
23:b5:b0:88:82:6a:49:7e:98:b0:1d:d7:67:e1:bc:75:86:0e:
b3:ea:5f:e2:db:b4:7b:ad:21:98:6c:c9:f7:8d:ac:bf:23:0d:
29:b6:00:3e:13:35:e9:86:77:d9:bd:f6:55:5e:4a:98:19:a9:
01:d8:67:d9:33:73:2d:79:a4:32:33:6a:4e:15:89:69:d1:b8:
57:65:90:34:4a:16:7c:21:88:ac:12:86:7d:2e:40:35:31:8b:
49:a6:d1:1f:ac:55:c8:e9:4c:28:7f:af:67:8d:d6:8a:88:6d:
94:a1:51:ac:4a:1a:d8:80:d0:0a:f1:c8:46:8a:26:de:1f:9b:
da:82:96:3c:ac:35:67:cf:02:41:b1:45:ea:57:15:14:05:86:
2f:65:db:99:a0:68:9c:22:43:d1:b1:c9:db:67:0f:70:e8:65:
3a:17:37:07:8c:f4:8d:c2:32:80:63:d8:32:7a:98:0b:0e:08:
68:cb:db:af:5b:ee:f6:9f:58:7b:f7:d7:fc:e8:fe:ee:b4:dc:
db:ab:b2:c9:54:b7:79:20:d1:ef:0f:a1:59:2b:9b:a4:7d:aa:
c8:d3:c5:84:bc:f2:a3:7b:9d:0d:37:b8:a1:ed:e8:46:cf:5f:
f1:33:29:c6:a1:99:be:44:b7:e1:bd:28:8b:43:76:d8:b8:78:
8e:4c:86:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB1dk2qs798HknO3LuwC+nKozDK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzIxMjBaFw0yNTEwMzAxNzI2MjBaMDMxMTAvBgNV
BAMTKDcxM0UyNjRDQ0JDRjEwRjVGOTNGNjYxN0U3MUVCM0NENjIzN0E1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuONk+40apxrD8klNbEmJgiu3
6/FbnF9IAwYubwz0iFHm1vIIHBJloI9cmV1u3UasIf/nXkTz+KYQFwS/qJDaxd0c
OukzToI5ever5tEhHrTs9WEy5pZ0jLsMp2O6tftLgBsg7IGYAoSyG6+Swl46cZzQ
IsNscw0bg1PMrS5oWAikY54D/kxFRSS7P1I+/unTtZT7vMsQXIjbDqIYgTteQv6P
28hKfSt02BGs9qVQO0KlP0Wx+Iwl1Ame4LNgQh5nMCTnj9am7o/7nv6t852Pd0I5
1oFQHwQ7FWeDrzQIhJywH+Cxngl7/0f/c3lUhRLNLtaTJkWQBzoI7QlJnYyjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcT4mTMvPEPX5P2YX5x6zzWI3pYgwHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzODM2MmUzMjMzMzYyZTM5MzYyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFuuxgMA0GCSqGSIb3DQEBCwUAA4IBAQAjtbCIgmpJ
fpiwHddn4bx1hg6z6l/i27R7rSGYbMn3jay/Iw0ptgA+EzXphnfZvfZVXkqYGakB
2GfZM3MteaQyM2pOFYlp0bhXZZA0ShZ8IYisEoZ9LkA1MYtJptEfrFXI6Uwof69n
jdaKiG2UoVGsShrYgNAK8chGiibeH5vagpY8rDVnzwJBsUXqVxUUBYYvZduZoGic
IkPRscnbZw9w6GU6FzcHjPSNwjKAY9gyepgLDghoy9uvW+72n1h799f86P7utNzb
q7LJVLd5INHvD6FZK5ukfarI08WEvPKje50NN7ih7ehGz1/xMynGoZm+RLfhvSiL
Q3bYuHiOTIbH
-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org