Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3332203d3e203631383632.roa
File: 323830343a316137633a3a2f33322d3332203d3e203631383632.roa (raw, json)
Hash identifier: E83f/6XiET4Ka4K6OemaFJuDwH8uBxF4e0udshNXNyQ=
Subject key identifier: 8C:ED:4D:B3:12:F8:23:22:80:DF:DF:9C:92:BC:30:26:34:67:57:A3
Certificate issuer: /CN=DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B
Certificate serial: 3CF9B3AB01DF4BFE6C70E39692AA31298561CE1B
Authority key identifier: DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3332203d3e203631383632.roa
Signing time: Tue 24 Sep 2024 18:03:11 +0000
ROA not before: Tue 24 Sep 2024 17:58:11 +0000
ROA not after: Tue 23 Sep 2025 18:03:11 +0000
asID: 61862
IP address blocks: 2804:1a7c::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f9:b3:ab:01:df:4b:fe:6c:70:e3:96:92:aa:31:29:85:61:ce:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B
Validity
Not Before: Sep 24 17:58:11 2024 GMT
Not After : Sep 23 18:03:11 2025 GMT
Subject: CN=8CED4DB312F8232280DFDF9C92BC3026346757A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:39:45:fd:a6:43:d2:f7:82:a2:bc:f0:d6:
ef:fe:ee:d7:62:89:e3:20:70:1a:1b:01:43:78:0b:
74:97:f7:f7:ca:72:37:1e:f1:35:e0:9c:63:c2:36:
07:36:e0:bf:c5:ad:86:89:34:e7:26:2a:f1:08:30:
7e:ee:1a:68:07:7d:e2:3f:42:99:ff:4c:ba:95:3a:
fe:8e:e2:bd:ce:6a:76:a9:89:c5:a6:4d:24:f6:c3:
a4:40:83:9d:30:47:6d:ff:17:04:1b:d9:fe:fb:03:
e8:7b:5f:45:34:75:95:60:40:f6:54:3d:8e:dd:6a:
d7:f6:a7:16:49:ac:08:59:87:85:be:b9:3b:27:a7:
ef:e6:89:33:14:b4:ec:37:cb:76:be:0e:41:9d:ad:
bc:c3:45:b3:28:db:35:36:cf:57:2f:d5:11:b4:b9:
3b:af:cc:a3:17:58:65:77:78:91:95:1a:cb:e0:93:
a2:de:ea:85:84:9f:f0:f5:6f:dc:4c:49:35:08:46:
8e:53:a1:3b:b0:7f:fc:a9:f4:60:19:80:4a:39:9a:
ff:3b:67:8e:5d:22:e9:07:9f:75:e6:23:23:7a:83:
b7:89:a9:1c:52:ad:aa:8a:12:d8:3e:b9:df:de:f7:
f1:67:81:d7:82:cf:37:eb:45:48:1c:25:10:9e:06:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:4D:B3:12:F8:23:22:80:DF:DF:9C:92:BC:30:26:34:67:57:A3
X509v3 Authority Key Identifier:
keyid:DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3332203d3e203631383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a7c::/32
Signature Algorithm: sha256WithRSAEncryption
d3:5e:ff:fc:8c:c6:9f:fc:ab:84:bb:91:62:67:71:53:dd:54:
d6:ff:52:8c:f7:da:24:84:75:1c:47:0d:84:67:9e:d3:64:08:
3f:f9:e8:34:14:d9:91:9f:80:5b:52:8c:37:a6:13:db:e8:66:
99:a6:bd:49:70:c2:e6:2d:61:ce:ef:d1:6b:c5:f1:57:e3:da:
f2:52:32:1d:72:fc:e1:0f:32:63:d9:99:86:69:fa:06:e8:91:
ea:35:3d:a3:e7:01:1a:8c:a7:c6:31:92:0e:b0:c1:e0:61:ab:
c1:b5:11:4c:4d:12:df:0f:93:8a:6a:94:0d:3c:4a:d3:9f:e0:
14:3f:ff:e2:5a:a6:60:bb:91:11:90:46:3d:8d:e6:e4:d9:44:
b1:6c:5d:2a:9d:69:08:54:78:c5:98:87:19:e3:10:1d:fe:5f:
20:a5:77:c1:3a:a4:10:56:95:53:a9:6e:9a:92:51:ab:d2:ef:
89:12:87:45:af:28:90:11:0f:ac:cc:6e:64:d8:08:ce:82:8e:
3f:21:4f:bc:12:48:2b:fd:c5:33:58:51:aa:8c:bd:65:e9:ca:
d5:eb:35:1e:3e:cb:b0:b2:00:19:7c:d6:cd:89:9c:25:45:4b:
87:e7:1a:95:63:6e:d4:3a:f5:f7:e5:35:fc:8f:6a:89:14:40:
7d:e0:8e:b1
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUPPmzqwHfS/5scOOWkqoxKYVhzhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCRUNDQUMyQUY3N0RENTA1M0FGNzlCNTdDMURFMzgx
NEU2M0U5QjAeFw0yNDA5MjQxNzU4MTFaFw0yNTA5MjMxODAzMTFaMDMxMTAvBgNV
BAMTKDhDRUQ0REIzMTJGODIzMjI4MERGREY5QzkyQkMzMDI2MzQ2NzU3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZkTlF/aZD0veCorzw1u/+7tdi
ieMgcBobAUN4C3SX9/fKcjce8TXgnGPCNgc24L/FrYaJNOcmKvEIMH7uGmgHfeI/
Qpn/TLqVOv6O4r3OanapicWmTST2w6RAg50wR23/FwQb2f77A+h7X0U0dZVgQPZU
PY7datf2pxZJrAhZh4W+uTsnp+/miTMUtOw3y3a+DkGdrbzDRbMo2zU2z1cv1RG0
uTuvzKMXWGV3eJGVGsvgk6Le6oWEn/D1b9xMSTUIRo5ToTuwf/yp9GAZgEo5mv87
Z45dIukHn3XmIyN6g7eJqRxSraqKEtg+ud/e9/FngdeCzzfrRUgcJRCeBpKtAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUjO1NsxL4IyKA39+ckrwwJjRnV6MwHwYDVR0j
BBgwFoAU3b7MrCr3fdUFOvebV8HeOBTmPpswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz
LzAvRERCRUNDQUMyQUY3N0RENTA1M0FGNzlCNTdDMURFMzgxNEU2M0U5Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EREJFQ0NBQzJBRjc3REQ1MDUz
QUY3OUI1N0MxREUzODE0RTYzRTlCLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
b2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNzLzAvMzIz
ODMwMzQzYTMxNjEzNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM4MzYz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgEGnwwDQYJKoZIhvcNAQELBQADggEBANNe//yMxp/8q4S7
kWJncVPdVNb/Uoz32iSEdRxHDYRnntNkCD/56DQU2ZGfgFtSjDemE9voZpmmvUlw
wuYtYc7v0WvF8Vfj2vJSMh1y/OEPMmPZmYZp+gbokeo1PaPnARqMp8Yxkg6wweBh
q8G1EUxNEt8Pk4pqlA08StOf4BQ//+JapmC7kRGQRj2N5uTZRLFsXSqdaQhUeMWY
hxnjEB3+XyCld8E6pBBWlVOpbpqSUavS74kSh0WvKJARD6zMbmTYCM6Cjj8hT7wS
SCv9xTNYUaqMvWXpytXrNR4+y7CyABl81s2JnCVFS4fnGpVjbtQ69fflNfyPaokU
QH3gjrE=
-----END CERTIFICATE-----
Generated at Wed Oct 2 14:01:01 2024 by rpki-client on console-ams.rpki-client.org