Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa
File: 3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa (raw, json)
Hash identifier: jN3fPRRI0s+7O+f940QmkIpTuQ7aCAc64rs7wdN2Ga0=
Subject key identifier: F4:66:CA:CC:64:5A:D8:B2:5F:09:B4:61:78:B3:52:43:9E:20:1F:CF
Certificate issuer: /CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
Certificate serial: 39B5E14916D9404AEF0C6563BE62D961FBB337E3
Authority key identifier: 16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa
Signing time: Thu 29 Aug 2024 13:58:05 +0000
ROA not before: Thu 29 Aug 2024 13:53:05 +0000
ROA not after: Thu 28 Aug 2025 13:58:05 +0000
asID: 270305
IP address blocks: 201.216.120.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b5:e1:49:16:d9:40:4a:ef:0c:65:63:be:62:d9:61:fb:b3:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
Validity
Not Before: Aug 29 13:53:05 2024 GMT
Not After : Aug 28 13:58:05 2025 GMT
Subject: CN=F466CACC645AD8B25F09B46178B352439E201FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:85:c2:a5:8f:3f:04:d7:83:6f:bb:6f:be:ec:
c9:7f:43:53:45:4c:04:eb:bf:4c:4d:98:ba:b1:4f:
e2:5d:0f:c0:71:be:93:70:5a:1a:5f:99:bf:62:b3:
0d:aa:f6:fe:e0:df:73:c8:68:df:99:a9:3d:54:a0:
0a:48:af:b8:7d:ff:9a:cc:00:c2:64:4a:91:7f:5a:
cb:7c:b4:87:3f:d9:f9:80:85:c3:08:cc:a1:ef:a9:
28:e6:ab:5d:1a:c8:82:af:88:77:41:3c:49:9c:16:
a6:74:03:2e:6d:47:85:95:95:05:6d:45:2b:e6:9b:
f4:bd:48:18:c7:15:ce:26:1b:8d:37:da:47:25:ab:
5f:95:97:43:b7:07:f0:28:e5:41:86:06:16:4d:1a:
65:78:64:83:4f:11:89:60:c3:38:7b:c7:43:71:5a:
a2:05:24:5b:08:21:6e:ac:ae:c4:5f:54:c3:c9:cc:
8c:b7:4d:b4:34:f2:de:73:8c:de:58:f6:3a:2d:ff:
d2:4c:dd:f1:b6:1b:4c:3a:bd:b8:dd:87:66:ae:e9:
30:f9:b5:97:f1:cd:25:7a:99:29:8d:8c:f8:25:f4:
3c:72:7e:6c:dd:29:bc:a3:e0:61:85:8d:92:c5:05:
b6:63:f6:9f:88:eb:3e:3c:61:a6:8c:5d:6e:c9:8e:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:66:CA:CC:64:5A:D8:B2:5F:09:B4:61:78:B3:52:43:9E:20:1F:CF
X509v3 Authority Key Identifier:
keyid:16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/16E70819DD21A2FE7437CF06E669511B1282A5D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.120.0/24
Signature Algorithm: sha256WithRSAEncryption
77:13:d9:ba:c0:d8:2a:4b:47:c9:55:dc:a9:aa:df:de:18:aa:
43:dc:3e:dd:be:62:48:d2:7c:60:77:8d:7c:8b:aa:08:a0:d6:
3a:e1:4f:52:63:71:ad:a3:26:fd:2d:ed:da:eb:2f:28:4a:eb:
d4:e7:c6:44:53:5b:fd:4f:1b:0b:b6:2b:b3:64:fd:c1:a9:f9:
e8:92:1d:f4:14:ce:b2:1b:7e:30:a0:56:96:53:76:5d:3e:ae:
15:e9:28:f1:df:d5:4b:ff:9e:16:18:ff:4e:37:df:e3:ac:67:
bd:48:ed:22:06:90:2d:b4:51:55:ab:0e:40:65:3b:6e:09:8c:
0d:93:a8:eb:ef:91:f8:18:62:24:a6:eb:14:4c:5a:8b:01:8f:
ae:3f:dd:80:a9:58:e0:b2:f2:0c:2a:99:d4:9b:1e:4a:d1:4f:
41:5e:85:13:76:1e:78:80:10:f5:54:af:47:e9:44:52:d0:7d:
a3:fe:be:05:d2:68:71:f8:86:b9:29:50:5e:40:af:c5:18:6c:
02:64:fa:2d:62:50:4a:cf:3f:a4:b2:f5:5f:28:72:12:7c:cb:
5e:63:f3:7e:56:88:77:df:22:80:14:8d:76:82:ba:49:ff:f6:
09:0c:95:f7:41:d8:4f:65:5b:9d:9b:29:8e:8d:4a:9c:7f:c1:
e9:d2:46:61
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUObXhSRbZQErvDGVjvmLZYfuzN+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFNzA4MTlERDIxQTJGRTc0MzdDRjA2RTY2OTUxMUIx
MjgyQTVENjAeFw0yNDA4MjkxMzUzMDVaFw0yNTA4MjgxMzU4MDVaMDMxMTAvBgNV
BAMTKEY0NjZDQUNDNjQ1QUQ4QjI1RjA5QjQ2MTc4QjM1MjQzOUUyMDFGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0hcKljz8E14Nvu2++7Ml/Q1NF
TATrv0xNmLqxT+JdD8BxvpNwWhpfmb9isw2q9v7g33PIaN+ZqT1UoApIr7h9/5rM
AMJkSpF/Wst8tIc/2fmAhcMIzKHvqSjmq10ayIKviHdBPEmcFqZ0Ay5tR4WVlQVt
RSvmm/S9SBjHFc4mG4032kclq1+Vl0O3B/Ao5UGGBhZNGmV4ZINPEYlgwzh7x0Nx
WqIFJFsIIW6srsRfVMPJzIy3TbQ08t5zjN5Y9jot/9JM3fG2G0w6vbjdh2au6TD5
tZfxzSV6mSmNjPgl9DxyfmzdKbyj4GGFjZLFBbZj9p+I6z48YaaMXW7JjlXtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9GbKzGRa2LJfCbRheLNSQ54gH88wHwYDVR0j
BBgwFoAUFucIGd0hov50N88G5mlRGxKCpdYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzAvMTZFNzA4MTlERDIxQTJGRTc0MzdDRjA2RTY2OTUxMUIxMjgyQTVENi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xNkU3MDgxOUREMjFBMkZFNzQz
N0NGMDZFNjY5NTExQjEyODJBNUQ2LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzAvMzIz
MDMxMmUzMjMxMzYyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMnYeDANBgkqhkiG9w0BAQsFAAOCAQEAdxPZusDY
KktHyVXcqarf3hiqQ9w+3b5iSNJ8YHeNfIuqCKDWOuFPUmNxraMm/S3t2usvKErr
1OfGRFNb/U8bC7Yrs2T9wan56JId9BTOsht+MKBWllN2XT6uFeko8d/VS/+eFhj/
Tjff46xnvUjtIgaQLbRRVasOQGU7bgmMDZOo6++R+BhiJKbrFExaiwGPrj/dgKlY
4LLyDCqZ1JseStFPQV6FE3YeeIAQ9VSvR+lEUtB9o/6+BdJocfiGuSlQXkCvxRhs
AmT6LWJQSs8/pLL1XyhyEnzLXmPzflaId98igBSNdoK6Sf/2CQyV90HYT2VbnZsp
jo1KnH/B6dJGYQ==
-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:12 2024 by rpki-client on console-fra.rpki-client.org