Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32332d3233203d3e20323731313136.roa
File: 3137392e34382e37362e302f32332d3233203d3e20323731313136.roa (raw, json)
Hash identifier: ujdrV86MWmQxzG6HZ5E8G/lIKTvPUxswkkp1r3Yk8x0=
Subject key identifier: E9:E6:B8:B8:9D:CA:0A:53:AD:58:4B:9F:17:EF:54:69:27:30:72:BB
Certificate issuer: /CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Certificate serial: 15CCCD0C3166AF03234905AF72C2885F11729ED9
Authority key identifier: BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32332d3233203d3e20323731313136.roa
Signing time: Tue 21 May 2024 17:12:52 +0000
ROA not before: Tue 21 May 2024 17:07:52 +0000
ROA not after: Tue 20 May 2025 17:12:52 +0000
asID: 271116
IP address blocks: 179.48.76.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cc:cd:0c:31:66:af:03:23:49:05:af:72:c2:88:5f:11:72:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Validity
Not Before: May 21 17:07:52 2024 GMT
Not After : May 20 17:12:52 2025 GMT
Subject: CN=E9E6B8B89DCA0A53AD584B9F17EF5469273072BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:0f:da:76:58:4a:9d:a3:38:a9:78:17:4b:
42:b2:6c:7f:a3:96:1a:0d:8b:3f:e8:0f:8e:50:ad:
e8:c2:2d:d0:e0:a4:c9:a2:62:30:68:86:15:6d:9f:
88:26:1a:ad:7e:6a:28:c2:08:60:df:c5:ba:ae:39:
dd:be:9c:60:85:c4:97:09:73:c7:83:c9:e0:fe:c2:
af:79:c0:f9:41:0c:c5:e9:54:71:c3:0e:07:43:5d:
ab:8d:c1:ae:f5:e6:07:6f:69:91:0e:19:b4:64:50:
5e:a2:21:2e:ad:da:7c:2b:f4:48:2a:ea:f4:6b:6f:
49:6f:d4:c7:1b:47:13:b7:6f:8a:b3:92:a0:a0:00:
f5:fe:fa:52:8d:b6:e7:51:a9:61:c6:f0:07:ce:76:
c9:bd:22:05:15:5a:b1:0a:1b:5b:d7:54:bf:f6:ee:
bd:dd:be:3a:db:e9:20:7b:a5:be:c9:b7:60:63:c8:
db:f0:56:54:d7:64:4a:ea:ff:87:02:f1:04:11:1d:
53:ed:92:82:41:a5:b2:6b:ce:f8:21:8b:c8:3d:f6:
04:a1:87:e0:e8:64:ec:38:7d:a5:59:e9:92:09:96:
9a:fa:0e:9d:6e:e0:26:0c:1d:a6:08:fe:06:a0:45:
97:28:ae:f1:89:36:dd:24:70:d5:c6:e3:80:19:3a:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:B8:B8:9D:CA:0A:53:AD:58:4B:9F:17:EF:54:69:27:30:72:BB
X509v3 Authority Key Identifier:
keyid:BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/BFA24157A827C97984C7CAFBEA2076F6E728252D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32332d3233203d3e20323731313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.48.76.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:af:31:20:5d:e5:4e:72:8b:f0:1a:38:41:de:df:b3:42:5d:
73:40:7d:61:40:da:0b:b7:21:67:f5:50:17:1f:7a:2c:18:e2:
3b:a4:33:ed:a3:74:e9:c1:be:1b:b0:78:35:a3:c0:45:e5:93:
d9:e9:05:f1:5c:06:35:06:10:e4:eb:18:11:37:85:ee:6e:7c:
4f:ea:57:32:b4:ca:46:27:f9:bd:21:9f:8f:ea:40:a4:7c:5d:
98:56:49:14:69:83:a0:6b:f2:41:b7:5c:fe:9a:e7:4c:33:1b:
3a:9b:10:7a:42:72:cc:19:bc:6e:cc:a1:9b:69:5b:7d:03:a5:
79:03:01:2d:a7:60:5e:4b:5c:57:d6:5d:b9:6e:6b:be:ec:39:
16:8f:af:e7:8c:3a:24:40:e5:72:f1:fd:2b:e5:e3:d7:27:22:
03:02:93:d0:e8:2f:b3:a8:f9:a9:b3:87:88:ee:14:74:da:93:
f2:14:ed:d4:f3:82:af:dd:5a:9a:95:62:a9:75:a7:76:ff:d6:
32:ca:79:f9:7a:17:f8:26:fc:d1:ce:b7:c8:d2:77:77:8e:f9:
e1:83:9a:e6:0f:55:e5:b6:49:ee:fb:74:e8:6d:58:0d:24:9c:
bf:46:97:5b:ae:d5:e9:7b:88:ae:36:e1:d6:bb:49:17:27:95:
99:f1:36:e3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFczNDDFmrwMjSQWvcsKIXxFyntkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZBMjQxNTdBODI3Qzk3OTg0QzdDQUZCRUEyMDc2RjZF
NzI4MjUyRDAeFw0yNDA1MjExNzA3NTJaFw0yNTA1MjAxNzEyNTJaMDMxMTAvBgNV
BAMTKEU5RTZCOEI4OURDQTBBNTNBRDU4NEI5RjE3RUY1NDY5MjczMDcyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqVQ/adlhKnaM4qXgXS0KybH+j
lhoNiz/oD45QrejCLdDgpMmiYjBohhVtn4gmGq1+aijCCGDfxbquOd2+nGCFxJcJ
c8eDyeD+wq95wPlBDMXpVHHDDgdDXauNwa715gdvaZEOGbRkUF6iIS6t2nwr9Egq
6vRrb0lv1McbRxO3b4qzkqCgAPX++lKNtudRqWHG8AfOdsm9IgUVWrEKG1vXVL/2
7r3dvjrb6SB7pb7Jt2BjyNvwVlTXZErq/4cC8QQRHVPtkoJBpbJrzvghi8g99gSh
h+DoZOw4faVZ6ZIJlpr6Dp1u4CYMHaYI/gagRZcorvGJNt0kcNXG44AZOgQhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6ea4uJ3KClOtWEufF+9UaScwcrswHwYDVR0j
BBgwFoAUv6JBV6gnyXmEx8r76iB29ucoJS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNERnhvdVI3RUtHVFJ6M1piZlNCdWh5MjRQUHF1Yll3clhlUVQ2R1VS
RzUvMC9CRkEyNDE1N0E4MjdDOTc5ODRDN0NBRkJFQTIwNzZGNkU3MjgyNTJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQTI0MTU3QTgyN0M5Nzk4
NEM3Q0FGQkVBMjA3NkY2RTcyODI1MkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzREZ4b3VSN0VLR1RSejNaYmZTQnVoeTI0UFBxdWJZd3JYZVFUNkdVUkc1LzAv
MzEzNzM5MmUzNDM4MmUzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzEzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBszBMMA0GCSqGSIb3DQEBCwUAA4IBAQArrzEgXeVO
covwGjhB3t+zQl1zQH1hQNoLtyFn9VAXH3osGOI7pDPto3Tpwb4bsHg1o8BF5ZPZ
6QXxXAY1BhDk6xgRN4XubnxP6lcytMpGJ/m9IZ+P6kCkfF2YVkkUaYOga/JBt1z+
mudMMxs6mxB6QnLMGbxuzKGbaVt9A6V5AwEtp2BeS1xX1l25bmu+7DkWj6/njDok
QOVy8f0r5ePXJyIDApPQ6C+zqPmps4eI7hR02pPyFO3U84Kv3VqalWKpdad2/9Yy
ynn5ehf4JvzRzrfI0nd3jvnhg5rmD1Xltknu+3TobVgNJJy/RpdbrtXpe4iuNuHW
u0kXJ5WZ8Tbj
-----END CERTIFICATE-----
Generated at Sat Jun 29 18:32:35 2024 by rpki-client on console-fra.rpki-client.org