Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262794.roa
File: AS262794.roa (raw, json)
Hash identifier: +Uv7Vax88nOvAy+GAqreGIZVuLUujOaSGHQ1XTGO8BM=
Subject key identifier: B6:C8:E5:C4:39:85:20:67:58:50:42:54:D0:A9:02:2E:AA:DC:68:3D
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 54E9E4350BE73BB88096F3DBE6C6D893ED113868
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262794.roa
Signing time: Tue 23 Jul 2024 12:10:38 +0000
ROA not before: Tue 23 Jul 2024 12:05:38 +0000
ROA not after: Tue 22 Jul 2025 12:10:38 +0000
asID: 262794
IP address blocks: 143.255.244.0/22 maxlen: 24
168.195.84.0/22 maxlen: 24
201.76.112.0/20 maxlen: 24
2804:2b6c::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e9:e4:35:0b:e7:3b:b8:80:96:f3:db:e6:c6:d8:93:ed:11:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:38 2024 GMT
Not After : Jul 22 12:10:38 2025 GMT
Subject: CN=B6C8E5C43985206758504254D0A9022EAADC683D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:ce:06:9c:f1:72:7b:6c:03:90:31:31:9f:
1d:9f:34:1a:53:b9:20:cc:6f:b7:f2:11:73:aa:de:
1c:74:76:c5:af:49:5c:20:2e:e2:3d:dc:cf:37:86:
fd:33:c1:b7:44:f8:0a:da:a0:33:92:fe:e1:93:9c:
f8:a8:c3:b4:67:bc:d3:d8:b3:b8:c4:6c:de:f4:83:
9c:fb:8b:bf:60:c0:ac:3e:4e:aa:25:0f:e7:82:7c:
67:26:5e:64:8e:d9:10:aa:65:94:0e:f9:58:12:50:
62:36:5e:17:b1:f3:c0:28:e0:ea:0d:1d:50:3f:ab:
16:65:1a:ad:e3:ac:f4:e1:d2:81:86:99:b6:d9:51:
03:05:6d:62:c7:6c:f4:ad:4a:87:72:27:46:c5:d1:
c2:40:5c:c7:fa:63:e0:a5:52:0e:9e:0a:52:f3:fc:
4c:15:ca:2f:f7:04:9c:1a:a0:01:1a:36:af:34:ea:
04:0c:11:6b:a0:78:2d:70:43:ee:8f:30:0e:39:51:
67:99:79:2e:ad:0b:70:d9:35:01:e0:dc:dd:03:08:
c5:66:04:8d:f3:a4:18:03:ef:5f:af:36:a0:db:22:
98:46:13:16:6e:b3:03:3e:f4:e8:e1:c0:da:b5:d2:
ed:ff:3b:51:ec:b0:b7:a6:cb:46:70:0b:7f:b9:64:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:E5:C4:39:85:20:67:58:50:42:54:D0:A9:02:2E:AA:DC:68:3D
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.244.0/22
168.195.84.0/22
201.76.112.0/20
IPv6:
2804:2b6c::/32
Signature Algorithm: sha256WithRSAEncryption
3e:ab:47:41:de:a3:56:90:c3:3a:45:dd:84:3c:99:f3:56:3c:
7e:43:57:c5:14:59:31:69:3b:39:ad:76:3d:a0:f6:84:fe:e7:
52:97:77:a9:ac:05:94:3e:3e:4b:10:27:c3:73:70:bb:07:68:
bd:1a:80:cd:7e:52:97:ee:8c:87:12:bd:58:18:72:2b:5d:ab:
96:dc:c8:87:1c:15:b9:e3:31:19:a7:36:07:ed:86:06:44:61:
62:8d:3e:fc:7c:6e:b4:c5:fd:8a:dd:59:f6:4d:08:6f:40:83:
28:ac:e1:9f:48:dd:c0:d2:21:04:39:c4:22:bc:8f:2e:5a:aa:
75:33:9b:97:e3:b6:23:86:ce:3f:6f:a7:dd:2a:10:01:f8:04:
56:19:93:3e:9c:c3:5d:7b:cb:04:a7:35:40:b3:17:fe:5d:98:
5c:b3:61:a0:1b:27:08:d3:d7:39:ab:eb:4d:c0:8d:41:7d:e7:
01:44:32:e8:4a:de:12:b5:47:db:dc:b1:14:6e:cc:09:77:3c:
f2:21:3b:2f:1e:8e:79:d8:94:35:84:53:e5:e0:ce:a8:ce:32:
04:d0:b7:56:c9:72:dc:9e:90:77:2b:ca:11:16:dc:4f:1e:89:
62:0b:44:8d:89:5d:35:82:35:10:b5:2d:48:1f:0a:d3:be:49:
7f:0f:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org