Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37392e302f32342d3234203d3e203532373636.roa
File: 3137372e3132352e37392e302f32342d3234203d3e203532373636.roa (raw, json)
Hash identifier: GIDFKYR+TK99tUHlZKR5ajnIobtXf3OVhZpldM8y/54=
Subject key identifier: 00:DA:60:77:47:79:13:D2:1C:87:E3:AA:61:6A:DA:35:5A:01:3C:AE
Certificate issuer: /CN=7241752889858DD8717ADE0CA01065099204EFA0
Certificate serial: 22BE21E448E7A2DA02D0B831D15381EB844F5C88
Authority key identifier: 72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37392e302f32342d3234203d3e203532373636.roa
Signing time: Thu 01 Aug 2024 19:51:35 +0000
ROA not before: Thu 01 Aug 2024 19:46:35 +0000
ROA not after: Thu 31 Jul 2025 19:51:35 +0000
asID: 52766
IP address blocks: 177.125.79.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:be:21:e4:48:e7:a2:da:02:d0:b8:31:d1:53:81:eb:84:4f:5c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7241752889858DD8717ADE0CA01065099204EFA0
Validity
Not Before: Aug 1 19:46:35 2024 GMT
Not After : Jul 31 19:51:35 2025 GMT
Subject: CN=00DA6077477913D21C87E3AA616ADA355A013CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:29:b2:1d:ad:97:87:e0:c9:8f:26:2b:45:
4c:6b:32:2f:28:b0:2a:c0:7b:62:6e:4d:a4:2d:81:
0a:a0:c7:2f:6f:2a:8d:05:9b:e4:96:f2:52:38:0d:
32:2a:23:23:a4:37:a9:61:4e:5d:11:c7:07:3f:33:
10:53:22:e3:db:d9:54:0d:7e:c6:30:36:40:c3:68:
8c:ef:a5:df:e2:36:ba:cf:51:07:73:d0:5b:ee:14:
8f:b7:45:09:55:17:dd:dc:db:19:ec:3c:77:f9:b4:
47:ce:d8:8a:5e:ed:fd:27:c4:e0:0c:cc:6f:59:a7:
31:1c:77:de:72:a5:50:2b:5d:be:8d:5f:1c:d8:23:
98:89:c4:e7:7e:c2:54:dd:2c:83:83:13:c4:8b:7a:
ce:fe:da:56:55:32:9c:fb:34:c0:97:80:08:bd:50:
97:66:c8:1d:01:cb:1d:6b:2f:6c:db:25:ab:2d:c3:
93:aa:fb:46:4d:91:56:fd:33:eb:f7:ac:79:ff:c9:
b8:d0:a3:f1:d9:fe:39:74:89:4b:e5:59:c3:f2:1a:
e4:5b:49:9a:56:12:f1:f9:db:e7:f5:90:e8:ac:e8:
f4:1a:bc:b4:29:95:c0:99:60:11:b4:30:22:aa:0a:
b2:24:5b:3b:ae:6f:bf:79:f1:6f:a4:04:83:0c:ff:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:60:77:47:79:13:D2:1C:87:E3:AA:61:6A:DA:35:5A:01:3C:AE
X509v3 Authority Key Identifier:
keyid:72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/7241752889858DD8717ADE0CA01065099204EFA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37392e302f32342d3234203d3e203532373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.79.0/24
Signature Algorithm: sha256WithRSAEncryption
24:07:7d:7d:94:03:e8:ff:38:00:3b:ab:08:17:a9:eb:41:e3:
80:75:39:45:60:ce:06:85:11:31:eb:51:89:3f:9b:d9:88:b7:
9a:06:34:e4:61:d0:6a:10:b3:49:88:ee:c6:a2:39:41:4c:1f:
3d:a7:f4:e1:0d:ee:88:87:b1:25:ae:5c:be:1a:61:37:3a:a3:
0e:12:2d:83:37:86:0b:70:b4:dd:bf:92:f8:14:61:4f:34:32:
01:1f:fe:70:b6:b6:f8:cc:7d:4d:59:2e:33:5d:eb:6a:33:63:
e8:b4:82:e5:5c:5b:ef:6b:3d:4f:dd:71:82:15:d4:6b:83:14:
d6:0a:2e:98:f4:10:16:36:1f:85:34:7a:be:d5:06:a0:94:4d:
8f:1e:06:79:e6:9a:3d:c5:fe:58:1e:5a:a9:ad:d3:7c:78:f5:
24:84:a6:63:37:52:fc:08:53:58:60:84:ae:aa:57:53:12:2b:
d5:a7:d4:6b:0b:44:d8:89:dd:9a:9e:4b:d8:91:77:5a:d5:78:
ba:59:22:8a:de:d9:75:e6:b4:7e:20:b0:ad:e6:02:b8:29:fb:
53:1c:14:31:f9:4a:fd:2e:28:58:60:dc:93:d5:cf:1e:84:fe:
1d:54:60:63:c1:84:04:0d:29:02:71:a5:ce:85:7f:55:16:ee:
e9:8a:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 23:39:19 2024 by rpki-client on console-ams.rpki-client.org