Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa
File: 3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa (raw, json)
Hash identifier: 7kUXxH1/8TZxsEpTW7cRf1UKjca97iFXMgy7RbMdsSQ=
Subject key identifier: CA:E5:96:9A:B8:CC:1B:73:A6:6B:F7:C0:90:92:6B:14:05:D4:37:C7
Certificate issuer: /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial: 2A2981BDC0B6DA2F14D2C42280C44B800137C324
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa
Signing time: Thu 04 Apr 2024 10:58:32 +0000
ROA not before: Thu 04 Apr 2024 10:53:32 +0000
ROA not after: Thu 03 Apr 2025 10:58:32 +0000
asID: 263500
IP address blocks: 177.223.56.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:29:81:bd:c0:b6:da:2f:14:d2:c4:22:80:c4:4b:80:01:37:c3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Validity
Not Before: Apr 4 10:53:32 2024 GMT
Not After : Apr 3 10:58:32 2025 GMT
Subject: CN=CAE5969AB8CC1B73A66BF7C090926B1405D437C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:58:b1:0f:83:d5:35:6a:3a:39:74:ca:c5:
10:46:b9:ab:97:ea:55:23:97:50:26:b5:ba:1f:de:
ae:45:56:02:bf:46:67:af:6d:00:29:f8:ab:c4:b2:
a4:2b:c2:19:c9:69:7f:b4:74:66:fb:c0:d4:a8:8a:
5c:e4:38:f4:78:ce:42:d5:29:fd:c1:96:8c:87:8d:
80:72:c3:d4:89:74:b7:5a:6d:ac:84:bf:27:b8:48:
3f:4b:3e:3a:5e:01:0d:ca:82:21:a3:af:d6:f7:0c:
14:e1:25:0f:ed:eb:c9:0c:e6:fc:cd:c2:66:30:e4:
e5:b4:0f:41:ae:31:49:08:46:70:eb:02:f8:d1:f5:
08:68:e3:77:1a:77:b9:7a:15:f6:0c:51:8e:75:25:
1f:57:bd:df:81:d1:de:7f:90:23:1d:15:6e:c2:ed:
99:b2:65:1e:bb:e8:7a:0e:ee:be:2a:ef:9e:71:3d:
30:6d:1b:4c:f2:c8:73:15:bb:7a:11:ef:87:8f:7e:
12:7e:e3:9b:c9:08:1b:98:0e:5b:f6:fc:73:84:e3:
0f:ca:12:d8:60:f3:b7:49:e1:ad:d7:94:91:01:27:
49:07:8a:5b:9c:d4:b8:7a:50:cc:67:4a:ad:2d:22:
6a:54:68:8b:f5:20:da:d1:4d:6e:ae:f6:b5:4a:f8:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:96:9A:B8:CC:1B:73:A6:6B:F7:C0:90:92:6B:14:05:D4:37:C7
X509v3 Authority Key Identifier:
keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:f7:ce:94:0d:d3:be:ec:e4:80:53:3c:4e:cc:e6:98:43:41:
30:d6:20:37:e0:b1:4f:4b:26:c2:9d:e8:ee:26:e0:37:cc:50:
6e:95:10:69:49:16:2b:16:9f:1d:26:fe:56:ff:d8:57:df:e9:
dd:7c:1b:4d:21:e0:9f:de:69:b5:7b:18:c9:49:1b:29:6e:5b:
86:38:08:91:52:05:36:76:35:dd:e8:58:05:50:56:35:a4:f2:
3a:19:d8:95:a8:e0:67:b7:77:ed:05:bc:35:f3:0d:dc:e5:56:
87:ef:c0:24:57:43:62:a8:1a:5b:aa:da:73:89:e8:86:3a:a4:
34:81:b6:c2:17:df:cb:cd:00:1c:04:c7:86:b8:c9:ca:5e:12:
c8:39:61:6c:39:0c:94:ca:e1:71:1b:eb:34:9b:e7:9d:84:a8:
60:7f:4c:4e:2a:81:e9:87:e3:13:91:d4:cf:6b:81:a5:74:2d:
5d:88:00:64:22:58:b9:a5:82:99:93:5c:a0:9a:a3:1a:76:1e:
eb:c6:f9:a2:88:52:55:12:c6:10:66:ea:78:8e:3a:d2:4c:14:
6b:09:16:eb:01:dd:e9:23:60:87:11:9f:1a:5f:ea:b8:2b:fe:
72:28:c9:8f:41:37:c5:56:f4:6a:6c:1f:07:71:d0:f8:69:ce:
48:63:c5:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKimBvcC22i8U0sQigMRLgAE3wyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg4Q0ZDNkVEMjk1RDg1Q0NFQzJFRUUwNjg3RDdGMTA3
NzcyMURDMTAeFw0yNDA0MDQxMDUzMzJaFw0yNTA0MDMxMDU4MzJaMDMxMTAvBgNV
BAMTKENBRTU5NjlBQjhDQzFCNzNBNjZCRjdDMDkwOTI2QjE0MDVENDM3QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzf1ixD4PVNWo6OXTKxRBGuauX
6lUjl1Amtbof3q5FVgK/RmevbQAp+KvEsqQrwhnJaX+0dGb7wNSoilzkOPR4zkLV
Kf3BloyHjYByw9SJdLdabayEvye4SD9LPjpeAQ3KgiGjr9b3DBThJQ/t68kM5vzN
wmYw5OW0D0GuMUkIRnDrAvjR9Qho43cad7l6FfYMUY51JR9Xvd+B0d5/kCMdFW7C
7ZmyZR676HoO7r4q755xPTBtG0zyyHMVu3oR74ePfhJ+45vJCBuYDlv2/HOE4w/K
Ethg87dJ4a3XlJEBJ0kHiluc1Lh6UMxnSq0tImpUaIv1INrRTW6u9rVK+LlrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyuWWmrjMG3Oma/fAkJJrFAXUN8cwHwYDVR0j
BBgwFoAUaIz8btKV2FzOwu7gaH1/EHdyHcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZnd1VEUXQ5b2RnUXptYUFiZE1TbkZXamVadzNLQ0JuWDhFZTlmMnBY
ZHQvMS82ODhDRkM2RUQyOTVEODVDQ0VDMkVFRTA2ODdEN0YxMDc3NzIxREMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OENGQzZFRDI5NUQ4NUND
RUMyRUVFMDY4N0Q3RjEwNzc3MjFEQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmZ3dVRFF0OW9kZ1F6bWFBYmRNU25GV2plWnczS0NCblg4RWU5ZjJwWGR0LzEv
MzEzNzM3MmUzMjMyMzMyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKx3zgwDQYJKoZIhvcNAQELBQADggEBAG/3zpQN
077s5IBTPE7M5phDQTDWIDfgsU9LJsKd6O4m4DfMUG6VEGlJFisWnx0m/lb/2Fff
6d18G00h4J/eabV7GMlJGyluW4Y4CJFSBTZ2Nd3oWAVQVjWk8joZ2JWo4Ge3d+0F
vDXzDdzlVofvwCRXQ2KoGluq2nOJ6IY6pDSBtsIX38vNABwEx4a4ycpeEsg5YWw5
DJTK4XEb6zSb552EqGB/TE4qgemH4xOR1M9rgaV0LV2IAGQiWLmlgpmTXKCaoxp2
HuvG+aKIUlUSxhBm6niOOtJMFGsJFusB3ekjYIcRnxpf6rgr/nIoyY9BN8VW9Gps
Hwdx0PhpzkhjxZw=
-----END CERTIFICATE-----
Generated at Fri Jan 3 09:47:01 2025 by rpki-client on console.sobornost.net