Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
File: 3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: HMk5TEOLhd+7nbCKdRsK209RYXck7SCmT2Rz82O3kE8=
Subject key identifier: AF:0F:7D:BF:E2:44:E9:6E:26:B6:5B:8F:99:2E:67:7C:A4:00:33:B6
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 6567E485E8C392649E7C6CB2C2E6CADEA01D17DD
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:09:02 +0000
ROA not before: Fri 03 May 2024 20:04:02 +0000
ROA not after: Fri 02 May 2025 20:09:02 +0000
asID: 28667
IP address blocks: 168.196.108.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:67:e4:85:e8:c3:92:64:9e:7c:6c:b2:c2:e6:ca:de:a0:1d:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:04:02 2024 GMT
Not After : May 2 20:09:02 2025 GMT
Subject: CN=AF0F7DBFE244E96E26B65B8F992E677CA40033B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:0f:0e:af:e6:69:14:6e:fe:1d:52:2c:15:
7d:21:64:6d:23:30:a7:31:7f:b5:46:0e:5d:ce:56:
c0:0a:4e:4f:7f:d2:61:d8:ce:87:63:52:c8:09:4b:
1d:f5:cf:c2:c0:8e:e4:39:50:58:68:27:4b:ab:fb:
32:bd:56:90:e1:6b:83:03:48:10:09:70:68:69:41:
7c:6e:c0:c6:34:70:5b:05:8f:3f:78:8a:55:41:f1:
b0:8c:5d:26:c7:d9:26:99:08:7c:23:f8:23:11:b8:
b7:a9:28:c9:95:5b:fd:0c:65:29:e8:8c:7f:05:c0:
12:ce:00:7b:50:0e:84:3e:ba:40:a5:0d:f3:99:9f:
e4:b8:68:9c:8b:5f:a3:61:20:c5:79:a7:5d:bb:64:
b8:a8:e5:58:84:ce:86:44:98:81:8a:91:c1:82:d2:
1c:3d:a7:df:d6:da:b6:ac:34:e5:f2:a5:2f:1d:f7:
14:dd:10:0e:eb:b0:2c:bf:87:c2:a3:6a:55:73:51:
58:34:d6:b1:33:03:0f:05:98:bf:ee:e7:eb:54:6d:
93:0c:94:0d:c6:6c:d2:2d:8f:bd:87:78:e1:ca:b1:
5d:d0:4c:6d:49:04:d4:de:62:dc:e1:a0:f5:25:d5:
2d:02:c5:b7:6a:aa:bd:55:d1:c8:2e:3f:c6:87:ad:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:7D:BF:E2:44:E9:6E:26:B6:5B:8F:99:2E:67:7C:A4:00:33:B6
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.108.0/22
Signature Algorithm: sha256WithRSAEncryption
52:3e:00:b8:0d:9a:f8:a7:47:0e:87:98:80:f7:2f:94:20:51:
36:4c:c6:97:d2:fb:8a:28:22:e8:28:3f:1c:1a:56:bd:67:4f:
00:24:73:30:64:c9:09:b9:e1:6c:fa:6a:cd:9d:e6:4e:52:5c:
a9:a8:45:29:0c:6c:92:1b:5e:4e:fd:e0:a6:18:38:9c:d9:8a:
74:8e:35:dc:78:44:e4:c5:fd:df:f6:68:bd:dc:3e:d3:69:69:
48:2c:28:b4:f9:50:73:fe:dd:ae:6f:ab:83:52:50:0b:72:3f:
c7:e3:bb:5c:49:80:dd:f1:24:af:79:c4:b2:80:a0:e4:75:78:
97:66:14:a9:92:35:9e:58:99:43:bb:ba:00:2e:45:62:6c:61:
98:a9:22:d0:4c:66:d2:3a:1d:11:13:db:65:2f:5d:f1:ec:19:
22:1e:6a:95:e2:6a:1d:54:ac:6f:54:01:b3:8f:b4:25:18:51:
41:e3:be:74:4f:ac:83:ca:1d:cb:81:f8:b9:3c:d2:36:48:ce:
4d:12:27:5d:b5:16:33:92:67:5a:5c:8d:ca:17:f4:59:5b:99:
ba:cf:27:29:ed:39:81:64:ec:b4:18:d6:a7:7c:c8:58:4d:5d:
bd:ca:29:8b:3e:f2:27:26:41:12:bc:56:c3:f5:96:da:7e:43:
45:31:d9:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZWfkhejDkmSefGyywubK3qAdF90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjRGRTI4RTBCQjhERkNCMzJGRjI3RkQ3NEVFREVG
MzYzNDJEMzAeFw0yNDA1MDMyMDA0MDJaFw0yNTA1MDIyMDA5MDJaMDMxMTAvBgNV
BAMTKEFGMEY3REJGRTI0NEU5NkUyNkI2NUI4Rjk5MkU2NzdDQTQwMDMzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTQ8Or+ZpFG7+HVIsFX0hZG0j
MKcxf7VGDl3OVsAKTk9/0mHYzodjUsgJSx31z8LAjuQ5UFhoJ0ur+zK9VpDha4MD
SBAJcGhpQXxuwMY0cFsFjz94ilVB8bCMXSbH2SaZCHwj+CMRuLepKMmVW/0MZSno
jH8FwBLOAHtQDoQ+ukClDfOZn+S4aJyLX6NhIMV5p127ZLio5ViEzoZEmIGKkcGC
0hw9p9/W2rasNOXypS8d9xTdEA7rsCy/h8KjalVzUVg01rEzAw8FmL/u5+tUbZMM
lA3GbNItj72HeOHKsV3QTG1JBNTeYtzhoPUl1S0Cxbdqqr1V0cguP8aHrQPnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrw99v+JE6W4mtluPmS5nfKQAM7YwHwYDVR0j
BBgwFoAUnAtP4o4LuN/LMv8n/XTu3vNjQtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMC85QzBCNEZFMjhFMEJCOERGQ0IzMkZGMjdGRDc0RUVERUYzNjM0MkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEI0RkUyOEUwQkI4REZD
QjMyRkYyN0ZENzRFRURFRjM2MzQyRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxGwwDQYJKoZIhvcNAQELBQADggEBAFI+ALgN
mvinRw6HmID3L5QgUTZMxpfS+4ooIugoPxwaVr1nTwAkczBkyQm54Wz6as2d5k5S
XKmoRSkMbJIbXk794KYYOJzZinSONdx4ROTF/d/2aL3cPtNpaUgsKLT5UHP+3a5v
q4NSUAtyP8fju1xJgN3xJK95xLKAoOR1eJdmFKmSNZ5YmUO7ugAuRWJsYZipItBM
ZtI6HRET22UvXfHsGSIeapXiah1UrG9UAbOPtCUYUUHjvnRPrIPKHcuB+Lk80jZI
zk0SJ121FjOSZ1pcjcoX9FlbmbrPJyntOYFk7LQY1qd8yFhNXb3KKYs+8icmQRK8
VsP1ltp+Q0Ux2dc=
-----END CERTIFICATE-----
Generated at Thu May 30 10:55:50 2024 by rpki-client on console-fra.rpki-client.org