Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262700.roa
File: AS262700.roa (raw, json)
Hash identifier: KQRD1o2Wlm5XIVuVS5AvQzM7pbpPRVcTNld1M/6TStc=
Subject key identifier: 66:31:F5:16:5C:C5:0E:F8:02:4A:E6:0A:B8:40:81:D6:53:CB:CF:3A
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 0D582D16B1D778F4230C1480A9AE0CA7195B1AB0
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262700.roa
Signing time: Tue 23 Jul 2024 12:10:31 +0000
ROA not before: Tue 23 Jul 2024 12:05:31 +0000
ROA not after: Tue 22 Jul 2025 12:10:31 +0000
asID: 262700
IP address blocks: 177.137.80.0/21 maxlen: 24
187.102.112.0/20 maxlen: 24
189.90.80.0/20 maxlen: 24
2804:d20::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:58:2d:16:b1:d7:78:f4:23:0c:14:80:a9:ae:0c:a7:19:5b:1a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:31 2024 GMT
Not After : Jul 22 12:10:31 2025 GMT
Subject: CN=6631F5165CC50EF8024AE60AB84081D653CBCF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:48:7c:c3:81:6c:54:f2:e5:3e:bf:1e:e3:
d0:16:76:41:30:43:78:4c:01:44:02:ba:a8:91:0e:
04:aa:94:ab:04:e7:33:c7:15:e0:5a:3f:7b:51:04:
9e:94:5c:39:b7:a1:9a:2e:b7:94:8e:64:f9:d6:59:
b3:88:00:b0:45:dc:53:a6:fb:aa:33:29:bd:43:1a:
14:15:1a:f9:b9:ae:fb:fc:1d:dd:26:1d:12:b4:32:
cd:f9:0c:bd:14:2d:71:9c:11:ee:b6:2b:32:aa:93:
9c:ec:1b:28:61:fd:8b:3c:25:34:e5:d2:17:06:e1:
ff:1e:d1:ac:29:5b:72:ca:d5:b1:26:f5:b7:43:36:
ca:00:cc:17:18:c9:6e:f8:91:da:55:b5:28:af:4b:
08:16:ae:1b:41:86:29:f9:32:19:d7:63:3a:e9:2e:
b9:ca:0f:d9:20:0d:0a:f8:74:63:48:db:10:f9:ab:
44:77:64:27:41:17:22:1b:bb:af:61:61:48:cd:33:
32:14:5b:f5:83:3c:4f:ef:6b:27:1d:43:93:53:94:
63:8b:ca:90:90:48:b2:bc:0b:68:d5:54:a0:b0:e0:
03:a0:ce:ec:78:71:cd:4f:e4:5b:a6:1c:e7:7b:4d:
ff:1b:d8:4a:5d:f6:be:a9:21:69:37:21:c5:06:a1:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:31:F5:16:5C:C5:0E:F8:02:4A:E6:0A:B8:40:81:D6:53:CB:CF:3A
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.80.0/21
187.102.112.0/20
189.90.80.0/20
IPv6:
2804:d20::/32
Signature Algorithm: sha256WithRSAEncryption
5c:2a:6d:ba:9c:2b:02:c5:a9:73:53:f7:8a:20:b5:88:b2:43:
40:a5:6a:85:60:d7:cb:f4:7f:6f:30:3c:32:05:a6:8c:d0:a5:
a4:a5:14:52:5e:18:c3:49:6e:da:97:c1:f9:54:87:e3:0f:18:
f6:d4:2e:22:47:6a:f7:da:de:3b:cb:9f:a5:f5:d7:d5:85:e8:
0c:cc:db:01:b1:7e:f7:74:fa:fc:da:da:69:bc:66:f6:e8:4f:
10:b1:74:42:84:0b:ea:a5:9b:fa:f2:d8:40:12:46:10:f4:a7:
b3:59:d2:11:76:a1:b2:a7:99:0e:d8:4b:0b:c0:d6:ac:c3:fa:
2b:c6:f6:ea:cf:84:c4:ce:15:dc:80:62:7b:f7:4e:1b:e9:7b:
08:d8:87:22:5c:d6:60:bd:5d:a9:4d:5e:c9:92:21:7b:11:99:
35:78:2f:1a:b4:fc:60:8c:b6:89:0d:b7:58:e0:64:48:da:e0:
43:ea:23:42:7e:f9:26:0d:24:ac:17:c5:8e:f8:00:cd:04:bd:
f2:7e:7f:3a:92:e8:9e:1f:39:1a:28:2d:06:e0:e4:ed:5f:88:
dc:f9:48:39:1d:03:94:fd:68:8f:54:72:35:ab:11:ed:7d:63:
4e:c8:37:6f:e7:58:e5:23:83:ca:16:0a:c2:b0:86:65:e9:49:
93:58:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org