Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
File: 3137302e38312e3136382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: EljWPhawPmA0iXvWFHCP6Y26YQVkWx7j14cElZ9o9no=
Subject key identifier: F9:04:3F:68:8A:00:E3:49:2E:28:FD:D6:36:24:CC:DD:C2:CF:4A:07
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 7AA69F21DD3639BA0AB7B3C5C8E19E2327B9D891
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:41 +0000
ROA not before: Wed 31 Jul 2024 22:20:41 +0000
ROA not after: Wed 30 Jul 2025 22:25:41 +0000
asID: 28165
IP address blocks: 170.81.168.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a6:9f:21:dd:36:39:ba:0a:b7:b3:c5:c8:e1:9e:23:27:b9:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:41 2024 GMT
Not After : Jul 30 22:25:41 2025 GMT
Subject: CN=F9043F688A00E3492E28FDD63624CCDDC2CF4A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:36:58:e2:86:5b:03:3e:02:3c:b6:e4:af:
7b:d5:34:b7:6f:17:d8:a6:74:ec:e3:74:54:76:1f:
e2:fc:ba:7c:d1:ee:a8:78:83:5b:02:83:2f:cb:e5:
ae:bf:7a:4e:c6:f9:62:8c:9f:bf:ad:5b:37:a9:be:
62:d4:8d:aa:56:77:4a:8d:d2:63:ad:2f:14:43:65:
34:b9:9b:f8:a0:9c:25:c4:9b:38:3d:3f:5d:23:ef:
10:3f:60:85:15:b3:94:cc:af:35:1b:28:b0:bc:1f:
f9:31:67:24:95:e6:da:4b:12:6c:ad:73:97:29:34:
dc:19:3f:e3:82:96:2f:33:b2:82:fc:35:10:92:a6:
d2:04:05:52:af:30:d7:30:dc:c5:30:83:32:d7:e6:
9d:70:43:cf:36:ff:4f:7a:38:a6:c4:5e:1f:d3:01:
a6:74:7f:54:31:ef:31:83:47:5b:b4:22:03:8c:ab:
ef:d2:69:b0:b5:57:65:71:ef:4a:1f:76:0c:df:b8:
04:91:62:19:5c:6c:3a:50:ff:55:5c:11:62:f4:35:
c3:39:19:99:33:c6:fc:fc:91:48:5f:1d:29:32:f6:
aa:8c:ce:20:f9:10:f6:6a:a6:a6:b6:29:a8:86:bc:
d9:ee:eb:1b:e0:57:f1:ad:b1:bd:e8:74:39:9a:92:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:3F:68:8A:00:E3:49:2E:28:FD:D6:36:24:CC:DD:C2:CF:4A:07
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.168.0/24
Signature Algorithm: sha256WithRSAEncryption
62:de:8f:02:13:d6:09:b0:45:8d:41:5d:e4:c7:f8:c9:39:b6:
46:36:d2:97:02:4d:5c:26:9b:85:d5:43:68:73:f9:cf:f8:e7:
8d:d7:f0:24:ab:84:1b:ea:f5:a9:92:ef:3d:2d:f8:59:96:94:
b0:09:e1:c7:7b:9b:6b:fc:3c:2c:97:ce:53:94:3a:f5:0f:c0:
28:1a:e9:89:7c:8b:b6:b2:6d:2a:fa:b7:54:db:2b:00:dc:ee:
76:f8:aa:14:6b:cf:3f:78:14:ae:76:cd:90:43:f2:2f:27:68:
3a:d3:9c:af:4f:e8:55:db:f0:aa:c8:93:7b:1a:54:7d:85:4b:
2d:c3:50:6d:f9:a8:53:01:21:07:8a:55:b3:57:b2:da:62:80:
c2:86:d4:b4:40:e5:10:20:cb:91:0a:66:a9:fa:21:4b:55:32:
2d:28:30:16:bb:98:ad:ac:5b:97:b8:2f:94:2b:e8:bf:c3:10:
da:41:cc:9c:a4:3b:94:54:9b:ef:bb:d3:dd:23:9d:5c:56:94:
96:cb:3c:06:25:c0:0a:c1:43:88:04:72:a6:40:d0:1d:7c:d6:
21:89:c4:53:b4:6e:d4:9b:8b:b8:4b:19:89:d3:58:fc:6f:87:
08:52:c1:a2:5c:68:ab:be:28:c5:6e:f5:92:1b:90:ad:be:d8:
c2:f9:f5:ff
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeqafId02OboKt7PFyOGeIye52JEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwNDFaFw0yNTA3MzAyMjI1NDFaMDMxMTAvBgNV
BAMTKEY5MDQzRjY4OEEwMEUzNDkyRTI4RkRENjM2MjRDQ0REQzJDRjRBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDudDZY4oZbAz4CPLbkr3vVNLdv
F9imdOzjdFR2H+L8unzR7qh4g1sCgy/L5a6/ek7G+WKMn7+tWzepvmLUjapWd0qN
0mOtLxRDZTS5m/ignCXEmzg9P10j7xA/YIUVs5TMrzUbKLC8H/kxZySV5tpLEmyt
c5cpNNwZP+OCli8zsoL8NRCSptIEBVKvMNcw3MUwgzLX5p1wQ882/096OKbEXh/T
AaZ0f1Qx7zGDR1u0IgOMq+/SabC1V2Vx70ofdgzfuASRYhlcbDpQ/1VcEWL0NcM5
GZkzxvz8kUhfHSky9qqMziD5EPZqpqa2KaiGvNnu6xvgV/Gtsb3odDmakhKNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+QQ/aIoA40kuKP3WNiTM3cLPSgcwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzNzMwMmUzODMxMmUzMTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlGoMA0GCSqGSIb3DQEBCwUAA4IBAQBi3o8CE9YJ
sEWNQV3kx/jJObZGNtKXAk1cJpuF1UNoc/nP+OeN1/Akq4Qb6vWpku89LfhZlpSw
CeHHe5tr/Dwsl85TlDr1D8AoGumJfIu2sm0q+rdU2ysA3O52+KoUa88/eBSuds2Q
Q/IvJ2g605yvT+hV2/CqyJN7GlR9hUstw1Bt+ahTASEHilWzV7LaYoDChtS0QOUQ
IMuRCmap+iFLVTItKDAWu5itrFuXuC+UK+i/wxDaQcycpDuUVJvvu9PdI51cVpSW
yzwGJcAKwUOIBHKmQNAdfNYhicRTtG7Um4u4SxmJ01j8b4cIUsGiXGirvijFbvWS
G5CtvtjC+fX/
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org