Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa
File: 3138372e31372e3136302e302f32302d3234203d3e203238323633.roa (raw, json)
Hash identifier: rbRVKhlCW+tv5qjzcxE/3xZc9m078XHsk/QREwMKc8I=
Subject key identifier: B9:F3:2D:DF:08:D2:1B:1F:35:A3:47:F4:BC:4A:C2:1F:DA:AB:83:BA
Certificate issuer: /CN=FF48360CD0330B640EA405717F930EC97401A558
Certificate serial: 6036BF9A14C4609CC5453981D28843E4FDB70295
Authority key identifier: FF:48:36:0C:D0:33:0B:64:0E:A4:05:71:7F:93:0E:C9:74:01:A5:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF48360CD0330B640EA405717F930EC97401A558.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa
Signing time: Tue 23 Jul 2024 11:46:28 +0000
ROA not before: Tue 23 Jul 2024 11:41:28 +0000
ROA not after: Tue 22 Jul 2025 11:46:28 +0000
asID: 28263
IP address blocks: 187.17.160.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:36:bf:9a:14:c4:60:9c:c5:45:39:81:d2:88:43:e4:fd:b7:02:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF48360CD0330B640EA405717F930EC97401A558
Validity
Not Before: Jul 23 11:41:28 2024 GMT
Not After : Jul 22 11:46:28 2025 GMT
Subject: CN=B9F32DDF08D21B1F35A347F4BC4AC21FDAAB83BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:a5:99:3c:5f:5f:54:28:f2:27:ff:e7:fb:
78:07:2a:6b:87:80:8d:f9:1e:d9:71:76:a4:4e:b2:
bd:49:4c:38:78:dc:28:eb:62:9e:7d:11:86:96:21:
c3:25:6f:d4:c0:af:d4:d0:f1:72:e5:07:3c:dd:25:
0f:b3:88:f0:a0:85:25:ca:30:89:16:51:ec:4d:b5:
ae:af:4c:ff:a4:7d:e1:25:ea:80:02:c9:e6:1d:d8:
ca:83:b2:c1:77:d1:6f:69:31:10:ef:b0:c3:e1:15:
92:9f:1c:6a:db:22:f3:32:ab:05:5f:c6:d6:2a:cf:
7c:e3:45:70:8f:bd:e6:e4:fc:ff:d9:74:48:5b:8f:
2a:7c:f9:7e:db:60:2b:f1:63:88:ba:8e:b3:16:65:
cb:d8:b4:54:50:57:e5:28:ad:e7:be:fc:6c:a4:42:
ae:ef:f7:d1:c0:c8:05:b4:28:24:4d:e6:6b:75:65:
5b:44:5f:e0:5e:66:99:48:d8:ab:41:2a:b6:8b:f4:
56:d7:4a:89:17:98:10:97:3a:66:19:10:51:98:32:
67:21:02:66:31:ce:5d:94:8b:e5:c8:d3:8f:31:05:
58:55:20:46:5d:b3:60:ee:69:ce:e5:a3:57:f0:c5:
f1:5b:64:fa:b6:56:ba:80:79:55:e7:bc:36:55:81:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F3:2D:DF:08:D2:1B:1F:35:A3:47:F4:BC:4A:C2:1F:DA:AB:83:BA
X509v3 Authority Key Identifier:
keyid:FF:48:36:0C:D0:33:0B:64:0E:A4:05:71:7F:93:0E:C9:74:01:A5:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/FF48360CD0330B640EA405717F930EC97401A558.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF48360CD0330B640EA405717F930EC97401A558.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/2/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.17.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:db:e7:60:9c:84:d9:44:9c:b8:d0:10:f3:1f:af:06:52:40:
28:70:5d:3f:f7:f9:2b:ec:ef:ec:a8:d7:d1:dd:a0:04:f2:8f:
43:46:c7:47:8e:a5:4a:69:03:79:b9:0d:1e:57:a2:c4:c6:66:
5f:f1:c5:24:01:49:3e:f4:20:91:be:a9:3d:48:1b:cc:cb:1f:
56:cf:c3:56:c4:e6:6c:56:cc:4e:7d:bb:0a:25:ba:ef:51:a8:
0e:4e:54:dd:8a:eb:e0:13:5a:ce:17:c1:4f:11:0d:61:26:9e:
77:a5:b3:5a:45:64:82:eb:fc:a1:8b:5d:d9:9e:b3:9d:14:06:
54:f8:85:bb:bf:4b:35:8e:b4:bd:87:1b:d4:7d:9f:6f:14:90:
b4:bf:c7:e1:e4:ef:3b:a2:c5:ca:a3:31:15:97:c7:7c:f3:df:
6a:8a:74:d8:7e:86:15:de:a3:e1:11:60:b7:8e:b1:1e:7b:5a:
3d:d1:6c:12:08:ac:f8:19:a3:d8:2b:b8:4b:38:49:14:43:bd:
60:80:c6:62:20:5f:e5:d6:0d:c1:d6:a7:68:41:c4:c0:04:ad:
39:9f:cc:f7:88:4d:2c:dd:03:c1:a0:e2:39:9b:0e:37:37:c6:
48:3c:bc:34:7e:41:bb:59:15:ca:9d:89:72:98:db:dc:1f:93:
b9:3d:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org