Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
File: 3137392e3132372e36342e302f32312d3234203d3e203238323837.roa (raw, json)
Hash identifier: tMN6mjmD38d9a4GrsRLLas0PxsNBZPGleS9A2izioY4=
Subject key identifier: 11:C9:61:85:56:41:89:9E:12:11:6E:7C:5D:0B:37:52:C8:5A:2A:19
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 4CCBEDC77A712D3CA127F4F2DDD603F15FC3CBF8
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
Signing time: Wed 12 Jun 2024 13:13:30 +0000
ROA not before: Wed 12 Jun 2024 13:08:30 +0000
ROA not after: Wed 11 Jun 2025 13:13:30 +0000
asID: 28287
IP address blocks: 179.127.64.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cb:ed:c7:7a:71:2d:3c:a1:27:f4:f2:dd:d6:03:f1:5f:c3:cb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:08:30 2024 GMT
Not After : Jun 11 13:13:30 2025 GMT
Subject: CN=11C961855641899E12116E7C5D0B3752C85A2A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:01:97:ae:b1:81:69:e7:99:de:22:6c:04:
d0:09:cf:15:df:fd:24:b4:70:e9:69:51:81:8c:32:
5d:1b:46:44:16:f2:0d:27:12:b7:ae:40:f5:42:42:
5c:45:a1:eb:22:05:12:6e:9e:e4:6d:3b:6a:0a:c5:
53:a3:1e:0c:42:d4:79:18:98:b3:8d:8a:fc:6c:a1:
b6:26:12:da:7d:72:7f:18:09:b5:8a:9b:6a:6e:0f:
9e:33:f4:e9:0d:81:c9:8c:47:75:c1:0e:4e:26:a0:
2d:ae:93:3b:09:3b:12:bc:f0:5f:ef:cb:63:6a:8a:
c7:84:f1:c3:12:24:a4:90:56:eb:09:6f:28:bf:04:
d3:6b:fe:36:5b:49:3d:48:2e:dd:db:8a:3a:64:ea:
26:02:b2:95:42:21:71:44:8c:84:45:b0:de:1c:79:
a8:34:90:9e:5f:43:95:c5:e4:36:4d:e2:46:e9:0c:
eb:b4:e8:65:0d:49:fa:32:c4:22:8a:6c:3d:20:7b:
32:e0:d3:23:dc:de:c9:fd:16:0c:34:1d:bf:e0:62:
9d:46:db:cb:a3:e6:d0:0a:80:a6:35:d7:f5:b9:44:
ad:73:dd:f5:84:d3:c8:83:25:35:13:d2:5a:40:86:
c4:ff:05:0c:c9:c9:37:5c:69:bb:e6:8e:ad:50:56:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C9:61:85:56:41:89:9E:12:11:6E:7C:5D:0B:37:52:C8:5A:2A:19
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.127.64.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:85:db:95:39:06:65:fa:bb:40:b8:62:c9:ce:f1:c4:f3:94:
69:81:e3:63:61:14:21:2d:6c:4f:c1:16:32:79:28:ef:ed:b0:
88:22:55:cc:23:08:8d:bb:a4:37:f3:89:75:a4:4b:d8:12:1e:
39:22:dd:44:ff:78:4c:52:71:99:35:23:61:60:39:e7:d6:6e:
3b:c8:85:21:c2:9f:93:1f:ce:d7:b3:f7:54:51:12:bd:73:df:
cb:8f:34:d5:2f:e9:8b:0b:96:30:5c:fd:2c:00:3b:d5:cb:f2:
c1:7c:bc:2f:76:00:a9:34:cd:2a:8f:3d:d7:bd:23:8b:cd:4b:
1f:f0:29:29:f1:5f:7a:0c:a3:08:ed:8b:ea:f0:80:4a:35:ca:
06:2c:e0:cf:b2:4f:c1:bf:ce:c4:2c:15:7c:ce:32:c0:5f:63:
66:ed:9e:8a:7b:99:a3:91:63:c3:ec:74:60:08:cb:f6:c5:41:
26:40:a7:24:6f:64:0e:af:bb:f7:d4:8e:0f:2e:f9:78:5f:f0:
c3:b3:0a:28:ad:a1:9e:48:b8:bf:f5:6f:a4:68:cd:75:4a:77:
9e:51:e2:c9:e8:0b:0f:5f:b6:a5:32:de:cd:2a:8d:c1:43:36:
4d:64:c9:a3:1c:3a:52:79:62:d7:28:78:04:3e:0a:a6:b3:e9:
86:79:c3:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTMvtx3pxLTyhJ/Ty3dYD8V/Dy/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVCNTY0MEU1RTUyNzg3OEZDOTQ2QzdFNDA0REVFRjBG
OTJDQjUzRjAeFw0yNDA2MTIxMzA4MzBaFw0yNTA2MTExMzEzMzBaMDMxMTAvBgNV
BAMTKDExQzk2MTg1NTY0MTg5OUUxMjExNkU3QzVEMEIzNzUyQzg1QTJBMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSwGXrrGBaeeZ3iJsBNAJzxXf
/SS0cOlpUYGMMl0bRkQW8g0nEreuQPVCQlxFoesiBRJunuRtO2oKxVOjHgxC1HkY
mLONivxsobYmEtp9cn8YCbWKm2puD54z9OkNgcmMR3XBDk4moC2ukzsJOxK88F/v
y2NqiseE8cMSJKSQVusJbyi/BNNr/jZbST1ILt3bijpk6iYCspVCIXFEjIRFsN4c
eag0kJ5fQ5XF5DZN4kbpDOu06GUNSfoyxCKKbD0gezLg0yPc3sn9Fgw0Hb/gYp1G
28uj5tAKgKY11/W5RK1z3fWE08iDJTUT0lpAhsT/BQzJyTdcabvmjq1QVh15AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEclhhVZBiZ4SEW58XQs3UshaKhkwHwYDVR0j
BBgwFoAUjrVkDl5SeHj8lGx+QE3u8PkstT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMS84RUI1NjQwRTVFNTI3ODc4RkM5NDZDN0U0MDRERUVGMEY5MkNCNTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQjU2NDBFNUU1Mjc4NzhG
Qzk0NkM3RTQwNERFRUYwRjkyQ0I1M0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzEv
MzEzNzM5MmUzMTMyMzcyZTM2MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs39AMA0GCSqGSIb3DQEBCwUAA4IBAQBPhduVOQZl
+rtAuGLJzvHE85RpgeNjYRQhLWxPwRYyeSjv7bCIIlXMIwiNu6Q384l1pEvYEh45
It1E/3hMUnGZNSNhYDnn1m47yIUhwp+TH87Xs/dUURK9c9/LjzTVL+mLC5YwXP0s
ADvVy/LBfLwvdgCpNM0qjz3XvSOLzUsf8Ckp8V96DKMI7Yvq8IBKNcoGLODPsk/B
v87ELBV8zjLAX2Nm7Z6Ke5mjkWPD7HRgCMv2xUEmQKckb2QOr7v31I4PLvl4X/DD
swooraGeSLi/9W+kaM11SneeUeLJ6AsPX7alMt7NKo3BQzZNZMmjHDpSeWLXKHgE
Pgqms+mGecMg
-----END CERTIFICATE-----
Generated at Mon Jul 8 17:40:59 2024 by rpki-client on console-ams.rpki-client.org