Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa
File: 3138392e38342e3136302e302f32302d3234203d3e203238313731.roa (raw, json)
Hash identifier: Utnl5VeWFTPgO4YYyfF3uRMhUcbjbt1XgB1NAOMrsLI=
Subject key identifier: A2:3C:2D:4B:E8:7E:26:DE:03:F3:3B:D3:37:90:BF:46:C8:EC:71:C2
Certificate issuer: /CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
Certificate serial: 38063D414C44B3B76D4A0CF080E75DC9AE15B81C
Authority key identifier: 8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa
Signing time: Wed 03 Apr 2024 19:00:00 +0000
ROA not before: Wed 03 Apr 2024 18:55:00 +0000
ROA not after: Thu 03 Apr 2025 19:00:00 +0000
asID: 28171
IP address blocks: 189.84.160.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:06:3d:41:4c:44:b3:b7:6d:4a:0c:f0:80:e7:5d:c9:ae:15:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
Validity
Not Before: Apr 3 18:55:00 2024 GMT
Not After : Apr 3 19:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:25:fe:a5:06:f5:72:ab:4f:f5:a6:e2:5a:
ba:85:37:d6:5e:65:cf:b9:01:07:64:06:cf:a8:87:
dc:4b:e6:cf:98:a4:e4:96:48:3d:56:44:d5:51:7d:
d7:e3:43:2d:70:43:19:74:07:a8:75:2d:83:47:d8:
c4:5a:89:6a:e3:4d:38:86:3f:9b:21:e5:9e:6a:e6:
60:ef:ff:fe:b0:df:12:90:75:4a:e8:a7:d0:f1:56:
6f:ea:29:7e:81:7b:3a:c1:be:28:d9:8a:64:34:0e:
ae:87:e1:31:59:7b:3a:89:74:7e:0d:b9:30:ec:f5:
f4:32:1f:fa:c9:3e:c2:34:90:94:92:83:6c:8c:48:
d2:c7:33:4f:77:cb:3a:69:08:16:14:76:bd:1e:93:
46:77:4d:54:43:4b:0d:30:4c:b4:36:06:61:5c:f0:
96:28:3a:2a:cc:af:d7:12:95:4d:bf:4f:52:71:97:
82:08:79:36:2c:55:72:a3:ef:36:d9:9d:05:5f:19:
ee:63:79:4f:61:17:0b:e4:2f:05:a1:9a:28:88:4b:
e9:20:67:a8:00:fb:c0:9e:6e:25:ce:0e:6c:1a:a3:
b3:08:8c:42:6d:a0:7b:47:df:02:cc:f1:b8:5b:b0:
e1:69:e0:c5:2c:cd:98:ec:20:62:22:f6:62:63:f8:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:2D:4B:E8:7E:26:DE:03:F3:3B:D3:37:90:BF:46:C8:EC:71:C2
X509v3 Authority Key Identifier:
keyid:8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.84.160.0/20
Signature Algorithm: sha256WithRSAEncryption
d3:b0:d1:aa:95:e5:67:47:01:51:3d:bc:d9:55:d5:d9:ff:1b:
20:2c:be:e7:b0:d4:67:46:f9:d6:d5:90:5b:2a:79:9f:0c:84:
e9:10:8e:0a:ff:2f:83:04:bc:aa:a2:8e:83:25:a5:2d:db:f9:
cd:c0:2d:3a:5f:12:af:8c:bb:41:fa:37:c6:14:49:b4:99:0c:
8c:c5:dc:e5:a9:dd:b5:f4:cf:ff:1a:14:28:ce:65:86:ad:6e:
3d:ca:09:9d:22:02:c8:f6:d8:85:cb:40:30:1f:5b:6a:42:ce:
16:97:42:39:d3:d6:ca:e5:d6:94:c8:19:12:0e:be:8b:e8:34:
cf:ea:06:ec:5a:4c:fa:c0:90:49:ec:38:1c:bf:d4:58:66:8b:
b2:47:36:d6:93:a5:54:ed:40:be:68:0a:7d:d9:a9:61:bf:d8:
82:be:a6:79:ef:fc:8b:24:dd:69:49:39:5d:02:18:5f:45:86:
34:17:ec:95:bf:46:ba:07:94:f1:57:4f:32:e6:a6:60:30:0d:
de:0c:43:f9:20:50:97:92:a3:cf:e2:4f:15:ce:91:8c:e1:07:
a0:35:1d:22:16:4a:cc:6b:3a:06:7c:e7:0b:ff:0a:e7:2f:12:
43:f9:c7:22:85:02:0e:3f:1d:98:d7:ab:3c:b5:bb:00:1e:fd:
ca:57:90:d6
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUOAY9QUxEs7dtSgzwgOddya4VuBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBNjk5QzQ3MDE2NjlFQ0U4RTdEM0Y0QTg2MEM0RjZE
NUM3NjREMDAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTE2MzI1RkVBNTA2RjU3MkFC
NEZGNUE2RTI1QUJBODUzN0Q2NUU2NUNGQjkwMTA3NjQwNkNGQTg4N0RDNEJFNkNG
OThBNEU0OTY0ODNENTY0NEQ1NTE3REQ3RTM0MzJENzA0MzE5NzQwN0E4NzUyRDgz
NDdEOEM0NUE4OTZBRTM0RDM4ODYzRjlCMjFFNTlFNkFFNjYwRUZGRkZFQjBERjEy
OTA3NTRBRThBN0QwRjE1NjZGRUEyOTdFODE3QjNBQzFCRTI4RDk4QTY0MzQwRUFF
ODdFMTMxNTk3QjNBODk3NDdFMERCOTMwRUNGNUY0MzIxRkZBQzkzRUMyMzQ5MDk0
OTI4MzZDOEM0OEQyQzczMzRGNzdDQjNBNjkwODE2MTQ3NkJEMUU5MzQ2Nzc0RDU0
NDM0QjBEMzA0Q0I0MzYwNjYxNUNGMDk2MjgzQTJBQ0NBRkQ3MTI5NTREQkY0RjUy
NzE5NzgyMDg3OTM2MkM1NTcyQTNFRjM2RDk5RDA1NUYxOUVFNjM3OTRGNjExNzBC
RTQyRjA1QTE5QTI4ODg0QkU5MjA2N0E4MDBGQkMwOUU2RTI1Q0UwRTZDMUFBM0Iz
MDg4QzQyNkRBMDdCNDdERjAyQ0NGMUI4NUJCMEUxNjlFMEM1MkNDRDk4RUMyMDYy
MjJGNjYyNjNGOEJENkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4WMl/qUG9XKrT/Wm4lq6hTfWXmXPuQEHZAbPqIfcS+bPmKTklkg9
VkTVUX3X40MtcEMZdAeodS2DR9jEWolq4004hj+bIeWeauZg7//+sN8SkHVK6KfQ
8VZv6il+gXs6wb4o2YpkNA6uh+ExWXs6iXR+Dbkw7PX0Mh/6yT7CNJCUkoNsjEjS
xzNPd8s6aQgWFHa9HpNGd01UQ0sNMEy0NgZhXPCWKDoqzK/XEpVNv09ScZeCCHk2
LFVyo+822Z0FXxnuY3lPYRcL5C8FoZooiEvpIGeoAPvAnm4lzg5sGqOzCIxCbaB7
R98CzPG4W7DhaeDFLM2Y7CBiIvZiY/i9bwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FKI8LUvofibeA/M70zeQv0bI7HHCMB8GA1UdIwQYMBaAFIummcRwFmns6OfT9Khg
xPbVx2TQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NKaEc2WDlqZFBHQXRk
UFJ6NjZ5dHMyY2hFYmhaQWhiZ3BUWUZDZU1CdVlqLzEvOEJBNjk5QzQ3MDE2NjlF
Q0U4RTdEM0Y0QTg2MEM0RjZENUM3NjREMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84QkE2OTlDNDcwMTY2OUVDRThFN0QzRjRBODYwQzRGNkQ1Qzc2
NEQwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DSmhHNlg5amRQR0F0ZFBSejY2
eXRzMmNoRWJoWkFoYmdwVFlGQ2VNQnVZai8xLzMxMzgzOTJlMzgzNDJlMzEzNjMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMxMzczMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL1U
oDANBgkqhkiG9w0BAQsFAAOCAQEA07DRqpXlZ0cBUT282VXV2f8bICy+57DUZ0b5
1tWQWyp5nwyE6RCOCv8vgwS8qqKOgyWlLdv5zcAtOl8Sr4y7Qfo3xhRJtJkMjMXc
5andtfTP/xoUKM5lhq1uPcoJnSICyPbYhctAMB9bakLOFpdCOdPWyuXWlMgZEg6+
i+g0z+oG7FpM+sCQSew4HL/UWGaLskc21pOlVO1AvmgKfdmpYb/Ygr6mee/8iyTd
aUk5XQIYX0WGNBfslb9GugeU8VdPMuamYDAN3gxD+SBQl5Kjz+JPFc6RjOEHoDUd
IhZKzGs6BnznC/8K5y8SQ/nHIoUCDj8dmNerPLW7AB79yleQ1g==
-----END CERTIFICATE-----
Generated at Thu Oct 3 18:08:34 2024 by rpki-client on console-fra.rpki-client.org