Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234382e302f32312d3231203d3e203631383332.roa
File: 3138372e36302e3234382e302f32312d3231203d3e203631383332.roa (raw, json)
Hash identifier: JFVW+y5Lbs1s9fImCNvVHOlSTk2DS+JTvN+iAxaP5ik=
Subject key identifier: 70:75:57:C6:F4:FE:0D:7C:B1:B6:B0:E9:19:17:C0:83:A4:9C:33:54
Certificate issuer: /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial: 4CF896904B988A9A050C3E084553A725CA0939FF
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234382e302f32312d3231203d3e203631383332.roa
Signing time: Wed 29 Nov 2023 12:18:29 +0000
ROA not before: Wed 29 Nov 2023 12:13:29 +0000
ROA not after: Wed 27 Nov 2024 12:18:29 +0000
asID: 61832
IP address blocks: 187.60.248.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f8:96:90:4b:98:8a:9a:05:0c:3e:08:45:53:a7:25:ca:09:39:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Validity
Not Before: Nov 29 12:13:29 2023 GMT
Not After : Nov 27 12:18:29 2024 GMT
Subject: CN=707557C6F4FE0D7CB1B6B0E91917C083A49C3354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:c6:2f:cf:cb:72:f5:95:69:6f:66:4b:37:
f4:a3:59:a9:73:2f:25:c8:d9:e3:51:b0:83:f8:36:
4e:55:ba:d8:37:af:b3:9f:2d:fe:60:18:66:72:ff:
2a:e9:05:30:ba:9d:12:a9:23:97:c2:e1:98:8f:4d:
d2:32:e8:3a:de:8d:86:60:28:02:1e:09:5b:37:f1:
cc:9c:e5:46:7e:f7:fc:eb:b7:06:9a:05:a5:70:66:
b7:c1:52:d7:0e:72:f0:3b:04:45:28:0f:37:5c:e4:
bc:46:b0:d0:a2:28:70:36:e9:08:19:b6:a1:db:64:
93:05:02:1d:8c:c3:d1:7e:76:e0:e1:40:38:93:95:
1a:41:32:6b:d7:6f:05:d1:99:35:f3:b3:e4:d4:64:
80:67:df:3c:98:60:0e:ed:59:91:c8:85:f3:30:e0:
4c:a6:70:c1:ff:dd:be:37:8f:4f:e7:3e:84:e5:10:
3c:cb:06:cc:42:6b:98:81:54:0d:b8:17:da:af:9b:
66:82:f0:d4:4f:1a:e4:23:ec:e6:fa:11:d3:39:c4:
10:2f:79:eb:b7:fe:61:d5:16:ab:af:02:d3:ff:78:
72:33:fd:40:1f:0c:eb:87:e4:ef:6c:46:e7:54:9e:
26:bc:77:f8:09:fe:9c:58:78:aa:a1:5a:20:33:4e:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:57:C6:F4:FE:0D:7C:B1:B6:B0:E9:19:17:C0:83:A4:9C:33:54
X509v3 Authority Key Identifier:
keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234382e302f32312d3231203d3e203631383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.60.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:9c:6a:80:98:bb:58:09:20:4b:b9:9e:49:80:b0:21:29:c4:
fa:4a:d8:44:2d:d8:65:a3:91:2d:97:75:06:65:ae:4f:1a:be:
f9:ea:ad:ca:b2:1e:3f:6e:0c:ee:e0:1e:2b:78:38:62:57:de:
89:ec:1e:aa:2b:a5:bc:2c:f5:7b:e3:e0:c5:86:10:2b:b4:38:
35:82:89:bc:e7:1a:5a:d4:a8:a4:18:f4:61:ba:fc:c9:ab:13:
ae:bf:65:2c:2c:65:cf:f8:5f:16:d2:0b:84:c4:6a:86:c6:1d:
92:ff:5a:19:95:c8:9d:3d:9b:38:4c:c5:40:fc:d1:29:dc:91:
53:72:f1:c0:b8:53:7a:ce:f1:55:b1:44:21:1c:fd:7a:ca:78:
5b:95:c1:01:e7:79:65:60:13:32:7e:6f:65:a2:6a:6d:aa:52:
a3:42:02:a1:0b:59:08:1e:7e:b1:6e:47:bc:3b:f8:31:cc:f1:
c9:d1:0b:88:eb:84:c8:91:05:59:74:7a:d2:0d:72:d0:52:11:
48:71:8e:de:e2:42:f3:70:1d:2b:74:f5:0b:9a:22:5f:6c:05:
f9:4c:fc:e7:0b:fb:95:da:5b:63:20:9e:15:d3:5b:82:8e:c6:
0c:fc:da:ed:e6:fc:cb:24:bc:a6:15:19:c3:7d:78:53:88:76:
fb:5c:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 19:05:31 2024 by rpki-client on console-ams.rpki-client.org