Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263072.roa
File: AS263072.roa (raw, json)
Hash identifier: R0Ug1uSBvSlZY9hgiSVnT15InND+KT/w4D6nLygRQ38=
Subject key identifier: 52:5A:27:97:53:4A:65:8D:25:93:DF:4E:B2:8F:D9:94:DD:64:71:19
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 78C508223E711146E5805CB8025C16561341AB58
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263072.roa
Signing time: Tue 23 Jul 2024 12:10:33 +0000
ROA not before: Tue 23 Jul 2024 12:05:33 +0000
ROA not after: Tue 22 Jul 2025 12:10:33 +0000
asID: 263072
IP address blocks: 168.121.16.0/22 maxlen: 24
186.195.80.0/20 maxlen: 24
2804:950::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c5:08:22:3e:71:11:46:e5:80:5c:b8:02:5c:16:56:13:41:ab:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:33 2024 GMT
Not After : Jul 22 12:10:33 2025 GMT
Subject: CN=525A2797534A658D2593DF4EB28FD994DD647119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:2f:d9:76:db:11:c8:87:12:b6:b5:d2:89:
72:b3:76:cd:02:4e:ea:4d:13:78:15:67:3c:65:a2:
5b:da:9a:56:08:5d:ec:56:20:a5:72:f7:7a:f5:43:
34:65:a0:50:51:d0:be:93:03:2a:0a:98:7b:90:19:
d5:dc:44:a5:54:5d:cb:12:46:5e:53:6b:26:df:ff:
0f:e4:6c:70:97:ee:0a:de:1d:c5:ea:ff:fd:dc:66:
a9:84:90:b8:41:aa:fc:ab:0e:63:33:a8:e1:79:2e:
09:e5:ec:ec:59:3f:ec:5c:b9:e0:f2:b1:d9:55:c5:
87:ff:9a:08:9b:3e:4c:d0:c7:77:0b:88:6c:74:e0:
ac:d3:b0:24:d4:69:fe:de:9c:4b:b9:c4:86:02:9e:
a8:c3:22:5c:8d:88:ea:02:fb:03:58:9a:b7:bb:86:
40:f6:21:4c:08:67:d4:1f:1e:d3:c8:48:8e:e1:44:
e4:93:c0:fd:1c:f3:4f:16:ac:46:f8:44:36:ce:c7:
7e:af:a2:d4:51:52:e4:12:34:54:3b:3d:23:98:af:
54:70:81:28:11:a4:15:f0:f9:e4:0f:fa:dd:9c:3a:
51:d7:c2:f9:57:01:f4:a3:4e:24:d1:ff:fe:6c:d8:
c8:2d:35:53:f4:4a:e4:59:62:a7:49:6a:c5:6d:8a:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:27:97:53:4A:65:8D:25:93:DF:4E:B2:8F:D9:94:DD:64:71:19
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.16.0/22
186.195.80.0/20
IPv6:
2804:950::/32
Signature Algorithm: sha256WithRSAEncryption
81:d7:2c:90:50:39:94:e6:ae:98:fd:6b:f2:b5:63:97:83:9b:
bd:e7:07:25:1e:49:61:10:f5:69:1b:6b:67:a5:0c:ac:f5:48:
a0:00:7c:4b:cb:29:74:78:7a:f5:6f:0d:03:fb:28:29:3f:96:
5a:2f:3e:df:84:23:d4:c4:61:a2:c9:58:f9:30:fe:d6:e1:61:
40:db:4f:8e:53:39:cc:cc:34:7d:c6:b3:df:25:6f:47:af:e4:
46:37:20:00:ec:99:6b:ec:3a:b6:96:aa:f7:bb:1b:83:e9:38:
b4:0f:db:97:55:2a:86:ea:ec:00:39:fb:20:cb:5a:4d:a1:9f:
fa:d9:1d:eb:a7:26:f7:b6:72:86:88:9b:34:9b:bb:3a:1a:55:
d7:b3:c0:53:39:02:0f:91:7c:13:2e:2a:90:0b:0b:61:91:ec:
bd:5e:dc:cc:a9:49:c9:61:3d:f7:3e:b9:73:2b:0c:da:e6:b9:
52:18:c0:5b:df:53:21:ab:8c:2b:4b:ff:86:62:b0:61:ce:fc:
47:98:fe:53:4f:0b:92:b3:48:2c:4a:6e:d0:35:4d:44:e6:17:
78:33:1b:96:ed:de:dd:f5:0f:1c:84:7c:a7:04:9e:e9:88:31:
5f:ab:2a:95:a7:1f:79:f0:54:ca:db:88:ad:77:78:e3:66:42:
0f:5f:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org