Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3230203d3e203238323630.roa
File: 3138372e31362e3234302e302f32302d3230203d3e203238323630.roa (raw, json)
Hash identifier: /vjHlE2aiknLSliKGUfaWloGY6nkBnAECEoRuNwtYkk=
Subject key identifier: 02:3B:8D:1B:15:82:32:BE:FE:78:71:AF:F6:E0:79:20:94:90:D7:EF
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 65FA91BB14CE2E3AD00B963E9B56694E1580752E
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3230203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:52 +0000
ROA not before: Thu 09 Mar 2023 20:12:52 +0000
ROA not after: Thu 07 Mar 2024 20:17:52 +0000
asID: 28260
IP address blocks: 187.16.240.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:fa:91:bb:14:ce:2e:3a:d0:0b:96:3e:9b:56:69:4e:15:80:75:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:52 2023 GMT
Not After : Mar 7 20:17:52 2024 GMT
Subject: CN=023B8D1B158232BEFE7871AFF6E079209490D7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:85:b9:5e:8e:bb:cc:d0:61:f7:34:42:b6:
d4:c4:f3:d1:4e:a1:ca:c2:6d:bb:91:f8:d8:19:06:
01:d8:33:d3:e5:27:51:b7:e2:33:77:7a:1e:18:1d:
31:3e:52:6d:3b:72:99:56:b0:13:c0:0a:6d:ff:48:
f0:d0:28:02:80:f8:bf:cc:0b:ae:c0:22:56:fd:e0:
6e:ec:7b:c3:79:95:cb:1a:3b:75:52:40:6e:42:6f:
9f:fa:5b:36:fa:7b:a9:0f:c3:b3:39:13:2e:ea:fb:
f9:cb:43:db:e3:3b:2f:e8:23:79:b0:9d:7d:fa:b3:
0d:6c:1d:39:2f:87:bd:d9:90:7c:c0:13:47:d5:94:
07:35:b0:dc:34:7f:c6:de:e0:4c:81:7f:be:b1:38:
c6:31:f3:5b:8e:b7:21:ac:f7:57:32:4d:73:6f:36:
c1:60:97:d6:42:9d:c4:1d:20:a0:83:38:95:45:4b:
33:bb:9c:0a:ff:54:5b:30:ec:da:05:f1:49:f7:33:
fb:4e:99:84:8b:80:1a:bb:7a:20:5f:a3:8e:ee:ae:
ba:6a:43:cd:50:c3:e0:77:0f:95:7a:59:1f:3c:d0:
1e:05:4e:64:79:9c:b6:ad:34:50:a2:16:cb:e7:d3:
fa:fa:39:56:6f:1e:16:34:31:84:db:4c:cd:54:63:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:8D:1B:15:82:32:BE:FE:78:71:AF:F6:E0:79:20:94:90:D7:EF
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3230203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.16.240.0/20
Signature Algorithm: sha256WithRSAEncryption
38:92:e0:5e:09:97:83:00:9a:eb:4d:11:79:bc:f6:98:c9:97:
12:4c:a3:e0:55:a9:d5:f7:94:d4:9e:54:68:9d:bf:fc:c9:cb:
b8:86:f0:0f:f1:60:bf:61:2a:05:58:5f:19:9f:19:90:31:88:
78:8f:76:1b:7c:87:0b:ce:70:68:f1:88:7a:24:eb:55:bd:f0:
65:f2:3b:f4:b0:ff:8a:ff:99:8c:02:56:b4:a5:36:91:f3:dc:
75:7f:47:95:ab:e4:fe:b7:69:61:bb:17:1e:8b:20:14:f4:a8:
f3:bf:e6:51:f2:2c:13:8c:09:7a:51:46:3d:2e:fd:f4:bb:ef:
e9:cb:6e:76:1b:8f:5f:78:d1:7e:96:57:5b:db:ea:28:20:e6:
ed:85:75:93:c4:eb:d1:ab:af:a8:13:f2:06:1e:ef:e1:68:a6:
b9:22:79:fe:85:55:ba:1b:a6:d5:53:fc:cc:aa:0c:05:e7:30:
46:82:62:8a:93:21:e8:33:15:a6:4c:9e:c6:56:c8:fd:ab:12:
86:68:c9:f8:fe:8e:72:92:b2:df:d8:b1:2b:bc:b0:47:79:58:
9e:dc:85:06:e0:d9:13:7e:4b:15:26:6c:13:78:c8:68:b7:0d:
4b:c2:fb:f9:19:63:ed:fb:b6:d5:c7:1c:c0:de:60:68:96:09:
7d:40:88:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZfqRuxTOLjrQC5Y+m1ZpThWAdS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNTJaFw0yNDAzMDcyMDE3NTJaMDMxMTAvBgNV
BAMTKDAyM0I4RDFCMTU4MjMyQkVGRTc4NzFBRkY2RTA3OTIwOTQ5MEQ3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5YW5Xo67zNBh9zRCttTE89FO
ocrCbbuR+NgZBgHYM9PlJ1G34jN3eh4YHTE+Um07cplWsBPACm3/SPDQKAKA+L/M
C67AIlb94G7se8N5lcsaO3VSQG5Cb5/6Wzb6e6kPw7M5Ey7q+/nLQ9vjOy/oI3mw
nX36sw1sHTkvh73ZkHzAE0fVlAc1sNw0f8be4EyBf76xOMYx81uOtyGs91cyTXNv
NsFgl9ZCncQdIKCDOJVFSzO7nAr/VFsw7NoF8Un3M/tOmYSLgBq7eiBfo47urrpq
Q81Qw+B3D5V6WR880B4FTmR5nLatNFCiFsvn0/r6OVZvHhY0MYTbTM1UY87/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAjuNGxWCMr7+eHGv9uB5IJSQ1+8wHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzEzODM3MmUzMTM2MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuxDwMA0GCSqGSIb3DQEBCwUAA4IBAQA4kuBeCZeD
AJrrTRF5vPaYyZcSTKPgVanV95TUnlRonb/8ycu4hvAP8WC/YSoFWF8ZnxmQMYh4
j3YbfIcLznBo8Yh6JOtVvfBl8jv0sP+K/5mMAla0pTaR89x1f0eVq+T+t2lhuxce
iyAU9Kjzv+ZR8iwTjAl6UUY9Lv30u+/py252G49feNF+lldb2+ooIObthXWTxOvR
q6+oE/IGHu/haKa5Inn+hVW6G6bVU/zMqgwF5zBGgmKKkyHoMxWmTJ7GVsj9qxKG
aMn4/o5ykrLf2LErvLBHeVie3IUG4NkTfksVJmwTeMhotw1Lwvv5GWPt+7bVxxzA
3mBolgl9QIhQ
-----END CERTIFICATE-----
Generated at Mon Jan 15 14:19:02 2024 by rpki-client on console-fra.rpki-client.org