Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130342e302f32322d3332203d3e203631363730.roa
File: 3133312e3130302e3130342e302f32322d3332203d3e203631363730.roa (raw, json)
Hash identifier: lpCrOqJdKlk3Hrw/DPnkIZJnRUZsf+IvuVSWFcmm07A=
Subject key identifier: 45:D4:44:8E:F9:B3:E8:12:3B:71:A9:DE:A0:9A:AD:46:6F:E4:16:69
Certificate issuer: /CN=95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D
Certificate serial: 4297F0480F7FB7FF519A7A96C8C5E590D2C1AC2B
Authority key identifier: 95:FD:3F:B0:F9:F7:C3:F1:65:18:10:BB:35:A5:D8:A6:D2:CE:FA:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130342e302f32322d3332203d3e203631363730.roa
Signing time: Mon 27 May 2024 16:27:28 +0000
ROA not before: Mon 27 May 2024 16:22:28 +0000
ROA not after: Mon 26 May 2025 16:27:28 +0000
asID: 61670
IP address blocks: 131.100.104.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:97:f0:48:0f:7f:b7:ff:51:9a:7a:96:c8:c5:e5:90:d2:c1:ac:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D
Validity
Not Before: May 27 16:22:28 2024 GMT
Not After : May 26 16:27:28 2025 GMT
Subject: CN=45D4448EF9B3E8123B71A9DEA09AAD466FE41669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:d7:94:e5:95:0e:4e:cd:3f:1f:3f:14:01:
77:25:29:85:ae:82:80:e7:12:b0:51:8f:d1:9e:17:
4b:7e:7d:b6:f9:9c:fe:d8:f5:18:52:52:69:5f:84:
a7:28:89:74:c6:3c:21:af:5c:ce:7b:a8:28:6f:90:
36:4d:2f:6d:e5:91:82:65:c6:02:ec:02:c2:ad:59:
0c:b2:fe:c7:d8:6a:26:40:97:63:2d:53:3d:0d:bb:
b0:fa:62:33:5c:bd:59:4f:68:d2:0c:d1:7b:65:c0:
6c:20:6a:8f:c4:da:b7:35:31:ba:76:98:ca:fa:db:
74:75:60:75:70:1e:b2:80:93:8c:fd:b6:cb:85:71:
ec:66:50:45:f1:f4:41:f2:89:0f:50:bb:63:3a:a6:
da:d8:fb:57:54:80:a4:08:44:1b:07:6d:6a:b7:a6:
a0:0d:c8:01:51:de:18:44:ce:44:20:3f:75:30:18:
9a:48:23:cf:2c:ba:36:c1:84:cd:3c:44:9e:4b:1f:
11:25:ab:5e:4b:ae:67:49:49:4f:d9:bb:db:3b:26:
5f:44:be:dd:92:c4:64:50:eb:39:12:01:a1:38:02:
79:6e:4a:0a:e8:47:a0:4c:b2:1f:bd:7d:d1:42:ad:
e9:21:c4:6b:c2:35:41:a7:12:ce:09:f9:ee:f8:e5:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D4:44:8E:F9:B3:E8:12:3B:71:A9:DE:A0:9A:AD:46:6F:E4:16:69
X509v3 Authority Key Identifier:
keyid:95:FD:3F:B0:F9:F7:C3:F1:65:18:10:BB:35:A5:D8:A6:D2:CE:FA:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130342e302f32322d3332203d3e203631363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:52:ee:f0:a9:9c:79:7e:ff:e6:50:58:77:60:a0:34:5b:3b:
1a:39:3d:ad:e6:aa:26:e8:42:06:24:02:20:37:42:1c:3a:7a:
60:2f:1c:f0:44:bf:92:5a:77:53:90:0a:a5:ab:44:a5:b0:00:
2b:8a:7f:77:41:3f:a8:95:ed:d8:ae:74:24:cc:5f:b2:18:a7:
70:de:c7:f4:29:49:cb:83:b6:96:83:24:ba:1c:37:1c:2c:5f:
d2:87:aa:31:ca:68:dd:47:90:25:22:a9:61:6e:15:b1:f7:3d:
a8:61:48:54:c6:cb:48:5c:25:6c:80:55:37:71:03:f8:99:29:
a7:7a:ef:95:48:5e:31:ec:c2:de:54:ca:a0:2d:7b:40:45:5d:
95:b8:88:84:43:af:89:2e:91:fc:53:8f:63:17:89:0f:e3:93:
44:b7:bf:ae:9f:af:af:26:b4:ac:79:ab:6c:e2:02:5c:de:48:
16:4a:fc:40:85:d8:3a:cc:28:f3:24:7f:1b:35:6e:e6:2c:55:
7f:01:41:4c:af:40:c8:37:85:6d:d1:fb:4d:e1:d8:ae:f9:e4:
55:df:5a:15:be:56:a6:f0:c6:9c:38:12:57:10:31:83:3d:f7:
3b:d3:7f:b1:b9:6c:2b:fe:5b:54:1a:fa:d7:2f:bb:39:91:a0:
cd:7a:98:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQpfwSA9/t/9RmnqWyMXlkNLBrCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGRDNGQjBGOUY3QzNGMTY1MTgxMEJCMzVBNUQ4QTZE
MkNFRkEzRDAeFw0yNDA1MjcxNjIyMjhaFw0yNTA1MjYxNjI3MjhaMDMxMTAvBgNV
BAMTKDQ1RDQ0NDhFRjlCM0U4MTIzQjcxQTlERUEwOUFBRDQ2NkZFNDE2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpNeU5ZUOTs0/Hz8UAXclKYWu
goDnErBRj9GeF0t+fbb5nP7Y9RhSUmlfhKcoiXTGPCGvXM57qChvkDZNL23lkYJl
xgLsAsKtWQyy/sfYaiZAl2MtUz0Nu7D6YjNcvVlPaNIM0XtlwGwgao/E2rc1Mbp2
mMr623R1YHVwHrKAk4z9tsuFcexmUEXx9EHyiQ9Qu2M6ptrY+1dUgKQIRBsHbWq3
pqANyAFR3hhEzkQgP3UwGJpII88sujbBhM08RJ5LHxElq15LrmdJSU/Zu9s7Jl9E
vt2SxGRQ6zkSAaE4AnluSgroR6BMsh+9fdFCrekhxGvCNUGnEs4J+e745b3VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURdREjvmz6BI7caneoJqtRm/kFmkwHwYDVR0j
BBgwFoAUlf0/sPn3w/FlGBC7NaXYptLO+j0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlk
cVovMC85NUZEM0ZCMEY5RjdDM0YxNjUxODEwQkIzNUE1RDhBNkQyQ0VGQTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RkQzRkIwRjlGN0MzRjE2
NTE4MTBCQjM1QTVEOEE2RDJDRUZBM0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hVaE5tQ2ZwVlVCQUNtak1MOG13OUdoVThzWk5SV256YkJ0QmlTSkRZZHFaLzAv
MzEzMzMxMmUzMTMwMzAyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2
MzEzNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZGgwDQYJKoZIhvcNAQELBQADggEBAKJS7vCp
nHl+/+ZQWHdgoDRbOxo5Pa3mqiboQgYkAiA3Qhw6emAvHPBEv5Jad1OQCqWrRKWw
ACuKf3dBP6iV7diudCTMX7IYp3Dex/QpScuDtpaDJLocNxwsX9KHqjHKaN1HkCUi
qWFuFbH3PahhSFTGy0hcJWyAVTdxA/iZKad675VIXjHswt5UyqAte0BFXZW4iIRD
r4kukfxTj2MXiQ/jk0S3v66fr68mtKx5q2ziAlzeSBZK/ECF2DrMKPMkfxs1buYs
VX8BQUyvQMg3hW3R+03h2K755FXfWhW+Vqbwxpw4ElcQMYM99zvTf7G5bCv+W1Qa
+tcvuzmRoM16mOo=
-----END CERTIFICATE-----
Generated at Thu Oct 10 09:30:00 2024 by rpki-client on console-fra.rpki-client.org