Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136302e302f32322d3234203d3e203238313235.roa
File: 3139312e33362e3136302e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier: E5s+VYI1VqxLXNCagsOOqplIqM3w8dUGm4HcJvoNmok=
Subject key identifier: F9:A8:55:30:68:F6:6E:DA:19:15:14:D4:70:8F:DD:F7:07:33:AC:8A
Certificate issuer: /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial: 6E7FF2ED3CCF73E4B6FAF31C640F82EBE6F22EE5
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136302e302f32322d3234203d3e203238313235.roa
Signing time: Wed 03 Apr 2024 20:20:49 +0000
ROA not before: Wed 03 Apr 2024 20:15:49 +0000
ROA not after: Wed 02 Apr 2025 20:20:49 +0000
asID: 28125
IP address blocks: 191.36.160.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7f:f2:ed:3c:cf:73:e4:b6:fa:f3:1c:64:0f:82:eb:e6:f2:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Validity
Not Before: Apr 3 20:15:49 2024 GMT
Not After : Apr 2 20:20:49 2025 GMT
Subject: CN=F9A8553068F66EDA191514D4708FDDF70733AC8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:1d:e3:c8:70:5a:ea:99:ce:ea:21:f3:16:
ab:9b:7e:3c:15:48:f2:63:c8:a3:22:80:0a:3e:1b:
d8:1e:be:45:77:69:93:92:71:3d:e2:e8:7a:bc:68:
f4:32:2b:d0:5c:6c:ca:5c:c7:06:f4:d3:1c:67:d3:
b2:58:79:76:fe:13:27:7a:1b:a0:29:de:be:7e:5b:
ad:41:8d:e0:2b:0b:99:ec:3a:9e:93:36:fe:81:23:
62:47:fa:33:2d:d1:ce:17:14:dc:d0:c9:48:7d:5d:
fe:f4:ad:e5:3d:cb:ee:c4:3d:ba:52:36:e2:b5:df:
ae:38:39:3d:88:c7:6e:e1:cb:72:cc:0e:a5:06:37:
6a:51:41:f1:c8:3e:89:b7:bc:5a:24:84:b2:d0:97:
03:82:40:72:75:fe:50:6f:f3:bf:aa:05:ca:2a:40:
b9:48:36:81:21:a9:d8:3e:95:4a:f8:62:d5:f0:d7:
29:fd:d1:87:60:3f:8d:59:34:81:d0:e5:67:96:0e:
d8:3a:10:d7:49:08:e5:ed:b3:48:79:3b:05:91:80:
97:f3:98:5f:c8:62:ff:bb:00:94:55:dd:c7:fc:a4:
92:58:4d:6e:2f:9e:ae:e1:72:ab:8c:87:b6:7a:f2:
d5:a9:c1:12:16:1a:52:de:e9:88:b4:6f:e2:76:6a:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:55:30:68:F6:6E:DA:19:15:14:D4:70:8F:DD:F7:07:33:AC:8A
X509v3 Authority Key Identifier:
keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136302e302f32322d3234203d3e203238313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.36.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0f:0d:d4:7c:0b:bc:0e:cb:08:d7:0e:d1:cd:dc:5f:7d:5b:
dd:1c:63:6f:7f:0c:0c:94:e0:50:73:63:c7:58:0f:73:10:e7:
99:e0:37:80:d9:2e:4b:c9:c1:54:37:54:38:e4:bb:f8:83:10:
2e:c6:1c:7c:bb:e8:1c:ce:1f:b4:cb:ad:9f:ee:16:11:57:b6:
60:0f:82:01:13:fb:6c:b4:66:46:85:c0:5a:8a:ea:aa:71:ff:
e0:98:c3:da:d0:63:4f:ba:07:f9:7c:6a:05:99:c4:25:9b:47:
91:9d:c3:d4:35:e9:75:c3:5d:de:f1:3c:9c:f5:3f:1d:f7:52:
60:1a:34:4e:45:7f:e7:7d:56:39:eb:17:91:b5:42:e8:92:74:
c7:9d:27:7d:3b:17:f0:d5:a3:11:a0:9d:90:1e:99:d7:bb:b6:
3e:67:48:03:fd:97:f1:70:19:dd:bc:3a:2b:ed:03:f8:b6:43:
9d:34:32:cf:0a:ca:cb:27:b5:14:28:c2:02:27:76:b1:60:bd:
10:6b:2c:bb:75:64:81:e0:1c:09:c4:c3:46:50:31:6c:37:d0:
c7:5c:75:9f:6f:9d:7e:fd:b2:f8:74:75:be:43:eb:d9:e9:b3:
06:22:a6:09:16:6a:94:22:db:7b:27:85:d2:a3:33:75:11:c8:
dd:60:4b:a5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbn/y7TzPc+S2+vMcZA+C6+byLuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNEM2N0EzQUJCQTkyRjMwOTVGOTRFMTIyOEYwNjM2
NUU2QUVFQTAeFw0yNDA0MDMyMDE1NDlaFw0yNTA0MDIyMDIwNDlaMDMxMTAvBgNV
BAMTKEY5QTg1NTMwNjhGNjZFREExOTE1MTRENDcwOEZEREY3MDczM0FDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0h3jyHBa6pnO6iHzFqubfjwV
SPJjyKMigAo+G9gevkV3aZOScT3i6Hq8aPQyK9BcbMpcxwb00xxn07JYeXb+Eyd6
G6Ap3r5+W61BjeArC5nsOp6TNv6BI2JH+jMt0c4XFNzQyUh9Xf70reU9y+7EPbpS
NuK13644OT2Ix27hy3LMDqUGN2pRQfHIPom3vFokhLLQlwOCQHJ1/lBv87+qBcoq
QLlINoEhqdg+lUr4YtXw1yn90YdgP41ZNIHQ5WeWDtg6ENdJCOXts0h5OwWRgJfz
mF/IYv+7AJRV3cf8pJJYTW4vnq7hcquMh7Z68tWpwRIWGlLe6Yi0b+J2ahvhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+ahVMGj2btoZFRTUcI/d9wczrIowHwYDVR0j
BBgwFoAUy+TGejq7qS8wlflOEijwY2XmruowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMS9DQkU0QzY3QTNBQkJBOTJGMzA5NUY5NEUxMjI4RjA2MzY1RTZBRUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRTRDNjdBM0FCQkE5MkYz
MDk1Rjk0RTEyMjhGMDYzNjVFNkFFRUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzEv
MzEzOTMxMmUzMzM2MmUzMTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvySgMA0GCSqGSIb3DQEBCwUAA4IBAQAuDw3UfAu8
DssI1w7RzdxffVvdHGNvfwwMlOBQc2PHWA9zEOeZ4DeA2S5LycFUN1Q45Lv4gxAu
xhx8u+gczh+0y62f7hYRV7ZgD4IBE/tstGZGhcBaiuqqcf/gmMPa0GNPugf5fGoF
mcQlm0eRncPUNel1w13e8Tyc9T8d91JgGjRORX/nfVY56xeRtULoknTHnSd9Oxfw
1aMRoJ2QHpnXu7Y+Z0gD/ZfxcBndvDor7QP4tkOdNDLPCsrLJ7UUKMICJ3axYL0Q
ayy7dWSB4BwJxMNGUDFsN9DHXHWfb51+/bL4dHW+Q+vZ6bMGIqYJFmqUItt7J4XS
ozN1EcjdYEul
-----END CERTIFICATE-----
Generated at Wed Jul 3 14:35:15 2024 by rpki-client on console-ams.rpki-client.org