Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/323830343a66383a3a2f33322d313238203d3e203533313437.roa
File: 323830343a66383a3a2f33322d313238203d3e203533313437.roa (raw, json)
Hash identifier: nbS5Mhn66ZWxuLDmwar722Ywa0xONO+rOUrOqiluJNE=
Subject key identifier: A1:B5:C2:A4:EE:01:D4:E6:D0:5F:D6:3A:B0:D0:7C:A0:4E:85:BA:E4
Certificate issuer: /CN=9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4
Certificate serial: 014CC6E0E7B90C1E28693AB8E893445F645A6496
Authority key identifier: 9F:BC:DC:60:05:4A:9B:0B:53:B6:E9:F7:4B:B1:2B:10:94:39:7B:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/323830343a66383a3a2f33322d313238203d3e203533313437.roa
Signing time: Sun 30 Jun 2024 02:05:14 +0000
ROA not before: Sun 30 Jun 2024 02:00:14 +0000
ROA not after: Sun 29 Jun 2025 02:05:14 +0000
asID: 53147
IP address blocks: 2804:f8::/32 maxlen: 128
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4c:c6:e0:e7:b9:0c:1e:28:69:3a:b8:e8:93:44:5f:64:5a:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4
Validity
Not Before: Jun 30 02:00:14 2024 GMT
Not After : Jun 29 02:05:14 2025 GMT
Subject: CN=A1B5C2A4EE01D4E6D05FD63AB0D07CA04E85BAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:54:74:1b:8d:dd:1f:6f:76:de:a4:ed:9a:
5b:b5:82:69:b9:7b:ec:e2:2e:b8:75:0c:19:c8:0c:
15:bb:ed:7d:3e:0b:59:62:0d:77:0a:9c:9f:1d:4d:
ec:83:72:b5:92:e1:b7:ca:fd:7e:f1:82:58:51:ac:
7a:7d:20:fd:57:fe:23:bb:5a:10:18:d6:3e:76:e7:
b0:49:a1:d3:c3:79:bf:63:53:e4:c3:6b:c7:10:bf:
88:15:a0:f9:7d:20:ef:27:6b:45:5a:2c:72:76:a2:
d8:62:2f:0d:15:2a:8c:f5:75:a3:0f:fd:e1:78:11:
21:fb:e4:1e:cb:e1:c9:9e:c3:1c:3b:41:62:f9:b0:
60:90:55:52:36:86:ff:2a:22:cc:57:31:fc:dc:ef:
a2:50:c0:3d:a3:9c:87:65:f6:61:15:d9:80:9f:3b:
22:2b:a3:73:e2:db:fe:b0:bb:57:aa:62:de:de:ee:
da:39:85:ca:c3:ad:e7:c7:89:8f:bb:5d:ec:a6:0a:
1b:ab:13:c1:4e:35:c2:95:3d:a2:68:d0:18:b5:e2:
9a:b2:29:0e:77:55:9e:fe:10:d9:e5:31:01:0e:1e:
53:b3:3e:49:14:92:5f:26:3c:09:3f:0c:f2:22:a8:
02:b0:c0:63:75:7a:c4:e2:ae:8b:7d:df:50:f2:51:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:C2:A4:EE:01:D4:E6:D0:5F:D6:3A:B0:D0:7C:A0:4E:85:BA:E4
X509v3 Authority Key Identifier:
keyid:9F:BC:DC:60:05:4A:9B:0B:53:B6:E9:F7:4B:B1:2B:10:94:39:7B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/323830343a66383a3a2f33322d313238203d3e203533313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f8::/32
Signature Algorithm: sha256WithRSAEncryption
82:69:4d:a6:34:68:81:6a:97:9c:40:7a:4a:c1:7e:8b:59:39:
ca:0c:3c:fa:a3:ac:cc:c5:b8:64:50:cf:ad:92:fa:f7:f2:1f:
9d:83:d8:c2:8c:8c:80:c3:aa:b5:0a:c3:1e:55:97:a2:ab:82:
87:1d:1a:74:c0:de:64:0e:d6:21:9d:3a:86:4b:eb:a0:1c:cf:
ac:07:03:1a:8b:56:3e:4c:f3:e5:16:4b:47:c5:3e:0d:70:a8:
32:97:99:78:35:87:99:84:88:1c:21:37:de:46:8e:24:ae:c6:
d4:61:da:77:35:df:3a:1c:f8:87:c6:28:e6:47:be:b3:bc:bb:
b2:f8:3c:ce:14:35:d3:52:d0:5e:f8:4e:e6:4a:b2:fa:37:60:
6f:ee:64:7c:48:9e:2c:2b:4b:c4:03:35:c9:50:e3:b2:8f:1b:
73:c2:af:be:25:59:67:5b:29:a0:05:ed:8f:f6:ee:5a:b2:6f:
07:0b:e7:af:e1:97:a7:c4:21:81:fd:d6:63:cd:29:3c:a2:2b:
58:d1:4c:a7:e2:9f:c3:98:16:bc:7b:9d:4e:7f:13:2a:f1:b6:
34:a2:d1:87:f4:99:4a:c8:d8:95:31:00:ac:d5:69:cf:f9:0d:
26:06:db:4c:e5:0a:40:2c:5a:86:3e:d0:60:b9:10:ce:db:9f:
b9:e2:93:e0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUAUzG4Oe5DB4oaTq46JNEX2RaZJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZCQ0RDNjAwNTRBOUIwQjUzQjZFOUY3NEJCMTJCMTA5
NDM5N0JDNDAeFw0yNDA2MzAwMjAwMTRaFw0yNTA2MjkwMjA1MTRaMDMxMTAvBgNV
BAMTKEExQjVDMkE0RUUwMUQ0RTZEMDVGRDYzQUIwRDA3Q0EwNEU4NUJBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6C1R0G43dH2923qTtmlu1gmm5
e+ziLrh1DBnIDBW77X0+C1liDXcKnJ8dTeyDcrWS4bfK/X7xglhRrHp9IP1X/iO7
WhAY1j5257BJodPDeb9jU+TDa8cQv4gVoPl9IO8na0VaLHJ2othiLw0VKoz1daMP
/eF4ESH75B7L4cmewxw7QWL5sGCQVVI2hv8qIsxXMfzc76JQwD2jnIdl9mEV2YCf
OyIro3Pi2/6wu1eqYt7e7to5hcrDrefHiY+7XeymChurE8FONcKVPaJo0Bi14pqy
KQ53VZ7+ENnlMQEOHlOzPkkUkl8mPAk/DPIiqAKwwGN1esTirot931DyUZm5AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUobXCpO4B1ObQX9Y6sNB8oE6FuuQwHwYDVR0j
BBgwFoAUn7zcYAVKmwtTtun3S7ErEJQ5e8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZkOHBiZk52VXlZMW01NWNva3BrVW1yMWRBZG42RUdNWVdCY0NFYkNO
clYvMC85RkJDREM2MDA1NEE5QjBCNTNCNkU5Rjc0QkIxMkIxMDk0Mzk3QkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQkNEQzYwMDU0QTlCMEI1
M0I2RTlGNzRCQjEyQjEwOTQzOTdCQzQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2ZDhwYmZOdlV5WTFtNTVjb2twa1VtcjFkQWRuNkVHTVlXQmNDRWJDTnJWLzAv
MzIzODMwMzQzYTY2MzgzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDM1MzMzMTM0
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAD4MA0GCSqGSIb3DQEBCwUAA4IBAQCCaU2mNGiBapec
QHpKwX6LWTnKDDz6o6zMxbhkUM+tkvr38h+dg9jCjIyAw6q1CsMeVZeiq4KHHRp0
wN5kDtYhnTqGS+ugHM+sBwMai1Y+TPPlFktHxT4NcKgyl5l4NYeZhIgcITfeRo4k
rsbUYdp3Nd86HPiHxijmR76zvLuy+DzOFDXTUtBe+E7mSrL6N2Bv7mR8SJ4sK0vE
AzXJUOOyjxtzwq++JVlnWymgBe2P9u5asm8HC+ev4ZenxCGB/dZjzSk8oitY0Uyn
4p/DmBa8e51OfxMq8bY0otGH9JlKyNiVMQCs1WnP+Q0mBttM5QpALFqGPtBguRDO
25+54pPg
-----END CERTIFICATE-----
Generated at Sun Aug 11 15:25:48 2024 by rpki-client on console-ams.rpki-client.org