Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32372e302f32342d3234203d3e20323635303835.roa
File: 3137302e3233332e32372e302f32342d3234203d3e20323635303835.roa (raw, json)
Hash identifier: XUZAi5BnDJJAUuV+QeL+yYMGE/GbamjS84mHaSj0Ju4=
Subject key identifier: 71:3E:5D:6E:D0:7D:C9:C1:8E:4B:EC:19:B8:35:20:9B:DB:F4:62:B4
Certificate issuer: /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial: 7420114798C6A6A46A6D3A0FB08D652D5BFA3E99
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32372e302f32342d3234203d3e20323635303835.roa
Signing time: Mon 15 Apr 2024 12:25:37 +0000
ROA not before: Mon 15 Apr 2024 12:20:37 +0000
ROA not after: Mon 14 Apr 2025 12:25:37 +0000
asID: 265085
IP address blocks: 170.233.27.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:20:11:47:98:c6:a6:a4:6a:6d:3a:0f:b0:8d:65:2d:5b:fa:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Validity
Not Before: Apr 15 12:20:37 2024 GMT
Not After : Apr 14 12:25:37 2025 GMT
Subject: CN=713E5D6ED07DC9C18E4BEC19B835209BDBF462B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:72:ab:01:54:b3:ab:82:a1:d9:c9:c6:c0:
e3:b6:22:ae:f7:12:9c:02:8a:bf:a9:f5:06:27:d7:
7b:fd:ae:82:30:8d:62:56:c7:ed:5b:cf:78:f8:62:
67:78:93:3f:f2:cf:69:d8:b9:08:52:eb:d5:42:1a:
71:8b:ae:29:30:88:13:ee:15:86:5f:da:3e:2f:e6:
61:bf:d0:d3:ec:c6:58:3f:50:f1:c0:d8:d1:40:ce:
09:98:26:74:2b:b8:4b:1c:d0:02:5b:c1:0d:2d:24:
5d:d4:7f:0c:e7:77:a0:a4:98:44:fe:8b:73:57:2e:
51:5a:18:6e:5e:f1:8e:4a:78:6f:4c:ff:ab:04:b1:
b5:d0:52:b4:ef:bb:17:92:e2:09:56:f7:7f:87:91:
1c:75:e4:42:5f:b3:fb:ea:90:5e:70:bc:0b:d1:12:
5c:af:37:46:d1:a9:53:d7:5f:db:a5:00:0a:a2:6f:
af:e3:c8:cc:94:03:d3:20:ea:af:e2:63:83:8c:c4:
aa:8f:fe:99:50:15:fc:a3:e6:a5:fc:46:96:9a:2b:
3f:62:d7:9f:35:72:a2:05:1b:a4:7d:90:16:2e:ee:
fc:14:b8:1c:55:43:d4:12:be:a6:14:47:5b:21:ad:
df:6c:42:ee:ed:b2:99:62:47:98:0e:b9:aa:30:e8:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3E:5D:6E:D0:7D:C9:C1:8E:4B:EC:19:B8:35:20:9B:DB:F4:62:B4
X509v3 Authority Key Identifier:
keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32372e302f32342d3234203d3e20323635303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.27.0/24
Signature Algorithm: sha256WithRSAEncryption
70:af:c1:ba:8a:2f:ec:d6:8b:5d:f3:45:25:23:8c:3d:c1:16:
6c:ed:a1:cc:ae:3c:34:52:0f:53:c3:12:5d:1a:3f:f6:15:a8:
0e:02:14:8f:55:e6:a4:ca:77:7b:61:6e:42:06:a4:ad:e5:96:
2f:56:3b:2c:e6:95:0e:b4:db:ba:89:eb:3f:88:d4:c3:0f:70:
9e:69:db:59:a8:bc:d5:5b:51:cb:31:d3:36:69:03:e5:2b:40:
e2:57:de:68:aa:34:3f:06:02:ce:b3:0f:2d:b2:a7:8c:53:a9:
b4:dd:1f:82:a6:94:b0:d9:09:54:ff:03:b7:da:7f:d1:0b:04:
ff:ac:79:ad:de:d9:ea:31:91:3c:60:c9:b3:92:0c:40:5a:a7:
f0:69:ec:78:49:55:ff:de:b1:ba:76:3a:61:2b:59:80:e7:2d:
2c:0b:7e:6f:c4:2d:53:fe:f5:ca:aa:21:55:11:d2:af:ee:b9:
79:4c:47:55:76:80:62:4a:1d:c3:96:60:cb:85:c8:ad:68:7b:
98:43:17:e7:5d:1e:0c:19:f5:31:37:8a:5d:1e:a4:cf:96:3b:
fb:fa:a9:6f:25:3e:06:9c:ec:a0:10:5e:64:f9:b0:c7:7e:1e:
4e:d1:d6:30:c6:1d:bf:3b:a0:4d:21:50:03:2b:7b:11:64:7b:
28:55:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 06:47:04 2024 by rpki-client on console-fra.rpki-client.org