Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234352e302f32342d3234203d3e203533303532.roa
File: 3137372e37302e3234352e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier: SqrVfSJfUspVVgfsul5IDFJphXK6D1HsPayxYhghZXU=
Subject key identifier: FA:22:7F:6B:09:2B:A2:F7:79:68:EC:61:B3:A0:2B:44:AA:10:20:CF
Certificate issuer: /CN=08476912059F2AC593011419116914BCC2250DEF
Certificate serial: 09AD397DFFA08669D6956F2156342471BAC1AD17
Authority key identifier: 08:47:69:12:05:9F:2A:C5:93:01:14:19:11:69:14:BC:C2:25:0D:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08476912059F2AC593011419116914BCC2250DEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234352e302f32342d3234203d3e203533303532.roa
Signing time: Thu 22 Aug 2024 17:59:45 +0000
ROA not before: Thu 22 Aug 2024 17:54:45 +0000
ROA not after: Thu 21 Aug 2025 17:59:45 +0000
asID: 53052
IP address blocks: 177.70.245.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ad:39:7d:ff:a0:86:69:d6:95:6f:21:56:34:24:71:ba:c1:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08476912059F2AC593011419116914BCC2250DEF
Validity
Not Before: Aug 22 17:54:45 2024 GMT
Not After : Aug 21 17:59:45 2025 GMT
Subject: CN=FA227F6B092BA2F77968EC61B3A02B44AA1020CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:f4:1a:ff:f0:42:17:ee:77:2c:1f:6f:e6:
bb:43:a3:69:60:48:b5:ac:5e:91:d6:f7:72:cc:51:
d2:ba:a8:d6:7f:3a:84:ad:77:d9:e5:d2:02:5a:d0:
a9:f1:ca:d5:24:be:cf:24:12:e7:c0:42:62:0d:04:
9d:90:db:51:79:f3:06:68:1d:c9:21:83:55:6d:49:
29:54:d4:5d:e2:59:ec:53:8f:99:7d:e0:83:20:16:
35:0f:06:6e:d3:0b:da:b3:c3:2e:be:b6:d4:c9:41:
6d:ec:29:7a:e6:94:11:3a:ca:6e:e4:78:4d:ff:da:
c4:5d:75:be:17:c6:57:8c:77:01:f7:d4:3b:0d:09:
47:52:4d:28:f8:3e:59:97:d9:40:d2:79:62:5e:cc:
01:11:7d:bc:ac:9a:89:ad:f0:3d:7a:8e:d3:8b:d5:
bc:81:63:41:ab:1b:e3:25:49:69:f9:4f:79:6e:27:
da:45:94:55:1e:80:47:48:1c:2e:65:93:fa:49:77:
f2:df:0b:c7:f3:73:25:af:24:b7:1c:20:b5:29:00:
43:8b:04:b7:ec:68:44:26:ca:c5:42:e2:b0:bb:10:
73:b0:25:63:82:9f:ce:66:38:ad:c8:19:79:59:7d:
cc:71:00:09:31:4c:fc:ba:86:2d:0f:a1:7d:fa:fd:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:7F:6B:09:2B:A2:F7:79:68:EC:61:B3:A0:2B:44:AA:10:20:CF
X509v3 Authority Key Identifier:
keyid:08:47:69:12:05:9F:2A:C5:93:01:14:19:11:69:14:BC:C2:25:0D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/08476912059F2AC593011419116914BCC2250DEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08476912059F2AC593011419116914BCC2250DEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234352e302f32342d3234203d3e203533303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.245.0/24
Signature Algorithm: sha256WithRSAEncryption
20:db:fc:97:7b:7d:22:d6:f4:3a:bc:30:54:7e:95:b7:64:97:
e2:25:80:77:d3:4f:57:03:e9:cb:8c:4c:b2:6f:9c:f8:51:00:
9e:79:37:87:46:0c:6c:81:65:9b:97:ad:f9:be:c6:b0:e0:aa:
a0:e1:57:d5:68:26:04:46:b1:dd:a3:ba:51:5c:87:28:c3:4b:
50:28:0c:90:62:90:6f:93:1c:e3:ff:e7:7c:c0:27:bc:35:8c:
bb:4e:3d:ac:2e:24:36:ce:46:c1:d9:6b:44:31:c7:a5:02:ac:
fa:bb:60:35:9e:e5:aa:4a:c0:6f:ff:45:d9:01:62:83:29:cb:
f6:df:87:65:7f:3c:93:d4:e2:af:df:f3:04:fb:b6:21:dc:37:
09:8a:35:17:22:3e:af:1e:85:c4:02:22:47:96:a8:86:53:ac:
6c:95:91:49:50:68:a6:e4:0c:00:f6:8e:d0:27:49:56:ce:85:
de:bb:4f:e4:17:3f:7e:3f:ba:ad:bd:a3:ab:ab:50:38:66:aa:
c3:6f:64:b5:e9:73:0b:d4:69:16:ad:1a:e8:92:8b:86:bc:3b:
41:3d:12:83:b0:a0:a2:80:b0:35:c0:59:00:b3:07:41:a4:a6:
fb:b8:b6:f3:79:ed:0f:21:c3:2b:d6:a6:c9:48:37:26:7f:a8:
eb:b6:81:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCa05ff+ghmnWlW8hVjQkcbrBrRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NzY5MTIwNTlGMkFDNTkzMDExNDE5MTE2OTE0QkND
MjI1MERFRjAeFw0yNDA4MjIxNzU0NDVaFw0yNTA4MjExNzU5NDVaMDMxMTAvBgNV
BAMTKEZBMjI3RjZCMDkyQkEyRjc3OTY4RUM2MUIzQTAyQjQ0QUExMDIwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zfQa//BCF+53LB9v5rtDo2lg
SLWsXpHW93LMUdK6qNZ/OoStd9nl0gJa0KnxytUkvs8kEufAQmINBJ2Q21F58wZo
Hckhg1VtSSlU1F3iWexTj5l94IMgFjUPBm7TC9qzwy6+ttTJQW3sKXrmlBE6ym7k
eE3/2sRddb4XxleMdwH31DsNCUdSTSj4PlmX2UDSeWJezAERfbysmomt8D16jtOL
1byBY0GrG+MlSWn5T3luJ9pFlFUegEdIHC5lk/pJd/LfC8fzcyWvJLccILUpAEOL
BLfsaEQmysVC4rC7EHOwJWOCn85mOK3IGXlZfcxxAAkxTPy6hi0PoX36/T69AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+iJ/awkrovd5aOxhs6ArRKoQIM8wHwYDVR0j
BBgwFoAUCEdpEgWfKsWTARQZEWkUvMIlDe8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VYQ2N5TVlITmZ4SHFCOEtTTFV5bllyemFqdjJVVHdqcEM1aFU4UDZN
dG4vMC8wODQ3NjkxMjA1OUYyQUM1OTMwMTE0MTkxMTY5MTRCQ0MyMjUwREVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NDc2OTEyMDU5RjJBQzU5
MzAxMTQxOTExNjkxNEJDQzIyNTBERUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1WENjeU1ZSE5meEhxQjhLU0xVeW5ZcnphanYyVVR3anBDNWhVOFA2TXRuLzAv
MzEzNzM3MmUzNzMwMmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUb1MA0GCSqGSIb3DQEBCwUAA4IBAQAg2/yXe30i
1vQ6vDBUfpW3ZJfiJYB3009XA+nLjEyyb5z4UQCeeTeHRgxsgWWbl635vsaw4Kqg
4VfVaCYERrHdo7pRXIcow0tQKAyQYpBvkxzj/+d8wCe8NYy7Tj2sLiQ2zkbB2WtE
McelAqz6u2A1nuWqSsBv/0XZAWKDKcv234dlfzyT1OKv3/ME+7Yh3DcJijUXIj6v
HoXEAiJHlqiGU6xslZFJUGim5AwA9o7QJ0lWzoXeu0/kFz9+P7qtvaOrq1A4ZqrD
b2S16XML1GkWrRrokouGvDtBPRKDsKCigLA1wFkAswdBpKb7uLbzee0PIcMr1qbJ
SDcmf6jrtoFk
-----END CERTIFICATE-----
Generated at Sat Nov 2 09:06:31 2024 by rpki-client on console-ams.rpki-client.org