Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3136382e302f32322d3234203d3e203238313635.roa
File: 3137302e38312e3136382e302f32322d3234203d3e203238313635.roa (raw, json)
Hash identifier: hFJdmjANsd4OI9Gto6fcyq444MbDMMt0up4HFMAfMUs=
Subject key identifier: C1:EF:65:C9:19:51:BB:26:54:60:8B:70:00:2A:C2:F7:66:9A:74:C6
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 2F46F4D6F2B314BFCB5CEEC87FB780719F8771C5
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3136382e302f32322d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:27:22 +0000
ROA not before: Mon 01 Jul 2024 19:22:22 +0000
ROA not after: Mon 30 Jun 2025 19:27:22 +0000
asID: 28165
IP address blocks: 170.81.168.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:46:f4:d6:f2:b3:14:bf:cb:5c:ee:c8:7f:b7:80:71:9f:87:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:22:22 2024 GMT
Not After : Jun 30 19:27:22 2025 GMT
Subject: CN=C1EF65C91951BB2654608B70002AC2F7669A74C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:30:cd:6a:54:7f:61:69:6a:69:51:ee:5c:
85:2a:a1:b3:3d:3f:10:98:4a:4b:20:64:22:81:19:
62:25:9a:56:a6:e8:f0:c5:26:84:cc:a3:37:8e:76:
fd:d2:4e:4a:b0:20:a4:9d:f5:6a:86:d4:46:02:1a:
5e:f1:79:d1:d6:38:45:ad:9d:99:18:51:a2:73:0e:
3b:80:f5:ba:ea:67:f9:c9:8e:30:c6:f4:cf:d2:96:
c4:90:38:4e:77:d3:4c:63:d8:10:5e:02:54:c7:f6:
b9:59:72:74:21:74:31:94:a4:3e:7a:8d:81:fc:96:
97:44:6f:4c:e4:3e:13:dd:1e:68:3f:7c:a5:d7:03:
16:f7:29:c2:17:d7:78:5d:59:fd:d6:00:4d:48:7f:
f4:8f:3e:4b:b3:3e:f3:5b:56:a2:8f:92:34:5d:01:
86:c0:45:1b:e7:d4:bc:5d:13:61:1b:64:2f:dc:13:
bf:b7:16:15:93:da:86:78:ba:fa:3f:ee:41:1d:56:
ad:f8:6b:41:d1:3e:3b:bc:be:fd:45:24:31:b2:46:
74:79:8b:be:8f:68:ed:88:3b:fd:41:cb:46:cf:e9:
9e:23:54:aa:36:90:9c:4a:3c:ff:a6:5d:3a:9d:64:
2a:56:8f:bc:aa:b7:d8:70:02:c8:5e:1b:0a:fc:36:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EF:65:C9:19:51:BB:26:54:60:8B:70:00:2A:C2:F7:66:9A:74:C6
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3136382e302f32322d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.168.0/22
Signature Algorithm: sha256WithRSAEncryption
29:db:60:ee:c7:fd:90:28:bd:88:6f:29:ab:f9:4a:77:d1:d8:
e0:71:e5:ed:9a:ef:8d:88:f7:8f:6a:f7:31:40:68:e1:08:1f:
62:43:8d:a3:dc:cb:a3:25:11:7a:04:21:73:80:8d:f9:05:10:
1f:bc:0a:c9:e3:19:67:5b:3e:16:73:4c:ba:72:73:34:48:8f:
b3:47:00:2d:af:92:d6:ac:22:c6:30:bc:7f:ae:fc:54:e5:3b:
69:37:80:7c:48:c7:e8:a1:ce:00:90:1a:48:d0:04:6f:b2:0a:
14:61:d0:b4:01:fc:13:0d:3d:cb:d6:9f:5f:a0:30:38:a7:49:
24:91:ba:94:c8:ef:f1:58:69:2b:07:9a:fe:93:39:be:ff:e1:
ad:95:78:d8:01:dd:4c:6d:0c:92:36:06:91:37:27:1c:39:83:
26:b8:73:f0:ac:71:a1:c0:e0:12:ba:aa:f0:b3:45:5e:3d:d9:
9f:f7:e6:ca:3d:15:91:e1:db:a2:82:cd:5c:6a:27:c2:17:f5:
6b:e1:68:28:9d:c2:8c:ea:70:9f:b4:45:21:9f:36:c1:2b:30:
0a:95:20:77:b1:c3:e5:40:93:c8:8d:86:65:e9:77:b9:af:8e:
90:17:a3:cb:a6:09:13:c2:a4:79:ad:6e:98:79:f6:48:ed:ec:
45:c3:51:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL0b01vKzFL/LXO7If7eAcZ+HccUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExOTIyMjJaFw0yNTA2MzAxOTI3MjJaMDMxMTAvBgNV
BAMTKEMxRUY2NUM5MTk1MUJCMjY1NDYwOEI3MDAwMkFDMkY3NjY5QTc0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7DDNalR/YWlqaVHuXIUqobM9
PxCYSksgZCKBGWIlmlam6PDFJoTMozeOdv3STkqwIKSd9WqG1EYCGl7xedHWOEWt
nZkYUaJzDjuA9brqZ/nJjjDG9M/SlsSQOE5300xj2BBeAlTH9rlZcnQhdDGUpD56
jYH8lpdEb0zkPhPdHmg/fKXXAxb3KcIX13hdWf3WAE1If/SPPkuzPvNbVqKPkjRd
AYbARRvn1LxdE2EbZC/cE7+3FhWT2oZ4uvo/7kEdVq34a0HRPju8vv1FJDGyRnR5
i76PaO2IO/1By0bP6Z4jVKo2kJxKPP+mXTqdZCpWj7yqt9hwAsheGwr8NuIfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwe9lyRlRuyZUYItwACrC92aadMYwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzNzMwMmUzODMxMmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlGoMA0GCSqGSIb3DQEBCwUAA4IBAQAp22Dux/2Q
KL2Ibymr+Up30djgceXtmu+NiPePavcxQGjhCB9iQ42j3MujJRF6BCFzgI35BRAf
vArJ4xlnWz4Wc0y6cnM0SI+zRwAtr5LWrCLGMLx/rvxU5TtpN4B8SMfooc4AkBpI
0ARvsgoUYdC0AfwTDT3L1p9foDA4p0kkkbqUyO/xWGkrB5r+kzm+/+GtlXjYAd1M
bQySNgaRNyccOYMmuHPwrHGhwOASuqrws0VePdmf9+bKPRWR4duigs1caifCF/Vr
4WgoncKM6nCftEUhnzbBKzAKlSB3scPlQJPIjYZl6Xe5r46QF6PLpgkTwqR5rW6Y
efZI7exFw1Gn
-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org