Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139312e302f32342d3234203d3e20323730383538.roa
File: 3137392e302e3139312e302f32342d3234203d3e20323730383538.roa (raw, json)
Hash identifier: h9mHAHS1NJobLjozaByidxXaX3YuaaiyCUzFSlHw+oc=
Subject key identifier: 7E:82:02:69:9C:4C:6F:C9:09:4F:C5:AA:C8:C9:92:42:45:F0:90:80
Certificate issuer: /CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Certificate serial: 3F8D47A873FF2C76C86264B3C99AA6E4FE26A9F8
Authority key identifier: B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139312e302f32342d3234203d3e20323730383538.roa
Signing time: Fri 15 Nov 2024 14:00:00 +0000
ROA not before: Fri 15 Nov 2024 13:55:00 +0000
ROA not after: Fri 14 Nov 2025 14:00:00 +0000
asID: 270858
IP address blocks: 179.0.191.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8d:47:a8:73:ff:2c:76:c8:62:64:b3:c9:9a:a6:e4:fe:26:a9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Validity
Not Before: Nov 15 13:55:00 2024 GMT
Not After : Nov 14 14:00:00 2025 GMT
Subject: CN=7E8202699C4C6FC9094FC5AAC8C9924245F09080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:be:a8:94:87:85:38:b1:6b:86:c2:a8:a1:
1e:35:5e:22:81:3c:fe:5d:a2:6d:09:5a:4c:cd:c2:
c7:74:f1:67:3d:6a:75:55:eb:d5:2e:2e:e0:89:fe:
d5:a7:9e:d1:5e:02:b0:b6:ff:71:b1:23:a2:9d:94:
a4:a1:b3:c1:bf:0f:ea:5b:c4:c9:a7:1b:32:70:f4:
48:e1:03:5b:10:f9:f9:c0:e7:a7:ac:ea:03:8e:1c:
da:27:4b:d1:f4:11:f2:53:1c:d6:7e:a2:32:60:09:
17:07:77:7a:5f:c7:85:14:62:cb:b2:1b:79:47:5d:
40:54:dd:35:0f:11:d3:e9:a4:b0:0d:a4:24:1e:d6:
3f:6d:c1:3a:cf:24:32:18:fd:8f:58:ab:43:6d:4d:
56:15:07:a0:c4:0c:11:83:03:e7:20:27:bd:3d:86:
08:7f:79:69:9f:36:4c:8c:d4:12:2c:df:b1:bc:76:
ce:3f:ee:07:bc:d6:54:b8:bf:e8:ea:73:d2:2b:11:
6a:70:fc:2f:f4:57:8c:67:0f:ec:f0:f9:39:17:dc:
6c:24:d6:76:aa:91:05:a9:2c:b8:11:c5:36:39:55:
b7:a1:ad:1c:27:81:09:8d:43:50:16:a8:8a:5c:ab:
6a:00:1c:28:0a:8d:f7:56:5d:85:3d:20:53:95:f4:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:02:69:9C:4C:6F:C9:09:4F:C5:AA:C8:C9:92:42:45:F0:90:80
X509v3 Authority Key Identifier:
keyid:B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139312e302f32342d3234203d3e20323730383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:66:ae:17:0a:aa:c1:67:87:a9:d9:61:0a:7a:8b:7e:37:41:
8a:7f:6a:d1:90:5d:6f:9c:5e:56:c2:c8:c3:b0:f7:3f:5d:d7:
b6:7b:c0:96:5f:8c:42:88:52:1c:29:8f:26:cc:8e:de:b4:5b:
19:f7:be:8c:bc:d8:c2:c3:32:ee:8a:78:cb:4f:44:8d:b2:f6:
a2:c6:fc:4e:72:8d:d3:fc:95:5e:59:2c:4b:f6:46:13:82:55:
7b:e2:f2:f7:4d:97:55:55:61:a3:99:77:bc:36:6f:97:b7:56:
bd:ba:8c:9a:37:6e:b4:5e:90:c0:2e:a8:8d:25:46:f3:25:2a:
b9:92:34:62:59:81:a6:39:a1:c6:27:05:88:25:5c:28:16:7d:
4f:e6:27:5a:2c:81:43:16:c2:0b:f9:38:4f:7a:1c:1d:5b:29:
1e:91:e9:48:92:cf:85:a3:24:27:cc:a2:27:4a:32:5d:17:82:
9f:66:1b:84:84:54:df:33:b0:3f:4d:10:35:ad:fd:da:50:0e:
03:03:ed:f1:50:53:2d:0a:96:c2:67:5e:db:95:e2:de:00:8e:
1f:81:18:c7:ac:0d:b4:e2:a9:d7:1e:20:a0:67:d1:b6:0a:3a:
72:73:ac:f7:32:c7:6f:ba:94:85:b1:66:74:56:df:e9:3a:d7:
03:9b:67:94
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP41HqHP/LHbIYmSzyZqm5P4mqfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUyQjNCMjk1QTUwRjUwNkMwQUZEOTFDRUZFQzJDODND
M0RBMDIwMTAeFw0yNDExMTUxMzU1MDBaFw0yNTExMTQxNDAwMDBaMDMxMTAvBgNV
BAMTKDdFODIwMjY5OUM0QzZGQzkwOTRGQzVBQUM4Qzk5MjQyNDVGMDkwODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmz76olIeFOLFrhsKooR41XiKB
PP5dom0JWkzNwsd08Wc9anVV69UuLuCJ/tWnntFeArC2/3GxI6KdlKShs8G/D+pb
xMmnGzJw9EjhA1sQ+fnA56es6gOOHNonS9H0EfJTHNZ+ojJgCRcHd3pfx4UUYsuy
G3lHXUBU3TUPEdPppLANpCQe1j9twTrPJDIY/Y9Yq0NtTVYVB6DEDBGDA+cgJ709
hgh/eWmfNkyM1BIs37G8ds4/7ge81lS4v+jqc9IrEWpw/C/0V4xnD+zw+TkX3Gwk
1naqkQWpLLgRxTY5VbehrRwngQmNQ1AWqIpcq2oAHCgKjfdWXYU9IFOV9FKxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfoICaZxMb8kJT8WqyMmSQkXwkIAwHwYDVR0j
BBgwFoAUtSs7KVpQ9QbAr9kc7+wsg8PaAgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzR5S1Q3dEdrYkR5dzNxVHk0RXoyN292dURxdVd3VmpmTjVBWjh3VGY2
TmkvMC9CNTJCM0IyOTVBNTBGNTA2QzBBRkQ5MUNFRkVDMkM4M0MzREEwMjAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1MkIzQjI5NUE1MEY1MDZD
MEFGRDkxQ0VGRUMyQzgzQzNEQTAyMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0eUtUN3RHa2JEeXczcVR5NEV6MjdvdnVEcXVXd1ZqZk41QVo4d1RmNk5pLzAv
MzEzNzM5MmUzMDJlMzEzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAswC/MA0GCSqGSIb3DQEBCwUAA4IBAQCiZq4XCqrB
Z4ep2WEKeot+N0GKf2rRkF1vnF5WwsjDsPc/Xde2e8CWX4xCiFIcKY8mzI7etFsZ
976MvNjCwzLuinjLT0SNsvaixvxOco3T/JVeWSxL9kYTglV74vL3TZdVVWGjmXe8
Nm+Xt1a9uoyaN260XpDALqiNJUbzJSq5kjRiWYGmOaHGJwWIJVwoFn1P5idaLIFD
FsIL+ThPehwdWykekelIks+FoyQnzKInSjJdF4KfZhuEhFTfM7A/TRA1rf3aUA4D
A+3xUFMtCpbCZ17bleLeAI4fgRjHrA204qnXHiCgZ9G2Cjpyc6z3MsdvupSFsWZ0
Vt/pOtcDm2eU
-----END CERTIFICATE-----
Generated at Sat Nov 16 18:19:08 2024 by rpki-client on console-ams.rpki-client.org