Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa
File: 3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier: 4WbVgIvvpsfSPQRSStIuRD0eFItNpycpx914IrBt64c=
Subject key identifier: 91:AF:53:EE:90:87:85:ED:F6:17:46:6B:80:6F:F3:16:88:60:04:45
Certificate issuer: /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial: 6E55E3990E0B65119E9BD71CFB03FFFD83B7EEB0
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa
Signing time: Thu 04 Apr 2024 08:00:25 +0000
ROA not before: Thu 04 Apr 2024 07:55:25 +0000
ROA not after: Thu 03 Apr 2025 08:00:25 +0000
asID: 263558
IP address blocks: 143.255.196.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:55:e3:99:0e:0b:65:11:9e:9b:d7:1c:fb:03:ff:fd:83:b7:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Validity
Not Before: Apr 4 07:55:25 2024 GMT
Not After : Apr 3 08:00:25 2025 GMT
Subject: CN=91AF53EE908785EDF617466B806FF31688600445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:8d:40:91:94:69:97:81:3d:90:ae:4b:20:
40:88:a3:36:8a:68:54:fe:89:d3:4d:83:07:09:5b:
a4:e5:da:06:4b:9f:13:46:8d:86:2d:48:a9:0e:ac:
06:9a:73:41:97:2e:00:26:a4:ab:63:08:44:67:76:
0f:43:f4:f8:9a:9f:78:9e:92:57:6e:83:6c:e1:d9:
f8:bf:48:e1:49:d0:34:fb:b5:0f:a4:9b:42:de:8a:
ab:b7:36:7e:f0:3c:f9:50:e5:33:75:8b:43:0c:4f:
34:1e:fa:45:20:24:99:bf:1a:4b:8e:bd:e6:e7:0e:
db:bd:7b:c4:dd:2f:f7:79:a2:dd:4d:79:9e:aa:0a:
cf:01:5a:8a:e8:f9:c7:dd:03:79:9f:95:76:c7:99:
94:34:85:9f:8e:49:da:e0:c1:77:45:3c:91:db:59:
db:c9:af:d5:b0:2b:db:ad:b5:96:a8:e1:77:49:c8:
fc:b3:3d:e1:e7:b3:db:8b:a0:5c:01:c3:d9:b6:c0:
c3:56:99:32:38:5c:7e:9e:2f:2a:80:09:ef:73:6a:
ea:cf:03:f5:ab:46:36:59:54:7f:08:ea:f9:26:b4:
d5:dc:fb:e0:c9:e0:54:84:c1:d3:94:52:74:71:fa:
cb:ab:a5:b1:66:49:6b:8c:b8:f6:1d:e0:d7:39:24:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AF:53:EE:90:87:85:ED:F6:17:46:6B:80:6F:F3:16:88:60:04:45
X509v3 Authority Key Identifier:
keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6d:05:89:5b:6f:f6:ab:d0:4b:cb:5f:9e:3f:c3:dd:eb:f8:
63:f5:34:cb:19:fc:c3:95:f9:51:b1:a2:47:99:14:6f:0f:c0:
a9:e8:e6:44:b8:ac:0e:ee:9a:78:89:64:bb:e9:db:79:4c:08:
cd:6c:18:ca:fe:51:c4:8c:32:00:9d:15:98:11:5a:5f:8f:5e:
af:3c:86:8a:b4:6f:e9:5c:70:80:eb:d3:0f:9a:db:96:b6:f4:
eb:21:06:5c:ed:05:af:dc:6c:81:ad:e6:6a:d2:95:85:39:3b:
4e:06:dd:34:20:b4:0a:59:74:76:2e:3d:3b:b5:d6:95:1a:0e:
e3:9e:a8:f5:01:42:d6:72:f7:02:de:47:cb:0a:82:fd:d8:0e:
b3:b3:a5:ec:d3:e0:82:b1:2c:ed:ea:6a:2e:04:51:91:6a:da:
cd:c5:0d:4a:c4:40:ad:1c:31:ec:98:8e:08:62:6f:85:f7:47:
ec:66:7a:38:97:08:09:df:52:85:4a:ce:90:98:bf:d3:97:fc:
11:53:ed:3b:60:72:93:45:fb:bc:26:9d:b5:a9:a0:09:bc:64:
8b:51:1d:58:ef:dd:55:93:22:01:4e:86:f9:e0:54:6c:d5:e1:
3e:d1:79:fd:7b:b6:1b:a6:9c:91:65:a4:6d:cd:44:e6:1f:e6:
a2:87:8e:b9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUblXjmQ4LZRGem9cc+wP//YO37rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkwNkVFM0ExOTcxQkRDQTg4NTY5N0FBMEYxNDAxOUEx
OEQ1NERBRjAeFw0yNDA0MDQwNzU1MjVaFw0yNTA0MDMwODAwMjVaMDMxMTAvBgNV
BAMTKDkxQUY1M0VFOTA4Nzg1RURGNjE3NDY2QjgwNkZGMzE2ODg2MDA0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k41AkZRpl4E9kK5LIECIozaK
aFT+idNNgwcJW6Tl2gZLnxNGjYYtSKkOrAaac0GXLgAmpKtjCERndg9D9Pian3ie
kldug2zh2fi/SOFJ0DT7tQ+km0Leiqu3Nn7wPPlQ5TN1i0MMTzQe+kUgJJm/GkuO
vebnDtu9e8TdL/d5ot1NeZ6qCs8BWoro+cfdA3mflXbHmZQ0hZ+OSdrgwXdFPJHb
WdvJr9WwK9uttZao4XdJyPyzPeHns9uLoFwBw9m2wMNWmTI4XH6eLyqACe9zaurP
A/WrRjZZVH8I6vkmtNXc++DJ4FSEwdOUUnRx+surpbFmSWuMuPYd4Nc5JBbJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUka9T7pCHhe32F0ZrgG/zFohgBEUwHwYDVR0j
BBgwFoAUqQbuOhlxvcqIVpeqDxQBmhjVTa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVt
YWcvMS9BOTA2RUUzQTE5NzFCRENBODg1Njk3QUEwRjE0MDE5QTE4RDU0REFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MDZFRTNBMTk3MUJEQ0E4
ODU2OTdBQTBGMTQwMTlBMThENTREQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBRFhxUW1weEVzaENmUzU2aFlDWDVUdUdmRlpoYzdSelc4QzZZOXp1bWFnLzEv
MzEzNDMzMmUzMjM1MzUyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI//xDANBgkqhkiG9w0BAQsFAAOCAQEATm0F
iVtv9qvQS8tfnj/D3ev4Y/U0yxn8w5X5UbGiR5kUbw/AqejmRLisDu6aeIlku+nb
eUwIzWwYyv5RxIwyAJ0VmBFaX49erzyGirRv6VxwgOvTD5rblrb06yEGXO0Fr9xs
ga3matKVhTk7TgbdNCC0Cll0di49O7XWlRoO456o9QFC1nL3At5HywqC/dgOs7Ol
7NPggrEs7epqLgRRkWrazcUNSsRArRwx7JiOCGJvhfdH7GZ6OJcICd9ShUrOkJi/
05f8EVPtO2Byk0X7vCadtamgCbxki1EdWO/dVZMiAU6G+eBUbNXhPtF5/Xu2G6ac
kWWkbc1E5h/mooeOuQ==
-----END CERTIFICATE-----
Generated at Tue Oct 1 21:37:44 2024 by rpki-client on console-fra.rpki-client.org