Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32322d3234203d3e20323637353131.roa
File: 3230312e3138322e3130302e302f32322d3234203d3e20323637353131.roa (raw, json)
Hash identifier: 7DJN76qGxnJ9W52N4/4P1XezsuZ4397Pa2/xor9/g5E=
Subject key identifier: D3:5D:24:43:73:EA:70:3D:2E:D5:74:76:C7:13:78:FA:99:29:B8:CF
Certificate issuer: /CN=58EB51309446697469911D6A209F194B8F572048
Certificate serial: 1F99681C601F13AFB841173FAAAFA8559334AAF3
Authority key identifier: 58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58EB51309446697469911D6A209F194B8F572048.cer
Subject info access: rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32322d3234203d3e20323637353131.roa
Signing time: Tue 07 Nov 2023 14:19:06 +0000
ROA not before: Tue 07 Nov 2023 14:14:06 +0000
ROA not after: Tue 05 Nov 2024 14:19:06 +0000
asID: 267511
IP address blocks: 201.182.100.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:99:68:1c:60:1f:13:af:b8:41:17:3f:aa:af:a8:55:93:34:aa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58EB51309446697469911D6A209F194B8F572048
Validity
Not Before: Nov 7 14:14:06 2023 GMT
Not After : Nov 5 14:19:06 2024 GMT
Subject: CN=D35D244373EA703D2ED57476C71378FA9929B8CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:52:97:13:17:d1:c0:64:b9:88:11:f1:81:
0d:55:51:38:62:ed:f6:30:b8:ee:73:a9:9e:9e:b1:
7a:73:4f:f2:b6:e6:ec:c1:df:41:05:39:41:4b:01:
fe:c1:e7:a8:1f:4a:b9:bf:bd:24:a2:85:29:2b:a6:
b6:ec:73:3e:8e:7d:a1:23:67:28:9e:84:be:06:79:
8a:fe:43:e0:0c:f6:df:62:8e:da:1c:24:60:d0:b4:
42:08:36:78:37:8a:03:fa:f5:d2:1a:bb:c1:7f:e9:
95:aa:b8:09:e0:d6:51:03:f3:53:85:33:a5:c2:23:
28:71:f8:82:f4:0f:09:21:dc:33:e4:40:0b:eb:a4:
88:98:41:53:f7:31:70:7c:33:4e:ff:22:5b:8e:ad:
b4:5b:00:35:ea:e4:ff:50:b3:1f:ca:e8:d8:4a:d2:
cd:6e:d6:16:11:d5:62:26:2c:4e:8e:5d:51:0b:fe:
e3:12:c9:53:63:0a:54:7d:33:30:31:4f:4b:f8:85:
45:0b:d1:8a:61:41:9c:6c:da:7d:fa:9d:4a:88:44:
d1:f4:b5:6c:a0:15:df:a3:13:9d:45:0e:df:57:97:
cd:72:63:be:4f:71:07:d5:2c:09:76:43:60:84:28:
a2:26:2f:a4:05:6d:46:1c:4d:b6:c3:cf:fd:a0:34:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:24:43:73:EA:70:3D:2E:D5:74:76:C7:13:78:FA:99:29:B8:CF
X509v3 Authority Key Identifier:
keyid:58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58EB51309446697469911D6A209F194B8F572048.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32322d3234203d3e20323637353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.100.0/22
Signature Algorithm: sha256WithRSAEncryption
83:0f:fc:bd:11:48:4b:b1:73:0d:9f:37:a8:16:2d:ea:ca:50:
8c:c3:94:c3:c8:fb:62:8f:ff:3f:1b:92:c4:e7:c7:79:e7:00:
fa:4d:68:78:ae:ac:56:94:61:cb:67:56:c8:26:1a:d2:a9:ff:
98:22:86:27:d2:6e:2d:1d:1a:28:21:df:cc:f5:89:d5:44:2c:
73:b3:7f:d3:10:90:6f:08:78:6e:a6:ec:a2:52:3b:06:7f:00:
9a:ca:04:22:0e:97:23:fb:a2:05:8c:7d:40:da:44:4e:98:45:
5b:47:88:3f:54:10:66:26:69:f8:88:80:80:ae:1a:04:c6:d9:
b6:8e:14:a4:03:41:6c:1d:70:d6:81:4a:30:43:dc:9e:a8:b0:
d2:23:5a:c5:c4:b5:43:f9:c1:dc:4b:dd:88:2e:6c:11:98:dd:
e9:c0:bb:04:39:ed:aa:5b:74:22:34:1d:01:d1:8d:6b:c8:47:
37:6d:d0:40:b8:d7:1d:ce:d5:d9:6c:d6:eb:6c:c6:b7:eb:d9:
6d:49:c8:b3:71:18:b7:9a:a1:78:4b:f4:e4:bc:16:42:5d:49:
7b:ce:de:3c:05:1e:e4:68:04:d3:a9:d6:34:4c:40:17:c7:91:
d5:74:73:77:2b:05:5e:f8:94:ba:d5:d4:ee:e3:fc:7a:03:87:
79:40:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 02:24:53 2024 by rpki-client on console-fra.rpki-client.org