Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa
File: 3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa (raw, json)
Hash identifier: n82sBvkw5ZlZRrkhkXx9pkRSKmxIAeHmMSw3bI3dSQs=
Subject key identifier: 90:75:90:42:A4:26:1D:C2:49:5C:FD:A8:3A:62:DB:A6:C5:CB:5D:DD
Certificate issuer: /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial: 29637FB863489B0AF93D7D9E13F76137F2684B3A
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa
Signing time: Thu 08 Feb 2024 20:23:51 +0000
ROA not before: Thu 08 Feb 2024 20:18:51 +0000
ROA not after: Thu 06 Feb 2025 20:23:51 +0000
asID: 265078
IP address blocks: 170.233.112.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:63:7f:b8:63:48:9b:0a:f9:3d:7d:9e:13:f7:61:37:f2:68:4b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Validity
Not Before: Feb 8 20:18:51 2024 GMT
Not After : Feb 6 20:23:51 2025 GMT
Subject: CN=90759042A4261DC2495CFDA83A62DBA6C5CB5DDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:65:4f:76:ab:10:70:49:b9:e8:70:9d:f4:
b5:a0:4c:0b:a4:75:57:57:37:bf:5f:5c:ec:3f:73:
e2:a9:95:2d:f9:a9:b0:f3:86:70:c2:0c:22:9e:e6:
de:74:20:31:6a:c0:aa:58:6b:c7:03:8a:c2:af:2d:
b5:4a:84:58:b6:9c:95:e9:0a:18:02:e1:4f:f6:9d:
a8:eb:bf:6c:ef:17:90:1a:1d:04:b7:b8:0b:6e:62:
2e:37:01:27:f3:f2:4d:19:80:c7:74:b3:43:05:1f:
a5:f1:ff:9e:42:9d:a8:88:93:f3:70:15:a4:34:8b:
f8:2a:3a:e5:15:16:29:64:ce:96:35:e5:ef:52:ba:
86:10:12:97:0f:96:7d:cf:c5:b3:ed:92:c2:7d:47:
83:82:aa:af:09:44:31:68:7b:22:63:14:9a:d2:d8:
96:d4:a3:f1:db:31:70:9f:10:5e:26:84:fb:cc:83:
24:46:2f:34:c8:48:65:26:ff:d8:7a:70:21:42:d1:
d7:f1:89:24:84:29:55:83:52:61:73:92:0c:f9:c8:
c4:5e:b7:e3:aa:a7:17:0e:26:47:d7:c4:2a:c8:d6:
63:4a:25:b1:d9:70:10:bb:4b:b2:03:f5:72:41:bd:
1e:b6:e6:f1:48:78:26:b2:0d:84:fa:b7:22:01:35:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:90:42:A4:26:1D:C2:49:5C:FD:A8:3A:62:DB:A6:C5:CB:5D:DD
X509v3 Authority Key Identifier:
keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.112.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:83:8e:b2:a8:e3:6a:5b:01:0e:76:61:2f:e3:80:ef:5e:d7:
fe:bd:db:ac:c7:68:8d:a8:e0:42:62:38:bd:b2:5a:9e:e1:84:
fd:7d:56:de:81:9b:e1:66:08:fe:e1:36:50:1a:81:0a:24:81:
e9:27:45:d3:c4:e3:bd:29:da:c5:7e:87:08:18:25:8a:2c:18:
5e:39:b7:90:a9:b5:0b:1d:41:0b:8c:e7:7b:4c:0a:41:e9:0e:
1f:bf:4e:6d:5b:38:cf:20:11:72:7d:93:50:0c:96:46:d6:a5:
4e:6c:5c:5e:66:28:63:3d:78:7e:63:8d:7e:24:10:ce:fb:81:
f7:b2:78:1f:a1:56:ba:73:b4:62:33:08:d1:93:91:95:7b:0c:
b4:e3:49:0c:03:55:ed:46:cc:8b:41:4c:a8:06:da:91:7a:27:
a3:6f:52:45:35:7a:41:6f:29:64:3d:45:4c:aa:9b:0c:8c:94:
9b:23:33:fb:72:b2:4d:b1:32:82:cf:f5:2e:cf:e2:7e:58:35:
78:98:96:d0:f1:7e:c9:bc:7a:7c:f6:1f:ef:77:0d:72:bb:4f:
62:bf:be:a6:2a:82:59:a8:8c:71:19:a3:94:a8:8e:93:34:ab:
c1:5a:47:49:fd:cc:3c:53:85:49:0e:dc:11:9b:aa:d6:fc:71:
72:e3:3e:26
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKWN/uGNImwr5PX2eE/dhN/JoSzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4NUFBMjBGQ0IwMTE4NDgxMTA1NEFEQTZDNEIzN0ZD
MDY1MjE3NTAeFw0yNDAyMDgyMDE4NTFaFw0yNTAyMDYyMDIzNTFaMDMxMTAvBgNV
BAMTKDkwNzU5MDQyQTQyNjFEQzI0OTVDRkRBODNBNjJEQkE2QzVDQjVEREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPamVPdqsQcEm56HCd9LWgTAuk
dVdXN79fXOw/c+KplS35qbDzhnDCDCKe5t50IDFqwKpYa8cDisKvLbVKhFi2nJXp
ChgC4U/2najrv2zvF5AaHQS3uAtuYi43ASfz8k0ZgMd0s0MFH6Xx/55CnaiIk/Nw
FaQ0i/gqOuUVFilkzpY15e9SuoYQEpcPln3PxbPtksJ9R4OCqq8JRDFoeyJjFJrS
2JbUo/HbMXCfEF4mhPvMgyRGLzTISGUm/9h6cCFC0dfxiSSEKVWDUmFzkgz5yMRe
t+OqpxcOJkfXxCrI1mNKJbHZcBC7S7ID9XJBvR625vFIeCayDYT6tyIBNdv/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkHWQQqQmHcJJXP2oOmLbpsXLXd0wHwYDVR0j
BBgwFoAUg4WqIPywEYSBEFStpsSzf8BlIXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz
VHYvMC84Mzg1QUEyMEZDQjAxMTg0ODExMDU0QURBNkM0QjM3RkMwNjUyMTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgzODVBQTIwRkNCMDExODQ4
MTEwNTRBREE2QzRCMzdGQzA2NTIxNzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarpcDANBgkqhkiG9w0BAQsFAAOCAQEAO4OO
sqjjalsBDnZhL+OA717X/r3brMdojajgQmI4vbJanuGE/X1W3oGb4WYI/uE2UBqB
CiSB6SdF08TjvSnaxX6HCBgliiwYXjm3kKm1Cx1BC4zne0wKQekOH79ObVs4zyAR
cn2TUAyWRtalTmxcXmYoYz14fmONfiQQzvuB97J4H6FWunO0YjMI0ZORlXsMtONJ
DANV7UbMi0FMqAbakXono29SRTV6QW8pZD1FTKqbDIyUmyMz+3KyTbEygs/1Ls/i
flg1eJiW0PF+ybx6fPYf73cNcrtPYr++piqCWaiMcRmjlKiOkzSrwVpHSf3MPFOF
SQ7cEZuq1vxxcuM+Jg==
-----END CERTIFICATE-----
Generated at Mon Mar 4 14:29:29 2024 by rpki-client on console-fra.rpki-client.org