Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32342e302f32342d3234203d3e20323635303835.roa
File: 3137302e3233332e32342e302f32342d3234203d3e20323635303835.roa (raw, json)
Hash identifier: eIDc0Hk3p2bJhKxJL3U3SGtXxqC7f9VxpoPgLKC1ENg=
Subject key identifier: 38:C7:B8:42:3E:34:48:2D:78:36:FF:A1:37:27:4D:47:2B:7D:E2:51
Certificate issuer: /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial: 1AF740DB7B072B943802285392E2A8CA703C17D2
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32342e302f32342d3234203d3e20323635303835.roa
Signing time: Fri 05 Apr 2024 00:27:25 +0000
ROA not before: Fri 05 Apr 2024 00:22:25 +0000
ROA not after: Fri 04 Apr 2025 00:27:25 +0000
asID: 265085
IP address blocks: 170.233.24.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f7:40:db:7b:07:2b:94:38:02:28:53:92:e2:a8:ca:70:3c:17:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Validity
Not Before: Apr 5 00:22:25 2024 GMT
Not After : Apr 4 00:27:25 2025 GMT
Subject: CN=38C7B8423E34482D7836FFA137274D472B7DE251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:e7:92:a5:eb:f1:ce:62:d0:5d:58:c8:21:
8a:1c:47:10:92:c2:8c:55:e5:77:da:2a:f9:9a:a6:
79:8a:51:59:cf:ec:c7:9f:24:d4:01:49:b0:54:e1:
82:c3:df:d4:89:91:b0:f1:3f:df:31:b9:7b:1f:20:
04:9a:12:aa:92:45:a6:f4:cb:09:c7:7d:bb:ab:45:
10:2b:15:de:23:f8:b6:5c:8b:ea:c2:82:7c:9c:16:
26:c4:b4:39:38:b0:e5:f5:65:33:40:00:3f:2f:c7:
b0:4c:82:31:b2:ee:b8:7b:d3:70:62:4b:cc:68:5c:
1c:54:87:58:aa:6a:18:13:9e:14:fc:53:56:c0:e2:
f7:a2:64:ff:53:d2:15:8f:99:5f:69:84:38:bb:7c:
cb:48:22:6b:c6:5b:f1:fe:cc:f1:c8:91:d0:09:01:
14:2d:6f:b4:68:80:78:07:9e:55:06:2e:40:50:17:
4d:61:fd:05:3c:cb:cc:fb:0d:cd:59:34:2f:f6:da:
f8:53:27:b4:1a:92:a6:2f:06:7c:6c:58:d4:29:fe:
82:fc:8f:8e:90:d7:97:f4:52:86:c4:3c:26:0f:7b:
bb:57:da:4c:53:83:f7:6f:38:e7:ec:7b:69:9d:31:
b7:6a:7a:d7:8f:be:70:da:54:a0:60:45:c9:fd:4d:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:B8:42:3E:34:48:2D:78:36:FF:A1:37:27:4D:47:2B:7D:E2:51
X509v3 Authority Key Identifier:
keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32342e302f32342d3234203d3e20323635303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.24.0/24
Signature Algorithm: sha256WithRSAEncryption
53:96:98:6e:2b:06:2e:66:ca:32:e4:b5:f4:ed:b0:f5:f2:63:
9b:42:40:29:61:1c:21:34:5c:ef:8b:83:1b:63:67:a5:93:94:
5c:ba:0f:f8:bd:21:1a:ea:29:4c:e2:0a:bc:9c:ee:1d:4e:84:
4e:6e:da:0f:91:18:d9:47:5b:65:ed:01:38:fb:2d:47:39:5f:
00:70:1c:4a:91:2b:a8:76:0b:2e:80:d9:6c:03:d9:e8:9f:24:
e7:6b:43:7e:34:61:2d:ab:b2:c1:45:d2:fa:9c:de:bb:f3:17:
bd:b3:6e:99:26:7c:1a:8d:c9:e9:ce:4c:6b:36:19:ec:18:7a:
5d:e4:a4:f9:83:a5:87:4e:7d:a4:3b:37:39:56:05:3b:70:6b:
5b:0f:08:fc:ab:68:f7:ce:55:43:bc:7d:31:bd:4d:fe:6e:32:
09:3a:02:84:ce:9a:80:55:e9:44:63:fb:64:c1:c1:26:10:26:
ff:b8:b5:b0:59:51:44:17:1b:33:6a:53:a7:f0:8d:d4:79:ab:
fe:25:9b:69:58:d0:45:ff:4c:bc:c6:22:19:86:e2:db:01:bb:
c3:c2:ad:f6:1f:fa:99:52:cd:37:b6:bb:b0:ed:18:35:dc:2d:
f1:3b:12:43:b4:57:63:54:24:40:3d:5d:f6:d9:7a:96:d8:56:
88:8c:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 07:54:51 2024 by rpki-client on console-ams.rpki-client.org