Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa
File: 3138372e33332e34382e302f32312d3234203d3e20323633303830.roa (raw, json)
Hash identifier: JVpFrHxQpiqxp9I1efCMF2BHu3hTEdEHREmQzq04hhA=
Subject key identifier: D3:B8:53:7C:F2:C8:E4:2A:59:06:66:3C:4E:F6:CF:D7:94:74:D8:05
Certificate issuer: /CN=ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464
Certificate serial: 2AC3D5BDB2841C1C73051322EAB4DCAE412DA5BC
Authority key identifier: AC:D9:2F:0A:B7:3C:9E:80:D8:5F:F4:C9:A7:08:CF:B7:50:E1:D4:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa
Signing time: Mon 07 Oct 2024 15:18:52 +0000
ROA not before: Mon 07 Oct 2024 15:13:52 +0000
ROA not after: Mon 06 Oct 2025 15:18:52 +0000
asID: 263080
IP address blocks: 187.33.48.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c3:d5:bd:b2:84:1c:1c:73:05:13:22:ea:b4:dc:ae:41:2d:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464
Validity
Not Before: Oct 7 15:13:52 2024 GMT
Not After : Oct 6 15:18:52 2025 GMT
Subject: CN=D3B8537CF2C8E42A5906663C4EF6CFD79474D805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:5b:50:b0:f5:3d:78:b4:f9:c2:21:cf:7b:
3f:1b:08:50:c9:25:72:e2:01:c7:83:f2:9f:ed:d6:
1b:d6:34:11:ef:ac:2a:e3:ec:04:38:6a:d5:35:77:
42:62:5e:a5:f1:bc:9c:d2:f5:41:75:85:93:9a:18:
87:88:a2:e0:6d:92:6f:12:43:ed:4c:c4:87:7f:23:
fd:59:e4:2e:10:4e:ba:11:98:7a:37:36:0e:9e:c0:
c9:fb:20:2b:28:c6:db:51:c4:0d:99:57:76:24:04:
ba:db:e4:45:48:68:c0:02:12:aa:04:99:9e:95:73:
17:68:4e:d5:ef:dc:06:79:1d:66:77:de:e1:5c:a8:
4c:bd:78:08:dd:5b:1a:dc:c3:52:2a:49:52:6d:99:
78:8e:dc:ce:a5:c5:f8:4d:8c:ac:91:b7:b7:76:84:
88:09:85:66:17:dc:5f:7f:9c:14:9e:2d:0f:4a:e0:
e5:99:a1:40:58:31:a2:f5:cc:90:71:63:96:cc:c1:
e4:88:9e:49:86:9e:df:94:c6:bc:66:c0:2b:0e:cd:
8e:eb:68:f1:ac:2b:5b:d2:3d:16:55:a4:8c:5d:c6:
45:d5:0b:bf:54:4b:b0:b3:9c:61:14:4d:d8:cc:27:
a1:89:28:45:d8:92:09:9c:05:93:41:c3:59:80:0d:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B8:53:7C:F2:C8:E4:2A:59:06:66:3C:4E:F6:CF:D7:94:74:D8:05
X509v3 Authority Key Identifier:
keyid:AC:D9:2F:0A:B7:3C:9E:80:D8:5F:F4:C9:A7:08:CF:B7:50:E1:D4:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.33.48.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:80:ee:3f:72:c1:d5:a9:87:84:81:d8:63:6f:13:3f:89:22:
20:54:b6:1e:1f:c8:ff:83:6a:5d:09:80:7a:1d:9c:c4:c7:43:
38:0e:1f:d1:93:d8:79:e1:03:95:d5:ef:be:49:b1:ee:c2:b1:
7a:a1:5c:cb:c8:92:51:4f:ad:e8:68:f7:fb:3c:01:ab:93:cc:
e0:ef:e1:c9:27:c4:6e:0c:09:c1:a0:6e:6f:cd:eb:dc:cc:a7:
ba:1d:e4:df:a9:eb:63:18:bb:99:71:2e:e8:75:0c:66:65:cb:
3c:a8:e1:76:8d:0d:8e:aa:a3:1a:7c:63:1d:eb:7a:49:f7:8f:
d8:12:6d:70:ae:1d:44:92:f5:4d:f3:ab:00:3c:6b:82:77:eb:
8b:cc:63:8a:4c:94:49:66:28:5b:db:d2:7f:54:2d:cf:09:5d:
eb:e1:44:31:56:a0:13:79:04:a8:00:bf:c8:d3:a4:0c:84:ca:
e3:2d:ea:8f:fe:c1:ce:3c:b3:ec:92:cf:f5:b2:f8:2e:11:2b:
3e:4b:94:b9:ee:c7:69:5e:73:00:86:79:81:68:c8:01:bc:a3:
5d:40:3d:bc:59:90:1f:30:3a:02:d3:b4:e1:62:f2:36:e1:94:
0e:0e:f1:43:a1:2d:fc:37:3f:35:29:b6:63:0b:08:10:ec:ba:
87:38:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 02:38:19 2024 by rpki-client on console-ams.rpki-client.org