Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
File: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (raw, json)
Hash identifier: pXbrbJ5/2019Sa6zFa6KCg0WZ2Qu6EBY5JmhYtI9s9s=
Subject key identifier: 48:E4:DD:B5:F6:D9:92:14:69:1A:D1:B2:A5:97:FE:CC:72:02:04:D9
Certificate issuer: /CN=40BC064454A81D9D6E8ACCED4BB10B10B335AB3A
Certificate serial: 727B54B4BCC517C242C6C276951ABEB511CC1D84
Authority key identifier: 40:BC:06:44:54:A8:1D:9D:6E:8A:CC:ED:4B:B1:0B:10:B3:35:AB:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BC064454A81D9D6E8ACCED4BB10B10B335AB3A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
Signing time: Wed 03 Apr 2024 20:56:09 +0000
ROA not before: Wed 03 Apr 2024 20:51:09 +0000
ROA not after: Wed 02 Apr 2025 20:56:09 +0000
asID: 265385
IP address blocks: 170.254.248.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:7b:54:b4:bc:c5:17:c2:42:c6:c2:76:95:1a:be:b5:11:cc:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40BC064454A81D9D6E8ACCED4BB10B10B335AB3A
Validity
Not Before: Apr 3 20:51:09 2024 GMT
Not After : Apr 2 20:56:09 2025 GMT
Subject: CN=48E4DDB5F6D99214691AD1B2A597FECC720204D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:e0:73:48:a8:a9:40:a2:35:35:c9:97:27:
f3:c9:0b:8d:57:4c:31:53:44:0b:28:50:ff:66:02:
c6:38:0d:16:e9:62:56:e2:6a:d9:6a:16:26:8d:75:
d9:99:93:67:e5:2f:96:39:0d:02:6f:22:5a:81:71:
f2:0b:30:58:57:5b:78:da:85:52:2c:e9:3b:a9:de:
cd:49:bd:6a:1f:23:5c:df:1f:3a:cc:e2:70:87:11:
df:72:a0:f0:23:b3:55:b6:3b:ce:f3:6b:0d:f0:46:
3d:b1:6c:47:d0:d6:08:99:d6:fa:f1:74:f5:9c:70:
49:63:d4:69:fe:a7:e3:2a:9d:b0:41:62:67:bb:04:
2d:93:3a:5d:fe:fa:8f:ac:a8:71:06:6c:e1:c1:6e:
63:9f:55:1f:fb:fe:8c:2a:6a:9b:89:0a:3b:a9:af:
e1:fc:bb:9c:da:27:79:0c:f3:bf:bd:98:37:7d:53:
75:81:92:58:c7:49:74:ee:c7:26:20:b7:36:f9:9a:
dc:0f:98:5d:41:69:54:cd:63:4d:74:43:43:10:77:
ca:0e:a8:48:33:4a:be:2b:9c:23:d3:d2:8a:fc:67:
6a:4c:29:da:c9:09:b8:37:f1:4d:18:ff:fe:c2:2a:
88:0a:05:f3:4b:63:db:cf:92:7c:8d:fe:00:7f:6d:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:DD:B5:F6:D9:92:14:69:1A:D1:B2:A5:97:FE:CC:72:02:04:D9
X509v3 Authority Key Identifier:
keyid:40:BC:06:44:54:A8:1D:9D:6E:8A:CC:ED:4B:B1:0B:10:B3:35:AB:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1/40BC064454A81D9D6E8ACCED4BB10B10B335AB3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BC064454A81D9D6E8ACCED4BB10B10B335AB3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:6e:0c:c8:96:09:c5:48:76:37:bb:fc:61:fd:e5:fb:41:d8:
9f:3a:b1:01:46:3e:9d:a5:2c:a3:ed:d1:02:c3:14:af:bc:bc:
65:f5:10:d9:e6:05:6e:64:1e:3a:49:1d:58:b4:6d:cf:8b:5a:
8d:0f:41:34:ae:57:72:9f:ac:c8:66:8b:4b:b2:70:de:60:0e:
c3:fb:88:7a:c4:23:bc:41:55:0d:52:82:3f:db:b8:b0:57:10:
43:c2:31:85:fa:b1:55:74:8b:a8:ad:35:cb:e9:0b:77:2c:a5:
34:64:5f:e2:c8:33:a0:ab:c2:cc:bc:73:2f:b9:e1:17:fe:ef:
a8:83:5a:96:4d:5b:a4:f6:06:34:ed:e5:4f:41:34:0b:11:db:
c9:b4:87:19:99:ff:34:8d:c5:3d:e7:44:a2:32:a9:ff:1f:60:
c9:a5:2c:ef:21:b2:20:df:c0:dd:95:a0:85:d8:de:6c:bf:66:
69:42:58:37:94:22:64:bb:19:69:c1:f7:06:00:8f:b3:0b:99:
39:12:5e:cf:0b:a7:2d:e8:31:fa:f1:58:c1:8f:c8:8e:68:18:
e6:1f:c7:9b:5b:4d:a9:ac:78:e6:57:be:03:b3:b9:d5:44:f2:
bb:3e:93:16:24:2b:c5:fe:df:58:e4:bc:73:91:eb:95:9a:c5:
05:84:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 02:29:40 2024 by rpki-client on console-ams.rpki-client.org