Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa
File: 323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa (raw, json)
Hash identifier: Rk0kzEP96QWJucBXgKjwJCLuQxjgSDsgFhgnk/k0kc8=
Subject key identifier: 6D:3F:1B:07:53:AE:AA:BA:02:4E:86:8D:BC:E0:9C:23:70:06:61:ED
Certificate issuer: /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial: 3E244303233B3DB28C9F4EABC7EC0F9514C5F2D7
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa
Signing time: Fri 31 Jan 2025 18:08:54 +0000
ROA not before: Fri 31 Jan 2025 18:03:54 +0000
ROA not after: Fri 30 Jan 2026 18:08:54 +0000
asID: 264450
IP address blocks: 2804:1edc:8000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:24:43:03:23:3b:3d:b2:8c:9f:4e:ab:c7:ec:0f:95:14:c5:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Validity
Not Before: Jan 31 18:03:54 2025 GMT
Not After : Jan 30 18:08:54 2026 GMT
Subject: CN=6D3F1B0753AEAABA024E868DBCE09C23700661ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:9e:fb:06:d9:f2:6a:1c:34:14:d5:d5:61:
d6:1b:46:3a:a2:d0:7e:9e:e0:73:80:d7:b0:20:e7:
7b:82:03:c8:0c:b6:8d:7a:4d:18:40:71:77:2e:eb:
82:8d:15:ef:f7:34:91:e1:b3:1f:91:7d:5d:7a:f0:
a3:23:e5:14:3c:50:7c:47:56:5b:22:fb:48:7f:39:
88:90:43:ac:6b:ab:8a:2f:c2:be:5a:5f:3e:95:dc:
64:0d:13:7f:39:68:6c:9f:e2:95:ed:a2:98:90:3d:
5b:e3:ac:cb:4a:b5:bf:e5:58:9d:c9:29:cf:0c:11:
7b:82:fa:bb:8a:bf:7d:b4:55:ce:cc:ed:68:69:1e:
42:2c:f7:7c:ab:ca:bb:82:96:6e:6d:5c:97:a8:4d:
43:56:e5:e7:d9:ed:b1:b2:f3:d4:05:0b:43:42:b5:
4f:cd:cd:a2:78:18:d1:bc:e2:a9:82:05:7a:6d:31:
a9:d7:ce:da:1c:65:81:21:34:ab:4b:e4:a3:66:4e:
11:81:e2:a9:aa:23:dd:9c:49:0a:e1:db:ca:63:19:
dd:d6:36:b1:e4:fc:f0:3e:25:c8:6d:32:9b:e8:e7:
b1:dd:dc:9b:41:42:2f:2d:c3:c6:6e:44:04:74:e1:
8b:ea:21:aa:b0:5c:56:11:b0:ed:60:5a:7c:61:f8:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:1B:07:53:AE:AA:BA:02:4E:86:8D:BC:E0:9C:23:70:06:61:ED
X509v3 Authority Key Identifier:
keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1edc:8000::/34
Signature Algorithm: sha256WithRSAEncryption
44:f3:35:5c:74:7c:85:14:91:6d:c8:65:1e:b0:7f:3e:6b:8f:
f4:ef:2d:67:cf:ca:26:d4:d0:51:d2:f2:29:db:cd:14:eb:76:
e8:4c:3f:6a:6f:40:8f:c0:cc:59:c7:82:35:71:64:da:11:4e:
fd:9a:6d:29:fc:c2:b3:67:72:f4:21:f5:6f:ee:b8:79:28:02:
e7:b7:fb:b4:6e:de:14:de:b1:97:a0:a5:7b:bf:92:76:b7:d4:
ee:66:b3:40:de:23:25:6a:30:81:e7:07:9b:28:1a:e7:3d:1b:
c3:c5:76:4f:d8:59:a2:80:7c:b8:6e:ea:b1:8e:85:17:16:91:
e1:90:94:eb:70:8c:47:fa:35:e1:3f:5d:2e:c4:0f:a4:db:5e:
0f:5e:37:fb:78:0a:e0:3d:4b:40:c6:ae:7c:62:54:fc:21:0b:
ce:91:34:52:93:f2:cc:33:68:56:2e:e9:5c:e2:b6:c9:3f:a9:
63:9b:c9:f1:f2:16:be:d6:f5:7d:8e:c3:46:c9:fb:69:96:e4:
a9:5b:96:14:94:aa:b3:59:3f:30:23:57:45:4d:f8:02:d7:16:
c4:0f:3e:b6:3d:bf:8c:4b:71:90:80:9e:85:52:36:30:8b:be:
0c:e7:da:3e:a7:c1:a3:4a:d8:a1:9c:78:90:ce:9f:81:a9:40:
12:3f:e8:c0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPiRDAyM7PbKMn06rx+wPlRTF8tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJDQjIwMkVFN0M0MTU0MEJDRkQyODFBNTcyNkY0QkIy
RkFDRTUwRjAeFw0yNTAxMzExODAzNTRaFw0yNjAxMzAxODA4NTRaMDMxMTAvBgNV
BAMTKDZEM0YxQjA3NTNBRUFBQkEwMjRFODY4REJDRTA5QzIzNzAwNjYxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwI577Btnyahw0FNXVYdYbRjqi
0H6e4HOA17Ag53uCA8gMto16TRhAcXcu64KNFe/3NJHhsx+RfV168KMj5RQ8UHxH
Vlsi+0h/OYiQQ6xrq4ovwr5aXz6V3GQNE385aGyf4pXtopiQPVvjrMtKtb/lWJ3J
Kc8MEXuC+ruKv320Vc7M7WhpHkIs93yryruClm5tXJeoTUNW5efZ7bGy89QFC0NC
tU/NzaJ4GNG84qmCBXptManXztocZYEhNKtL5KNmThGB4qmqI92cSQrh28pjGd3W
NrHk/PA+JchtMpvo57Hd3JtBQi8tw8ZuRAR04YvqIaqwXFYRsO1gWnxh+HjJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbT8bB1OuqroCToaNvOCcI3AGYe0wHwYDVR0j
BBgwFoAUAssgLufEFUC8/SgaVyb0uy+s5Q8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC8wMkNCMjAyRUU3QzQxNTQwQkNGRDI4MUE1NzI2RjRCQjJGQUNFNTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0IyMDJFRTdDNDE1NDBC
Q0ZEMjgxQTU3MjZGNEJCMkZBQ0U1MEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzIzODMwMzQzYTMxNjU2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEHtyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBE8zVcdHyFFJFtyGUesH8+a4/07y1nz8om1NBR0vIp280U63boTD9qb0CP
wMxZx4I1cWTaEU79mm0p/MKzZ3L0IfVv7rh5KALnt/u0bt4U3rGXoKV7v5J2t9Tu
ZrNA3iMlajCB5webKBrnPRvDxXZP2FmigHy4buqxjoUXFpHhkJTrcIxH+jXhP10u
xA+k214PXjf7eArgPUtAxq58YlT8IQvOkTRSk/LMM2hWLulc4rbJP6ljm8nx8ha+
1vV9jsNGyftpluSpW5YUlKqzWT8wI1dFTfgC1xbEDz62Pb+MS3GQgJ6FUjYwi74M
59o+p8GjStihnHiQzp+BqUASP+jA
-----END CERTIFICATE-----
Generated at Sat Feb 1 22:59:35 2025 by rpki-client on console.sobornost.net