Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/323830343a326437383a3a2f33322d3332203d3e20323635323835.roa
File: 323830343a326437383a3a2f33322d3332203d3e20323635323835.roa (raw, json)
Hash identifier: E9oStWlTzTblRWrpitcKyprxZYsGyAqe6vmLxqjnARw=
Subject key identifier: 85:84:65:35:B0:F8:94:7D:B3:08:56:D4:FB:47:7F:85:C8:5E:62:29
Certificate issuer: /CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
Certificate serial: 375BEA83A556A4FC1040A970F7F24FA489FFDDD2
Authority key identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/323830343a326437383a3a2f33322d3332203d3e20323635323835.roa
Signing time: Thu 04 Jul 2024 13:20:33 +0000
ROA not before: Thu 04 Jul 2024 13:15:33 +0000
ROA not after: Thu 03 Jul 2025 13:20:33 +0000
asID: 265285
IP address blocks: 2804:2d78::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5b:ea:83:a5:56:a4:fc:10:40:a9:70:f7:f2:4f:a4:89:ff:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
Validity
Not Before: Jul 4 13:15:33 2024 GMT
Not After : Jul 3 13:20:33 2025 GMT
Subject: CN=85846535B0F8947DB30856D4FB477F85C85E6229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:31:b7:5f:0a:9c:a8:d1:df:32:60:4a:ad:
ef:80:54:df:99:7a:f2:7b:9e:a9:40:01:bb:4d:19:
3e:92:ef:a5:e2:ca:b6:ee:5f:d4:0e:93:74:98:db:
d2:f8:13:08:f0:10:c7:51:28:6e:a3:f6:5f:e6:8e:
ba:79:4e:65:db:75:73:ba:ba:50:9d:6a:f9:29:b5:
37:72:0f:96:e0:e2:17:90:59:e3:fa:9c:07:16:c7:
6a:e3:46:e8:3d:06:3b:49:3f:e6:68:39:86:f8:86:
fc:90:64:90:75:b8:29:29:52:a4:9a:42:b3:7c:0f:
d9:8b:be:0f:3f:4d:be:aa:6c:63:4d:e6:31:4b:5c:
96:e0:0a:62:01:75:9a:21:87:05:ad:15:f3:f6:3b:
b8:3c:7d:d8:ae:1f:be:b8:98:22:db:4f:0f:99:f3:
40:71:ba:d1:fc:a8:1a:17:1c:31:46:38:a9:f6:51:
cf:84:16:dc:a5:64:f8:5a:96:43:42:0c:4c:e0:e8:
6e:e4:31:25:13:3e:54:0a:4a:04:75:8d:99:08:b4:
c3:e3:69:3f:dd:e7:b3:04:53:e7:65:25:05:c3:8d:
2c:3f:4f:5f:f6:69:47:17:f0:b1:28:01:5c:57:f2:
8c:14:57:13:6a:ba:68:93:2f:a2:8f:2e:c6:95:e8:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:84:65:35:B0:F8:94:7D:B3:08:56:D4:FB:47:7F:85:C8:5E:62:29
X509v3 Authority Key Identifier:
keyid:3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/323830343a326437383a3a2f33322d3332203d3e20323635323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d78::/32
Signature Algorithm: sha256WithRSAEncryption
7e:36:69:05:f6:03:37:8f:dc:88:f6:1d:a2:8c:74:72:a0:c1:
59:69:b3:fc:b5:62:49:8e:f2:d3:90:42:39:d6:75:d5:0d:ec:
29:2d:d0:60:78:0f:24:9a:7c:ca:b2:44:28:66:58:f7:98:ef:
a6:86:1e:c8:03:59:a7:1c:d5:ab:85:9a:d0:c1:2c:c2:94:7c:
60:5b:c6:de:bb:6a:c5:1a:2c:13:12:98:06:78:6f:ce:8b:11:
f3:8e:23:db:e1:e2:63:1d:f2:6e:1c:f0:91:ee:bd:bf:67:57:
6f:6f:03:bd:98:c4:79:1f:fa:1f:c8:ea:14:b8:4f:4e:bb:87:
2f:aa:5d:39:e2:af:dd:8f:ca:40:4a:05:5b:51:0a:97:8d:59:
76:87:0a:d4:0b:14:85:48:78:ca:9c:78:42:8e:15:c4:46:25:
0a:5d:2f:3a:68:cc:af:97:09:d2:57:2b:12:0c:e1:a7:87:b1:
5d:18:1d:a9:ef:2f:90:ca:78:18:cf:ab:72:07:aa:c1:14:6d:
ca:55:4c:64:2d:da:16:04:3a:94:0d:8d:10:3b:58:ca:ad:09:
4b:2d:a3:7f:1d:d7:46:18:f7:43:83:b9:fb:6b:6a:94:ae:b3:
03:97:83:24:c7:d9:c5:ad:ec:11:ea:c9:2f:bd:11:32:cb:fc:
6d:d6:57:22
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUN1vqg6VWpPwQQKlw9/JPpIn/3dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMTgyMTRCMUJEMkU4OTgxODc5M0I2RTRCOTk2NzI3
OENBODdBMTAeFw0yNDA3MDQxMzE1MzNaFw0yNTA3MDMxMzIwMzNaMDMxMTAvBgNV
BAMTKDg1ODQ2NTM1QjBGODk0N0RCMzA4NTZENEZCNDc3Rjg1Qzg1RTYyMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QDG3XwqcqNHfMmBKre+AVN+Z
evJ7nqlAAbtNGT6S76XiyrbuX9QOk3SY29L4EwjwEMdRKG6j9l/mjrp5TmXbdXO6
ulCdavkptTdyD5bg4heQWeP6nAcWx2rjRug9BjtJP+ZoOYb4hvyQZJB1uCkpUqSa
QrN8D9mLvg8/Tb6qbGNN5jFLXJbgCmIBdZohhwWtFfP2O7g8fdiuH764mCLbTw+Z
80BxutH8qBoXHDFGOKn2Uc+EFtylZPhalkNCDEzg6G7kMSUTPlQKSgR1jZkItMPj
aT/d57MEU+dlJQXDjSw/T1/2aUcX8LEoAVxX8owUVxNqumiTL6KPLsaV6GKVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhYRlNbD4lH2zCFbU+0d/hcheYikwHwYDVR0j
BBgwFoAUPzGCFLG9LomBh5O25LmWcnjKh6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN
SzUvMC8zRjMxODIxNEIxQkQyRTg5ODE4NzkzQjZFNEI5OTY3Mjc4Q0E4N0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMzE4MjE0QjFCRDJFODk4
MTg3OTNCNkU0Qjk5NjcyNzhDQTg3QTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAv
MzIzODMwMzQzYTMyNjQzNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQteDANBgkqhkiG9w0BAQsFAAOCAQEAfjZpBfYD
N4/ciPYdoox0cqDBWWmz/LViSY7y05BCOdZ11Q3sKS3QYHgPJJp8yrJEKGZY95jv
poYeyANZpxzVq4Wa0MEswpR8YFvG3rtqxRosExKYBnhvzosR844j2+HiYx3ybhzw
ke69v2dXb28DvZjEeR/6H8jqFLhPTruHL6pdOeKv3Y/KQEoFW1EKl41ZdocK1AsU
hUh4ypx4Qo4VxEYlCl0vOmjMr5cJ0lcrEgzhp4exXRgdqe8vkMp4GM+rcgeqwRRt
ylVMZC3aFgQ6lA2NEDtYyq0JSy2jfx3XRhj3Q4O5+2tqlK6zA5eDJMfZxa3sEerJ
L70RMsv8bdZXIg==
-----END CERTIFICATE-----
Generated at Fri Nov 1 18:17:05 2024 by rpki-client on console-ams.rpki-client.org