Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32362e302f32332d3233203d3e20323635303835.roa
File: 3137302e3233332e32362e302f32332d3233203d3e20323635303835.roa (raw, json)
Hash identifier: xcsU/t/XiwCCCx0x0tOszva+jJ66bDKlkeBPF0tSquc=
Subject key identifier: 65:9B:4E:03:A8:4F:8C:84:77:7B:EA:82:CB:9F:12:DC:F5:94:1C:13
Certificate issuer: /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial: 09DF075B6AD92C4A0422A165851E34906A0390
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32362e302f32332d3233203d3e20323635303835.roa
Signing time: Mon 29 Apr 2024 20:33:32 +0000
ROA not before: Mon 29 Apr 2024 20:28:32 +0000
ROA not after: Mon 28 Apr 2025 20:33:32 +0000
asID: 265085
IP address blocks: 170.233.26.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:df:07:5b:6a:d9:2c:4a:04:22:a1:65:85:1e:34:90:6a:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Validity
Not Before: Apr 29 20:28:32 2024 GMT
Not After : Apr 28 20:33:32 2025 GMT
Subject: CN=659B4E03A84F8C84777BEA82CB9F12DCF5941C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:54:6e:bd:c3:52:e6:41:25:c8:19:5e:08:
0d:0d:7f:47:8f:a6:2f:7f:cb:e8:f6:32:5c:4b:bf:
4f:a5:ec:fe:d1:53:5c:1a:9c:4d:57:15:08:0e:2d:
35:8a:3e:4e:28:56:7a:ee:7c:9e:84:7f:2a:13:84:
95:92:1d:1c:93:e4:e6:1a:22:e8:1a:cb:e1:db:90:
02:e1:aa:c0:5d:2f:dc:c3:19:15:9d:01:e0:d7:fe:
d6:7e:7f:e0:fe:78:a7:8e:f6:b5:34:c9:f1:bc:9b:
be:a1:d0:b0:6d:05:b8:59:15:79:7c:1d:65:35:0d:
29:08:3f:e2:64:6f:91:4f:2e:05:b0:c0:f5:df:aa:
58:e2:9e:70:af:ce:b5:32:ed:e2:a0:81:3c:8b:5f:
eb:c3:11:0a:12:93:38:40:a9:6e:f9:14:05:4d:64:
32:99:e8:b6:63:13:90:31:0c:40:c0:af:ee:1f:27:
b0:4d:b0:bd:4d:fa:07:cc:66:64:d3:14:13:3b:eb:
8a:6b:a1:dc:ca:f7:29:b4:3b:98:1a:d4:e0:cc:c9:
54:e8:d6:f3:74:46:db:ae:3a:3b:0f:be:16:09:56:
75:10:19:d9:56:08:a2:c6:74:3c:35:65:ef:5a:6b:
67:31:ea:ba:90:99:c0:4f:dd:20:68:7f:d1:6d:09:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:4E:03:A8:4F:8C:84:77:7B:EA:82:CB:9F:12:DC:F5:94:1C:13
X509v3 Authority Key Identifier:
keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32362e302f32332d3233203d3e20323635303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.26.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:90:10:83:61:d1:12:1b:df:8f:69:a6:6d:1f:f8:58:ca:47:
ab:6a:c5:9c:f2:de:68:65:34:b1:23:42:34:07:c1:ef:84:6b:
ae:a6:7c:0e:41:91:05:d1:76:a1:b5:64:8c:22:c3:e0:b3:83:
47:13:7a:ac:5d:5b:02:41:52:03:6d:9d:3c:e3:3e:6b:39:d9:
c9:44:ca:8c:b4:00:e0:06:ce:3a:9f:59:33:46:e8:ff:9e:f8:
58:7d:a0:41:31:10:48:45:78:51:8a:2c:0a:fb:74:d8:32:72:
68:f1:78:af:93:17:fd:4f:30:97:1f:23:dc:5e:f8:62:0c:46:
e5:58:78:45:cc:81:b1:e6:b2:b3:40:49:44:d9:96:6b:f6:73:
4a:df:26:37:ed:d5:64:d7:46:62:1d:c7:90:80:bf:c8:14:c3:
a8:a6:15:e4:49:08:48:36:41:4d:a9:f6:c4:ba:21:13:27:c5:
30:2e:3f:80:16:4f:d3:f5:06:08:80:a8:91:d8:0e:18:c6:ee:
6e:0b:33:bc:50:2e:d9:e8:db:65:22:eb:86:27:2c:b9:cc:af:
7b:5c:49:03:a6:0b:e6:ce:f6:1e:0f:08:d2:50:87:f8:7e:8b:
e4:7f:af:66:17:17:1f:94:f4:65:ed:ba:71:32:16:65:ca:25:
e1:e7:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 07:54:51 2024 by rpki-client on console-ams.rpki-client.org