Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263032.roa
File: AS263032.roa (raw, json)
Hash identifier: W72Z+AedkaxOZCp0Bf0qpdfNqqjJ6lN+1Y8ds7/oNBg=
Subject key identifier: 26:2F:7D:D2:AD:C5:4C:78:9F:BF:17:F1:5D:5A:7E:65:5A:44:6F:66
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 303E25768FA1FA9084E5EB5F5DD5C28007B8C139
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263032.roa
Signing time: Tue 23 Jul 2024 12:10:34 +0000
ROA not before: Tue 23 Jul 2024 12:05:34 +0000
ROA not after: Tue 22 Jul 2025 12:10:34 +0000
asID: 263032
IP address blocks: 168.90.44.0/22 maxlen: 24
170.238.192.0/22 maxlen: 24
177.137.56.0/21 maxlen: 24
186.250.36.0/22 maxlen: 24
2804:2d24::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3e:25:76:8f:a1:fa:90:84:e5:eb:5f:5d:d5:c2:80:07:b8:c1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:34 2024 GMT
Not After : Jul 22 12:10:34 2025 GMT
Subject: CN=262F7DD2ADC54C789FBF17F15D5A7E655A446F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:69:96:e0:89:aa:7c:66:e0:27:e5:b7:7a:
b9:ef:1f:4b:3f:38:9f:f2:83:c5:66:5e:16:9d:54:
30:f5:51:ba:56:8a:10:68:0f:ac:33:81:31:05:6d:
88:ec:3e:3a:84:27:3f:d4:19:d1:77:4a:a4:2c:bd:
91:fc:47:5f:fe:d3:c7:93:b5:7a:57:ec:5f:27:51:
8e:ba:96:e1:5b:59:37:04:31:80:97:f7:3f:c5:3f:
38:f8:3b:86:4f:79:97:1d:e0:95:87:ef:d9:72:16:
d4:20:a8:46:0a:13:d1:3e:a2:6f:b2:f8:ce:15:d5:
79:53:88:0f:ff:80:aa:ec:da:eb:ef:d5:fa:72:9a:
63:90:f5:a0:f9:7c:2f:74:01:06:9f:00:c0:e7:93:
db:11:a7:f4:7e:0f:a7:97:19:a8:ad:14:e6:78:d7:
83:7d:82:67:94:b1:20:c8:85:a3:4a:10:98:53:c9:
ab:82:46:fb:bd:a0:63:ef:f7:5f:45:0c:76:7c:e9:
8d:e2:06:c2:67:78:fb:58:08:ca:56:2e:79:97:a0:
32:25:55:fb:0e:07:8c:ed:91:5d:5f:4e:64:8d:89:
fa:e3:f1:9f:63:09:4c:0d:80:14:76:7f:a3:31:9d:
c8:a6:6b:f2:b7:c1:1f:73:8a:46:16:5e:5f:ea:b3:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2F:7D:D2:AD:C5:4C:78:9F:BF:17:F1:5D:5A:7E:65:5A:44:6F:66
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.44.0/22
170.238.192.0/22
177.137.56.0/21
186.250.36.0/22
IPv6:
2804:2d24::/32
Signature Algorithm: sha256WithRSAEncryption
61:a9:59:24:67:a4:f0:44:62:be:14:4c:03:2e:8c:22:33:88:
ae:44:a2:01:62:55:cc:bb:3e:54:8f:70:32:8e:e5:36:dd:b4:
5e:1d:92:24:01:e9:88:5d:e2:33:3f:89:02:fd:21:04:a6:59:
37:1d:8e:5c:dd:92:70:fb:2a:bf:98:8c:c0:42:9b:68:d2:ee:
cc:98:35:6c:eb:2e:59:dd:6b:6b:27:87:0a:7d:65:8b:2f:f7:
d8:4c:df:db:07:de:76:da:32:8f:15:ea:d7:45:9b:5b:35:71:
29:78:ec:ed:08:ba:b6:ba:9e:a0:a8:35:1b:2b:c2:fa:8d:31:
9d:86:fd:48:8f:07:1b:fd:05:1d:5a:67:1e:f9:1d:a1:c1:97:
eb:25:50:bb:67:c7:92:1b:33:cd:31:34:7e:59:75:be:47:35:
5a:1a:47:ac:ef:ab:29:57:12:58:d7:d0:5b:5f:27:ca:7f:e3:
c1:90:c5:39:76:a2:14:12:24:47:ce:2c:28:17:b6:7d:b0:e0:
e5:c5:fb:37:8f:c0:7a:e7:b9:b5:e2:10:fb:cd:19:4f:2d:69:
06:54:19:71:f7:e8:7a:2c:8d:ed:59:9c:93:12:9e:9e:9c:29:
1c:64:c8:c8:8c:20:82:f1:5d:08:ab:54:79:1a:2f:28:aa:0f:
88:2c:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org