Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa
File: 323830343a323039383a3a2f33322d3332203d3e20323634353030.roa (raw, json)
Hash identifier: pQplwey5LS8TPXsS85pMLKUgFQfpLdMh5oH+vZCMuCM=
Subject key identifier: 77:8B:88:50:23:3F:3D:11:2D:31:2B:70:7F:B9:1D:D0:1C:A4:21:1B
Certificate issuer: /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial: 18D281496AF01B69E70537899F1225D6B99F50DD
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa
Signing time: Tue 30 Jul 2024 17:41:03 +0000
ROA not before: Tue 30 Jul 2024 17:36:03 +0000
ROA not after: Tue 29 Jul 2025 17:41:03 +0000
asID: 264500
IP address blocks: 2804:2098::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d2:81:49:6a:f0:1b:69:e7:05:37:89:9f:12:25:d6:b9:9f:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Validity
Not Before: Jul 30 17:36:03 2024 GMT
Not After : Jul 29 17:41:03 2025 GMT
Subject: CN=778B8850233F3D112D312B707FB91DD01CA4211B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:bd:af:48:b3:76:ef:bd:ec:da:a8:e6:94:
2b:9c:59:0c:42:de:38:49:97:6c:47:88:c7:13:4d:
c8:ec:c7:f3:bf:70:04:bb:de:e9:33:fa:25:88:89:
1d:8f:02:71:b5:df:5a:6c:14:d3:04:9b:69:51:21:
6f:50:ee:aa:96:19:f3:71:99:f4:0e:eb:87:87:d3:
ac:e3:f4:7c:75:59:71:36:cd:4f:4b:8e:cd:fc:86:
75:e6:4c:42:d5:21:57:24:15:3d:3f:ce:5b:8b:95:
fd:af:5f:3c:6d:2a:d8:9d:d9:55:74:46:54:d4:70:
c9:6a:f8:0b:2a:cf:dc:24:02:65:a8:d2:ce:ba:dc:
36:84:ad:a6:6a:2f:0d:90:00:88:a3:53:87:53:39:
9a:33:43:b0:70:79:d1:8f:65:04:f5:39:41:4f:f1:
41:f7:3c:ee:a5:0b:2f:ad:ab:e1:5b:78:d2:20:de:
cd:a0:ea:91:47:74:1b:2d:10:f9:fb:12:b9:3e:9f:
e9:c8:c9:46:ba:31:07:d1:61:86:17:f2:5f:b7:86:
96:18:43:a0:54:99:de:ee:03:3d:35:67:3b:b1:09:
bc:d2:b5:c0:91:a9:74:a3:b7:a0:0a:39:d4:bb:28:
37:a8:40:96:57:6f:c4:3a:c6:57:85:52:34:bd:62:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8B:88:50:23:3F:3D:11:2D:31:2B:70:7F:B9:1D:D0:1C:A4:21:1B
X509v3 Authority Key Identifier:
keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2098::/32
Signature Algorithm: sha256WithRSAEncryption
31:e2:0d:40:6a:e1:0c:fb:a5:11:0d:c4:c8:54:85:4b:2a:9e:
c9:84:70:a8:29:44:00:2d:fe:8a:5e:08:99:bd:18:e1:a7:d5:
3e:4e:66:82:43:37:2c:b4:98:03:5f:01:e1:28:e1:a2:65:9c:
02:b2:f3:ab:c2:31:c0:b1:83:f3:99:8c:d5:9f:f8:6d:e6:0e:
ca:83:84:25:73:65:02:47:57:cb:f4:33:06:66:c7:7d:1d:c9:
8f:1c:96:f9:87:52:9e:41:24:48:db:ee:57:d7:a2:90:1c:9f:
73:08:06:da:e1:12:2b:15:17:1a:2a:8e:9b:74:43:2b:d4:10:
1a:dd:fa:38:6b:ef:1a:7e:8e:56:a8:ff:cc:df:b3:8b:3d:a0:
2b:63:14:ad:8a:98:67:97:7e:85:fe:ca:d4:8b:8e:89:84:cd:
f4:4a:3a:7e:a8:c7:a2:5c:c0:d5:ba:64:ff:d4:d2:41:d2:3d:
85:71:52:4d:0f:a7:73:f9:ba:33:41:00:ee:ac:79:c5:69:db:
03:a2:91:b8:b3:3e:0a:87:a2:3a:0f:b6:04:83:6b:04:ef:c1:
ec:e5:6e:32:e1:00:f0:90:ca:12:74:f4:c8:f4:87:39:99:8e:
65:6f:8a:07:4d:a8:a1:69:9a:9e:4e:69:ba:9a:a5:77:8a:fa:
99:e4:7d:4f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGNKBSWrwG2nnBTeJnxIl1rmfUN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEMzkxMTEzNzU3NUVCOTNDRTgzNjVEOEE0Q0QwNTUx
QTREOUJFNjAeFw0yNDA3MzAxNzM2MDNaFw0yNTA3MjkxNzQxMDNaMDMxMTAvBgNV
BAMTKDc3OEI4ODUwMjMzRjNEMTEyRDMxMkI3MDdGQjkxREQwMUNBNDIxMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmX72vSLN2773s2qjmlCucWQxC
3jhJl2xHiMcTTcjsx/O/cAS73ukz+iWIiR2PAnG131psFNMEm2lRIW9Q7qqWGfNx
mfQO64eH06zj9Hx1WXE2zU9Ljs38hnXmTELVIVckFT0/zluLlf2vXzxtKtid2VV0
RlTUcMlq+Asqz9wkAmWo0s663DaEraZqLw2QAIijU4dTOZozQ7BwedGPZQT1OUFP
8UH3PO6lCy+tq+FbeNIg3s2g6pFHdBstEPn7Erk+n+nIyUa6MQfRYYYX8l+3hpYY
Q6BUmd7uAz01ZzuxCbzStcCRqXSjt6AKOdS7KDeoQJZXb8Q6xleFUjS9Yn2lAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUd4uIUCM/PREtMStwf7kd0BykIRswHwYDVR0j
BBgwFoAUW9ORETdXXrk86DZdikzQVRpNm+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBqZXM0UHZmUmFCRHE2dTR0cUFYU3E5djNRUmc3YUxXQlg5VWRZZGg3
SkcvMC81QkQzOTExMTM3NTc1RUI5M0NFODM2NUQ4QTRDRDA1NTFBNEQ5QkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRDM5MTExMzc1NzVFQjkz
Q0U4MzY1RDhBNENEMDU1MUE0RDlCRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQamVzNFB2ZlJhQkRxNnU0dHFBWFNxOXYzUVJnN2FMV0JYOVVkWWRoN0pHLzAv
MzIzODMwMzQzYTMyMzAzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQgmDANBgkqhkiG9w0BAQsFAAOCAQEAMeINQGrh
DPulEQ3EyFSFSyqeyYRwqClEAC3+il4Imb0Y4afVPk5mgkM3LLSYA18B4SjhomWc
ArLzq8IxwLGD85mM1Z/4beYOyoOEJXNlAkdXy/QzBmbHfR3JjxyW+YdSnkEkSNvu
V9eikByfcwgG2uESKxUXGiqOm3RDK9QQGt36OGvvGn6OVqj/zN+ziz2gK2MUrYqY
Z5d+hf7K1IuOiYTN9Eo6fqjHolzA1bpk/9TSQdI9hXFSTQ+nc/m6M0EA7qx5xWnb
A6KRuLM+CoeiOg+2BINrBO/B7OVuMuEA8JDKEnT0yPSHOZmOZW+KB02ooWmank5p
upqld4r6meR9Tw==
-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org