Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
File: 3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: GEvycZpTt+WTHT7DxwQ6wCwlJFFidL06MLWC/ohSM/M=
Subject key identifier: BA:73:49:0E:FE:59:88:F2:E1:E1:FF:A9:0B:74:D5:39:1B:FD:97:C1
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 71283614279438E0F34E73E70E8B2783838E0B0A
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
Signing time: Wed 12 Jun 2024 13:14:29 +0000
ROA not before: Wed 12 Jun 2024 13:09:29 +0000
ROA not after: Wed 11 Jun 2025 13:14:29 +0000
asID: 28287
IP address blocks: 167.249.176.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:28:36:14:27:94:38:e0:f3:4e:73:e7:0e:8b:27:83:83:8e:0b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:09:29 2024 GMT
Not After : Jun 11 13:14:29 2025 GMT
Subject: CN=BA73490EFE5988F2E1E1FFA90B74D5391BFD97C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:4c:da:03:8c:1b:a8:40:99:57:dd:ab:4e:
82:07:26:5e:f2:c0:4c:3f:3d:fb:69:87:53:23:e0:
e7:46:38:cc:e0:e1:4d:43:83:75:65:1c:cd:d2:3a:
da:bd:95:9b:36:fa:8c:53:1b:4c:5d:3d:c9:09:f1:
83:6d:5c:6c:83:90:b1:11:65:eb:d1:00:50:dc:65:
8f:15:f3:55:03:a5:1a:05:1a:8d:20:3e:03:70:96:
20:3d:60:36:d2:dc:39:a9:fa:00:40:b1:42:1e:76:
6a:60:57:44:31:d5:56:32:7d:44:ff:83:97:8e:8a:
f9:14:14:c3:db:73:2b:e6:df:7e:f9:61:3e:bd:10:
85:8f:ce:68:2d:b6:ce:d7:43:21:e2:b5:69:a5:e6:
da:7c:55:a8:19:56:a7:c2:cc:b4:7a:ed:50:42:76:
57:0a:9f:48:37:8f:e4:7b:8a:89:33:6d:58:ae:e1:
39:d6:66:b9:34:4f:6d:18:a9:d5:78:bd:60:02:93:
4b:75:86:55:c6:35:9b:b4:0b:45:64:d8:bc:9a:c4:
cb:e4:63:b9:9d:a4:ad:48:1c:8b:d6:d2:84:cc:0b:
98:47:4a:a5:5b:43:7c:02:02:77:c1:cf:98:9b:4b:
50:8c:34:2e:41:98:5d:ab:19:85:6d:41:b0:29:64:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:73:49:0E:FE:59:88:F2:E1:E1:FF:A9:0B:74:D5:39:1B:FD:97:C1
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.176.0/22
Signature Algorithm: sha256WithRSAEncryption
37:f9:55:74:23:5b:76:37:6c:10:bc:fd:61:57:55:99:e9:b7:
d3:92:55:c4:f5:9e:38:4d:5b:23:29:97:e3:e1:ba:a6:ec:b1:
63:7d:56:46:05:8a:e0:cf:af:1f:3f:ba:50:ef:77:1e:d2:c8:
88:bd:f1:ea:48:c2:a7:58:c8:0f:f6:d1:ed:85:83:be:ff:50:
49:4c:37:74:aa:8d:34:39:ca:d5:df:76:3f:32:95:e6:4a:3c:
8c:fc:ec:a1:e5:5f:df:26:be:76:20:8d:e4:c1:08:ef:a2:cd:
26:6a:32:c0:19:c6:b3:12:ac:e5:20:07:78:f8:49:b9:54:85:
7d:f0:2e:9f:17:4e:41:bc:13:1a:15:08:74:e4:b5:44:c2:9c:
9c:04:90:cc:e2:77:61:f1:a3:36:db:e5:62:72:68:a4:79:a9:
61:c7:3e:a1:5b:f4:ec:8a:cc:7b:65:e7:e9:b2:f3:ac:a7:55:
90:62:d6:25:65:a7:75:40:6a:b8:77:17:52:56:8a:83:eb:b8:
94:69:87:98:c4:1a:c8:2b:bf:88:46:17:a7:7e:94:fc:47:64:
a0:49:fc:6f:b3:dc:55:69:f7:7c:7e:52:92:97:5a:db:70:6f:
e5:f5:9c:9e:5a:d2:58:88:b2:35:95:f8:26:f5:59:82:82:ab:
d0:bf:5e:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcSg2FCeUOODzTnPnDosng4OOCwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVCNTY0MEU1RTUyNzg3OEZDOTQ2QzdFNDA0REVFRjBG
OTJDQjUzRjAeFw0yNDA2MTIxMzA5MjlaFw0yNTA2MTExMzE0MjlaMDMxMTAvBgNV
BAMTKEJBNzM0OTBFRkU1OTg4RjJFMUUxRkZBOTBCNzRENTM5MUJGRDk3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqEzaA4wbqECZV92rToIHJl7y
wEw/Pftph1Mj4OdGOMzg4U1Dg3VlHM3SOtq9lZs2+oxTG0xdPckJ8YNtXGyDkLER
ZevRAFDcZY8V81UDpRoFGo0gPgNwliA9YDbS3Dmp+gBAsUIedmpgV0Qx1VYyfUT/
g5eOivkUFMPbcyvm3375YT69EIWPzmgtts7XQyHitWml5tp8VagZVqfCzLR67VBC
dlcKn0g3j+R7iokzbViu4TnWZrk0T20YqdV4vWACk0t1hlXGNZu0C0Vk2LyaxMvk
Y7mdpK1IHIvW0oTMC5hHSqVbQ3wCAnfBz5ibS1CMNC5BmF2rGYVtQbApZDO1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUunNJDv5ZiPLh4f+pC3TVORv9l8EwHwYDVR0j
BBgwFoAUjrVkDl5SeHj8lGx+QE3u8PkstT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMS84RUI1NjQwRTVFNTI3ODc4RkM5NDZDN0U0MDRERUVGMEY5MkNCNTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQjU2NDBFNUU1Mjc4NzhG
Qzk0NkM3RTQwNERFRUYwRjkyQ0I1M0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzEv
MzEzNjM3MmUzMjM0MzkyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+bAwDQYJKoZIhvcNAQELBQADggEBADf5VXQj
W3Y3bBC8/WFXVZnpt9OSVcT1njhNWyMpl+PhuqbssWN9VkYFiuDPrx8/ulDvdx7S
yIi98epIwqdYyA/20e2Fg77/UElMN3SqjTQ5ytXfdj8yleZKPIz87KHlX98mvnYg
jeTBCO+izSZqMsAZxrMSrOUgB3j4SblUhX3wLp8XTkG8ExoVCHTktUTCnJwEkMzi
d2Hxozbb5WJyaKR5qWHHPqFb9OyKzHtl5+my86ynVZBi1iVlp3VAarh3F1JWioPr
uJRph5jEGsgrv4hGF6d+lPxHZKBJ/G+z3FVp93x+UpKXWttwb+X1nJ5a0liIsjWV
+Cb1WYKCq9C/Xus=
-----END CERTIFICATE-----
Generated at Mon Jul 8 17:40:59 2024 by rpki-client on console-ams.rpki-client.org